Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/2ccefccb-3a1c-44ff-85cf-588a2ba62171.roa
File: 2ccefccb-3a1c-44ff-85cf-588a2ba62171.roa (raw, json)
Hash identifier: K47OccwrLcet8ITZnEB6Sq+Cjn9DAz/Y1KNR3cwAdnQ=
Subject key identifier: E0:58:14:E6:FC:DE:FC:41:D2:26:B1:FF:E8:D0:43:FF:9A:0F:AD:E1
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 237B5C4BB22CD754F11E0C0C8D63EC41F49D5567
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/2ccefccb-3a1c-44ff-85cf-588a2ba62171.roa
Signing time: Fri 06 Nov 2026 14:47:38 +0000
ROA not before: Fri 06 Nov 2026 14:47:38 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.3.192/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7b:5c:4b:b2:2c:d7:54:f1:1e:0c:0c:8d:63:ec:41:f4:9d:55:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 14:47:38 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=ce551deb4a069ed9678640a2d92897fadd55698104c51f1ab005a69442f9215e, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:dd:d4:1c:c0:26:e2:49:c6:a9:55:cc:6d:
c3:51:b4:45:2d:7d:39:96:f9:3e:8b:be:08:27:a6:
5e:0f:1a:07:d5:8f:58:64:50:32:f5:f3:16:12:47:
02:7b:16:72:78:8e:b7:37:c3:42:13:a1:87:30:d9:
d6:10:d4:31:fb:f9:20:7a:a7:7b:49:3a:fa:55:96:
6a:45:87:76:20:2d:67:de:ed:43:97:11:f2:6c:e5:
2f:38:61:ab:74:fd:80:b0:3f:6c:1f:e9:0d:1e:5e:
f7:f9:63:0e:57:49:55:b6:ac:ed:1c:72:fc:5e:2f:
5e:8e:6e:26:e9:fa:80:56:6c:4e:9d:d9:57:43:ab:
0b:9d:49:c4:cc:0a:ba:f2:1f:89:25:91:72:e9:24:
18:3e:47:80:68:da:95:1e:39:92:be:e2:81:85:09:
c3:3a:eb:3c:5a:b8:d1:c0:4e:5c:e4:00:fe:41:54:
bb:ca:02:31:61:ad:53:d6:cc:3f:b0:c0:bd:37:ab:
8e:5d:11:98:36:eb:40:74:21:0c:34:56:12:f4:aa:
5f:ac:f5:09:72:52:b1:15:db:c1:0f:cb:46:f8:ce:
3a:80:48:c9:58:53:02:f4:0e:65:d7:4e:78:7e:a7:
7c:2c:9d:f9:eb:6c:60:7a:12:5e:37:54:c1:c3:de:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:58:14:E6:FC:DE:FC:41:D2:26:B1:FF:E8:D0:43:FF:9A:0F:AD:E1
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/2ccefccb-3a1c-44ff-85cf-588a2ba62171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.3.192/27
Signature Algorithm: sha256WithRSAEncryption
df:5f:40:04:16:30:dd:0c:3e:36:63:b6:ab:74:a5:39:fe:ea:
bb:2e:f6:c2:06:2a:f1:fc:e3:5e:e3:6d:c5:97:43:7c:d6:ef:
a0:05:20:20:4c:f7:31:f1:53:0e:cf:26:ad:5e:1a:54:d8:27:
8a:df:d9:fa:da:af:1e:1a:63:11:ec:e3:c5:bc:8f:66:48:68:
c4:bd:79:89:d1:e0:a8:ca:41:42:71:af:af:b0:ba:31:66:69:
c7:15:5c:0c:3a:32:35:32:66:76:ea:83:53:b3:01:e2:32:fa:
9f:9d:12:13:3d:fe:ae:16:7e:af:9a:3d:49:bd:f2:3e:ab:8e:
71:c9:8e:ee:38:15:d8:33:7b:8b:e3:cd:5b:80:6b:95:bd:4e:
0f:aa:64:c3:23:32:55:d9:ee:47:eb:5c:87:58:10:1e:4c:9c:
19:b1:e1:68:61:a8:8a:fb:2a:aa:2a:74:90:c4:24:70:cf:cb:
b8:85:3b:e4:83:1d:e8:84:55:df:f5:65:32:bd:16:d0:20:15:
bf:9b:46:be:f7:62:6e:19:8c:38:7f:82:19:76:af:ef:cf:f5:
1e:c0:bf:9c:8a:db:fe:0b:60:19:36:db:d4:d1:34:ec:01:33:
d8:cc:bd:e2:8b:83:75:48:84:38:36:8d:2f:d7:a2:ce:e2:71:
c2:2b:63:0f
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUI3tcS7Is11TxHgwMjWPsQfSdVWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDYxNDQ3MzhaFw0yNzAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQGNlNTUxZGViNGEwNjllZDk2Nzg2NDBhMmQ5Mjg5N2ZhZGQ1NTY5ODEwNGM1
MWYxYWIwMDVhNjk0NDJmOTIxNWUxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALyC3dQcwCbiScapVcxtw1G0RS19OZb5Pou+CCemXg8aB9WPWGRQMvXzFhJH
AnsWcniOtzfDQhOhhzDZ1hDUMfv5IHqne0k6+lWWakWHdiAtZ97tQ5cR8mzlLzhh
q3T9gLA/bB/pDR5e9/ljDldJVbas7Rxy/F4vXo5uJun6gFZsTp3ZV0OrC51JxMwK
uvIfiSWRcukkGD5HgGjalR45kr7igYUJwzrrPFq40cBOXOQA/kFUu8oCMWGtU9bM
P7DAvTerjl0RmDbrQHQhDDRWEvSqX6z1CXJSsRXbwQ/LRvjOOoBIyVhTAvQOZddO
eH6nfCyd+etsYHoSXjdUwcPeXZECAwEAAaOCAiIwggIeMB0GA1UdDgQWBBTgWBTm
/N78QdImsf/o0EP/mg+t4TAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
MmNjZWZjY2ItM2ExYy00NGZmLTg1Y2YtNTg4YTJiYTYyMTcxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBZKiA8Aw
DQYJKoZIhvcNAQELBQADggEBAN9fQAQWMN0MPjZjtqt0pTn+6rsu9sIGKvH8417j
bcWXQ3zW76AFICBM9zHxUw7PJq1eGlTYJ4rf2frarx4aYxHs48W8j2ZIaMS9eYnR
4KjKQUJxr6+wujFmaccVXAw6MjUyZnbqg1OzAeIy+p+dEhM9/q4Wfq+aPUm98j6r
jnHJju44Fdgze4vjzVuAa5W9Tg+qZMMjMlXZ7kfrXIdYEB5MnBmx4WhhqIr7Kqoq
dJDEJHDPy7iFO+SDHeiEVd/1ZTK9FtAgFb+bRr73Ym4ZjDh/ghl2r+/P9R7Av5yK
2/4LYBk229TRNOwBM9jMveKLg3VIhDg2jS/Xos7iccIrYw8=
-----END CERTIFICATE-----
Generated at Wed Nov 11 13:44:12 2026 by rpki-client