Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/1ffece00-ba30-4e2f-9c48-36d531156679.roa
File: 1ffece00-ba30-4e2f-9c48-36d531156679.roa (raw, json)
Hash identifier: BV1vorhCJWaEUET6IDyeupGn4PcTmcmw5Rw58MRBbxA=
Subject key identifier: 6B:CD:F4:50:3C:5F:D7:A9:69:D4:C6:92:09:C8:9C:8A:B1:2B:BF:37
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 1320374F6DC8A489C4C7A46841BC4314A39A7B51
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/1ffece00-ba30-4e2f-9c48-36d531156679.roa
Signing time: Fri 06 Nov 2026 14:46:37 +0000
ROA not before: Fri 06 Nov 2026 14:46:37 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.3.240/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:20:37:4f:6d:c8:a4:89:c4:c7:a4:68:41:bc:43:14:a3:9a:7b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 14:46:37 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=68924fcc84b0f70709a457bfbd78a195433b37b3c4d416a76022ccedeec0fcf9, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:c5:f4:04:e4:c5:b2:b8:f9:75:39:66:29:
44:ca:4e:d7:50:90:dc:35:a9:39:6a:91:89:0b:e6:
c1:50:6f:d4:7f:22:82:a7:dc:44:8f:2a:d3:0c:59:
04:52:39:d5:78:7b:f4:7e:8f:18:4b:ef:c4:e8:e9:
44:ff:0d:79:00:04:b2:41:12:0b:5d:72:84:7f:89:
04:0f:22:6e:06:8f:8c:1c:78:e5:66:5d:36:68:da:
06:e8:af:ba:ce:af:dd:71:31:e6:57:6b:e8:ea:4b:
34:29:2c:c7:40:49:94:10:d3:f9:d0:0c:77:92:6f:
83:a3:0c:cd:ae:71:59:4a:02:0c:67:a5:21:dd:f2:
1d:1e:eb:8b:c4:7f:3e:67:57:d3:71:e9:91:26:a3:
a3:96:36:91:b7:ab:b7:bc:2e:29:95:65:8a:3c:9c:
22:65:b9:22:2e:cf:0d:a7:48:62:0a:2e:50:b4:d4:
37:fe:4e:4d:bc:82:75:39:08:6c:af:0d:54:a1:99:
bb:dd:9b:bc:c7:ed:87:dd:dc:e5:95:ee:e3:3c:d5:
36:cf:8d:97:58:d9:a8:7f:61:7d:64:30:d7:87:ce:
fd:7a:c3:70:99:32:3b:af:df:06:66:e4:13:2d:0c:
5f:7c:55:b2:9c:ea:6d:ba:47:22:21:86:3f:6b:fe:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:F4:50:3C:5F:D7:A9:69:D4:C6:92:09:C8:9C:8A:B1:2B:BF:37
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/1ffece00-ba30-4e2f-9c48-36d531156679.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.3.240/28
Signature Algorithm: sha256WithRSAEncryption
1b:05:76:45:cc:bc:b9:b3:43:e8:e9:5b:4d:ef:a9:16:92:51:
e2:3e:ed:d2:53:50:97:04:0c:d9:2e:7e:a0:ad:a1:4f:25:de:
68:81:d7:05:dd:b3:d1:51:44:64:08:9a:11:d8:64:f9:50:b8:
b3:71:13:f6:fd:ab:c8:1f:bc:ea:fa:ea:04:31:52:c4:a7:b8:
6e:7a:f0:c0:21:ef:63:70:a0:57:9c:57:81:71:d9:90:9e:ec:
41:c6:95:6b:80:82:fb:e1:04:8d:a5:cc:4f:31:97:d5:a8:4d:
57:be:66:3a:21:6d:37:c6:14:6e:36:44:54:d4:5c:bb:f2:0d:
d4:f3:31:35:98:5c:c1:88:cf:aa:df:48:f6:4b:93:21:e4:17:
aa:54:27:83:20:bd:e9:68:15:85:a2:56:50:de:23:3f:31:13:
36:2e:9c:a2:c7:4b:26:4e:80:5f:6c:62:af:b0:38:a2:11:ac:
1d:8a:78:87:86:01:16:9b:6b:38:c3:2d:4c:c0:0d:33:e2:5b:
e0:99:cb:66:fc:b3:f3:60:31:7a:4d:79:d7:e0:2f:46:c4:ac:
d1:0e:6f:61:67:c1:39:05:1d:8e:c8:50:b6:b7:a5:75:04:a8:
af:1a:b0:e6:28:71:53:b8:38:81:54:18:5c:14:38:0d:bc:59:
8c:e6:dd:a9
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUEyA3T23IpInEx6RoQbxDFKOae1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDYxNDQ2MzdaFw0yNzAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDY4OTI0ZmNjODRiMGY3MDcwOWE0NTdiZmJkNzhhMTk1NDMzYjM3YjNjNGQ0
MTZhNzYwMjJjY2VkZWVjMGZjZjkxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALElxfQE5MWyuPl1OWYpRMpO11CQ3DWpOWqRiQvmwVBv1H8igqfcRI8q0wxZ
BFI51Xh79H6PGEvvxOjpRP8NeQAEskESC11yhH+JBA8ibgaPjBx45WZdNmjaBuiv
us6v3XEx5ldr6OpLNCksx0BJlBDT+dAMd5Jvg6MMza5xWUoCDGelId3yHR7ri8R/
PmdX03HpkSajo5Y2kbert7wuKZVlijycImW5Ii7PDadIYgouULTUN/5OTbyCdTkI
bK8NVKGZu92bvMfth93c5ZXu4zzVNs+Nl1jZqH9hfWQw14fO/XrDcJkyO6/fBmbk
Ey0MX3xVspzqbbpHIiGGP2v+GmcCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBRrzfRQ
PF/XqWnUxpIJyJyKsSu/NzAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
MWZmZWNlMDAtYmEzMC00ZTJmLTljNDgtMzZkNTMxMTU2Njc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBJKiA/Aw
DQYJKoZIhvcNAQELBQADggEBABsFdkXMvLmzQ+jpW03vqRaSUeI+7dJTUJcEDNku
fqCtoU8l3miB1wXds9FRRGQImhHYZPlQuLNxE/b9q8gfvOr66gQxUsSnuG568MAh
72NwoFecV4Fx2ZCe7EHGlWuAgvvhBI2lzE8xl9WoTVe+ZjohbTfGFG42RFTUXLvy
DdTzMTWYXMGIz6rfSPZLkyHkF6pUJ4MgveloFYWiVlDeIz8xEzYunKLHSyZOgF9s
Yq+wOKIRrB2KeIeGARabazjDLUzADTPiW+CZy2b8s/NgMXpNedfgL0bErNEOb2Fn
wTkFHY7IULa3pXUEqK8asOYocVO4OIFUGFwUOA28WYzm3ak=
-----END CERTIFICATE-----
Generated at Wed Nov 11 13:50:18 2026 by rpki-client