Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
File: df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa (raw, json)
Hash identifier: AJVRSNFtJ7cCnnCoSwCng70hfFtr6ErJTi004DIIYhs=
Subject key identifier: 3F:DE:C9:1D:B0:D2:37:03:57:45:9E:BA:26:86:62:10:60:D1:21:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7840F38997A1DF046533E0821C391F7901BDA943
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
Signing time: Fri 08 May 2026 03:20:39 +0000
ROA not before: Fri 08 May 2026 03:20:39 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:40:f3:89:97:a1:df:04:65:33:e0:82:1c:39:1f:79:01:bd:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:39 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=bb65df7fb393d5f7956d8da172d9dc35bb8d4542458eb0a3a1b0a232d3b66553, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:de:7c:45:e0:6a:5e:11:c2:8f:3c:90:da:
2e:d9:8e:fa:47:fb:5e:56:89:b2:2c:4e:48:8a:c1:
90:c4:71:87:09:cc:84:52:42:eb:0c:1e:72:7e:96:
cb:b3:7d:a4:96:fb:08:a8:15:25:0c:9c:9c:05:88:
f6:a0:65:6d:0b:35:71:73:16:e8:35:ee:30:6d:b0:
b5:7e:e6:1a:63:96:73:ae:1d:3d:1c:0b:29:60:1a:
06:c1:15:cd:15:3b:5a:90:86:94:48:9f:11:b3:d3:
87:c5:32:77:05:28:ad:e8:39:6e:c2:09:5f:b1:5d:
3f:76:9c:56:01:0e:8f:e2:00:16:80:d8:34:1e:3b:
b7:cb:a5:11:d7:c0:9c:c6:f4:a8:f3:b0:77:c1:87:
ae:2c:47:6a:90:76:64:72:9d:88:17:cf:f1:e1:c0:
14:67:8b:c9:5a:e0:c9:12:7e:67:55:21:ea:bb:ef:
aa:31:37:60:70:67:73:05:dc:df:11:e9:99:15:7a:
d9:c8:bf:eb:8e:f7:a9:15:36:e1:36:93:4f:0b:ae:
01:2c:36:38:26:e1:7f:9e:90:8c:47:ef:1e:51:7a:
90:ac:1b:fb:76:4f:43:4a:65:67:6d:81:f0:bc:23:
8b:42:b7:46:cc:02:57:bc:ef:cf:c6:51:50:a7:34:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:C9:1D:B0:D2:37:03:57:45:9E:BA:26:86:62:10:60:D1:21:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.200.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ae:69:54:1a:a8:09:e4:f7:27:21:b0:f3:f8:fc:67:9f:90:
f5:d5:fd:83:e4:43:7f:bb:1c:b9:3b:9b:94:ae:e1:e3:ef:56:
ba:86:a1:de:3e:b9:83:15:f0:53:5d:8d:0b:6f:29:a9:13:90:
c9:b8:4c:ff:ff:aa:bb:b5:cb:aa:8c:40:c1:12:3b:86:01:a4:
51:6f:15:2d:0a:06:b7:f0:38:06:f5:cd:2a:d9:7f:99:b4:48:
2e:d5:01:7a:ab:69:09:92:1f:69:80:4e:a8:a2:df:ee:f9:35:
ae:1c:cb:c9:8d:76:cc:c7:0d:28:43:30:e6:32:40:fb:ea:70:
45:1a:b7:d0:bf:d0:38:49:3c:87:ed:c2:10:8e:43:ee:24:08:
61:ca:3f:ef:3b:7b:ab:32:eb:8d:f3:b0:56:db:55:37:8d:9a:
82:a8:6b:82:e6:91:bf:ad:d5:cb:50:99:8c:e5:bc:05:2c:f3:
91:a2:14:6e:d8:90:58:5e:1d:11:53:d9:a2:34:94:8c:30:80:
d6:8e:6e:20:62:35:de:71:97:97:78:6d:18:e0:27:8d:11:0d:
b8:24:7e:dc:c1:b5:26:ba:aa:df:21:83:69:1e:95:4a:ae:4c:
b3:31:f6:07:ae:7e:00:58:e0:eb:ec:3a:86:f9:86:41:49:1c:
35:d3:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:28:35 2026 by rpki-client