Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/00e72dbe-24fa-424d-949e-6555f05417d9.roa
File: 00e72dbe-24fa-424d-949e-6555f05417d9.roa (raw, json)
Hash identifier: v7kV1qyxMlaD0SMp7eflBnreEAcl1SNdlCuuKgA3UeM=
Subject key identifier: 7A:D7:38:83:02:65:21:FA:01:40:AE:3E:5B:09:BA:A0:85:34:17:BD
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 31EFABCA00EB465EABF443FCF1EA9CAB08CD6ADF
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/00e72dbe-24fa-424d-949e-6555f05417d9.roa
Signing time: Mon 09 Nov 2026 16:28:37 +0000
ROA not before: Mon 09 Nov 2026 16:28:37 +0000
ROA not after: Sun 07 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.7.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ef:ab:ca:00:eb:46:5e:ab:f4:43:fc:f1:ea:9c:ab:08:cd:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 9 16:28:37 2026 GMT
Not After : Feb 7 23:59:59 2027 GMT
Subject: serialNumber=952fe531a06d412238841eb7e5b77ca3100659259d23b6103fdaae40db475e51, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:a6:be:98:bf:6b:53:11:2c:ad:09:1a:c6:
e0:a9:36:d4:d1:05:72:2c:45:21:c0:4c:bd:d5:41:
49:85:cd:17:ba:e6:df:7c:5d:a2:29:ca:96:f1:5a:
87:92:c5:88:24:8b:ab:58:5c:85:fa:d9:d5:5a:e1:
81:cd:7e:51:c4:ca:13:87:bb:29:e5:32:70:be:bf:
8d:02:22:7b:75:36:a5:f0:22:74:e9:85:54:f7:9e:
53:3f:76:2b:06:56:8e:44:af:4f:27:6a:56:39:c9:
49:6d:7c:3f:22:4c:b3:65:36:25:8f:96:bd:28:00:
2f:66:f8:2c:38:5d:dd:b8:60:00:1b:13:e9:40:8c:
5e:c8:0d:06:62:c4:05:00:b2:52:b0:97:87:64:f2:
71:3f:e4:9b:db:7d:25:28:d8:f6:63:c7:0f:bf:a5:
e2:57:9b:9d:cf:f0:05:cf:f3:41:34:7c:e9:cd:ba:
41:e1:64:a1:c9:d4:84:d2:c9:93:7c:d6:0a:9d:45:
e5:a4:34:96:ff:2a:94:89:06:f8:94:07:d9:05:5b:
5a:93:3d:70:97:fe:28:7e:fc:b7:94:66:27:ac:a0:
ac:bd:b6:d1:3a:3c:ca:a1:6c:f8:58:02:0f:5b:ed:
db:79:ac:c6:5a:9f:3a:4e:87:54:86:2f:05:11:4d:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:38:83:02:65:21:FA:01:40:AE:3E:5B:09:BA:A0:85:34:17:BD
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/00e72dbe-24fa-424d-949e-6555f05417d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.7.0/25
Signature Algorithm: sha256WithRSAEncryption
24:a7:21:0f:58:c0:9e:5e:3e:56:01:71:96:09:0c:a2:a6:79:
7c:6b:6b:49:02:0a:0d:c1:c9:b1:93:ef:70:10:f4:45:7b:69:
a4:67:9a:6b:9f:e7:99:28:c6:82:24:91:e2:d0:1f:e7:b1:9b:
59:a5:5d:09:81:b2:92:10:19:70:44:fa:06:f5:69:24:23:a5:
b5:d1:1f:48:4d:97:cc:c7:c2:27:e3:e8:f5:8b:df:4a:90:fe:
53:5a:c5:40:bc:48:de:73:34:03:07:d2:08:fe:7a:8a:37:52:
12:67:28:cc:fb:4f:9f:6d:51:bc:2c:0f:bc:27:b1:d1:a7:94:
e8:f7:67:31:19:2f:9e:91:5c:a4:72:50:e1:06:1c:66:63:8f:
1d:a5:63:db:02:44:36:f9:51:a7:81:4e:88:7e:ae:a0:37:f6:
db:e1:cf:ab:cb:8e:59:c9:25:e1:5f:a9:ff:ea:8f:4d:f8:b9:
dc:85:c7:bc:a5:ae:33:e8:a8:00:7e:f4:37:46:dc:94:43:a1:
b9:ff:ae:4d:b1:d2:70:80:3f:9f:82:dd:5d:3f:b8:f0:e7:a9:
15:df:d2:4d:6e:f7:88:15:9d:af:7c:8d:38:58:89:60:39:d7:
2e:12:12:f6:f8:df:4d:ae:19:a2:35:c6:92:c5:b4:1a:64:b2:
fc:13:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 17:03:28 2026 by rpki-client