Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/1db1a239-ea71-460f-8b68-0b3fced0f62b.roa
File: 1db1a239-ea71-460f-8b68-0b3fced0f62b.roa (raw, json)
Hash identifier: LR/RpItxbJJlI75Qg1A9HvdJTsqD+h31FO7uQzgjU8c=
Subject key identifier: 0E:09:70:B9:BA:C0:9C:E6:BD:3E:C8:B0:B7:FD:3D:0C:C6:B1:86:86
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 5A699FF744A303DAD770B3B76ABCEE3E185DD01A
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/1db1a239-ea71-460f-8b68-0b3fced0f62b.roa
Signing time: Fri 06 Nov 2026 11:37:17 +0000
ROA not before: Fri 06 Nov 2026 11:37:17 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:69:9f:f7:44:a3:03:da:d7:70:b3:b7:6a:bc:ee:3e:18:5d:d0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 11:37:17 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=44558096ec26afb703f14e5a6875468902359c05bfa1e78aa0197d00f9027576, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:80:67:ba:d6:fd:6d:d4:a7:1c:f8:f7:c7:
d3:4c:96:56:1d:4c:eb:2f:87:50:9f:7f:94:3e:a4:
b3:c4:94:ff:d9:57:26:77:64:73:3a:ee:0b:d5:be:
1a:9b:db:91:74:83:33:63:70:ef:ec:bc:b0:f9:3e:
5e:3c:c4:f8:8d:b1:88:11:56:3e:5e:98:b7:04:0e:
25:49:f0:02:76:0c:bb:b0:51:13:5c:8f:43:4d:2f:
2e:22:23:6c:e3:b5:cc:d1:b6:79:5c:f7:98:66:82:
8c:0e:5b:0f:d8:a1:2e:7a:8a:2e:e3:1e:74:0e:d6:
14:43:eb:59:ee:ea:e6:8d:cc:6a:2b:35:48:ec:8a:
14:82:34:d3:33:3f:a1:6f:5b:ca:e2:5b:2c:89:5d:
60:0c:eb:3f:3d:98:59:e5:7b:b7:1b:a7:27:f7:a4:
a0:d1:5a:0b:07:ec:8e:3a:8b:79:10:1f:66:b4:08:
a0:27:52:7d:26:3b:a4:c6:ad:da:31:9a:af:44:b1:
00:8f:ad:21:f4:de:28:03:33:48:aa:82:47:85:d1:
12:40:41:03:e3:7d:02:c8:2b:4e:89:08:ef:06:24:
d7:db:91:c5:23:3c:0b:b7:9b:1c:f0:0c:89:01:c2:
37:4d:15:0c:70:f5:f2:6c:2b:87:34:a3:e0:63:40:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:09:70:B9:BA:C0:9C:E6:BD:3E:C8:B0:B7:FD:3D:0C:C6:B1:86:86
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/1db1a239-ea71-460f-8b68-0b3fced0f62b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:73:97:e4:46:5a:38:da:e9:09:c0:bf:a7:36:c8:77:25:67:
a0:f4:8f:62:d1:5b:f5:3b:b3:1a:50:de:a6:45:77:52:12:77:
1c:d9:06:df:7a:2c:8a:09:67:5e:a3:a7:7c:db:08:0d:14:3d:
b2:d3:f7:d9:68:76:f1:28:fc:c6:66:2b:42:b5:0d:18:f2:4b:
c8:10:b5:da:cc:e8:72:6d:1e:ad:98:c9:3f:6b:f2:fd:70:f4:
3b:4a:8f:c3:a6:fb:d4:29:87:d6:ff:62:d3:a4:f5:b5:19:e6:
4c:c3:1e:a5:09:5a:e9:ed:54:d1:2c:f3:75:df:22:e1:13:e7:
50:11:1a:83:27:2a:bc:4a:ab:08:60:5e:05:ac:31:17:af:33:
79:30:cb:3a:29:5b:1f:af:dc:a9:16:96:47:57:26:4a:c4:79:
32:ec:47:e5:7d:d1:7d:e1:78:8e:f5:60:0d:37:7f:6e:dc:72:
33:1b:b5:98:91:7e:1f:df:68:91:04:09:b1:76:36:7d:7f:96:
b9:29:8a:cd:3f:cd:6f:d8:f2:62:8d:ef:af:45:45:72:46:2c:
3f:76:91:a1:f8:a4:0d:e8:fa:c1:d4:84:35:1c:db:1f:44:47:
0a:09:71:ab:c7:78:1a:b3:db:92:b6:c7:fe:a2:24:d6:c3:a2:
dc:d6:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:50:15 2026 by rpki-client