Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
File: d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa (raw, json)
Hash identifier: wSgsEOOBr5+n/4WL8vbESOkDDuYlTVBMoSFwhHaWGaQ=
Subject key identifier: 35:5F:34:59:44:BD:37:4D:2D:12:15:6F:C8:34:4C:9B:1E:B7:A8:56
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 187EAE725541A26FF4902A4C073FE45FDB4DD693
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
Signing time: Fri 08 May 2026 03:20:04 +0000
ROA not before: Fri 08 May 2026 03:20:04 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7e:ae:72:55:41:a2:6f:f4:90:2a:4c:07:3f:e4:5f:db:4d:d6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:04 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=1e6ccf4c1246149cb51d7f49b4428559c063cae4589e7e8e88919628d4771e93, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:5b:9e:27:2b:da:a6:b0:e0:0b:6f:1c:7d:
2f:73:72:9e:f4:bb:0a:30:28:26:4d:36:c6:d5:6e:
5d:93:5e:cf:9a:76:5d:14:1b:eb:c2:b8:8e:9c:9d:
e1:19:23:96:d9:ff:c6:e8:5f:dc:8a:21:06:86:5e:
22:83:15:c3:73:db:c0:42:e5:bb:18:9e:5b:4c:fc:
d4:0f:24:a9:f4:b5:08:b4:78:5c:c8:22:c5:09:85:
b4:f7:0f:49:3e:94:c1:ab:dc:eb:1a:f8:28:c4:89:
5a:8a:cd:46:79:f3:02:36:a1:f9:d8:69:e4:11:1b:
76:71:80:5f:84:11:a4:1c:a8:c8:c6:5b:b1:89:c4:
06:76:fd:95:91:48:a5:3e:38:d6:df:f2:fd:91:6b:
3e:ef:43:3e:5d:75:be:6f:8c:65:29:19:45:42:60:
73:40:26:78:87:68:65:48:62:1e:39:a8:e8:a2:75:
7b:60:f2:d4:4f:fd:40:3a:fa:e8:90:2d:44:98:86:
ef:ff:6c:44:7a:e4:9a:2d:e6:87:46:77:42:89:9e:
56:cd:18:8a:ad:f8:54:a8:ca:81:d3:d0:d1:20:6d:
56:02:20:ac:cf:5e:e7:d2:55:9c:08:be:8a:24:bd:
e6:14:92:ef:b6:f1:d7:19:d4:28:86:b7:22:a0:69:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:34:59:44:BD:37:4D:2D:12:15:6F:C8:34:4C:9B:1E:B7:A8:56
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:0f:c1:e8:d1:8e:c0:e0:22:cf:c8:e1:98:49:27:75:dc:52:
3f:0f:d1:eb:99:2e:09:c7:87:e9:37:67:0b:cb:44:d5:d7:ac:
2e:a2:71:31:5d:fb:27:bb:9a:5e:1b:46:c6:77:0d:ac:97:6b:
26:da:72:09:b9:de:1d:4c:0c:99:1f:32:2f:f9:e6:21:3f:74:
7a:da:a7:e0:ba:93:82:a9:00:bf:bb:4f:3e:74:28:6f:b0:05:
60:7e:8d:24:42:43:7a:c0:31:32:3f:bb:9f:cc:de:8d:ec:68:
f8:d4:6f:e3:14:18:10:fa:73:ce:53:8d:18:4f:88:d7:6e:cb:
f1:c2:f1:2d:9e:0e:a7:3a:40:ea:0a:d4:f2:09:46:f6:f3:5d:
63:26:5e:28:be:fa:cd:1d:ab:bd:8b:80:0d:bd:2b:77:44:98:
8d:70:5e:26:af:f0:88:0a:4c:89:ba:49:54:ae:16:6d:83:79:
e8:b2:22:79:d9:dc:38:44:88:65:2a:3f:78:00:f2:65:81:bf:
c1:24:8c:02:7e:b3:e7:d9:cd:04:6a:f0:4f:61:1a:85:2d:64:
e3:34:75:04:9b:4b:cc:0c:b7:46:07:bb:50:e2:ec:f6:af:0c:
34:a0:71:bc:49:f2:19:88:81:4d:9a:39:a5:cf:99:29:62:eb:
60:a3:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:12:51 2026 by rpki-client