Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/4ce0a7c3-568a-416e-8fe7-4d7a8af6dce4.roa
File: 4ce0a7c3-568a-416e-8fe7-4d7a8af6dce4.roa (raw, json)
Hash identifier: TbamEYsaJ+RIHSPKjQBalIF/A4/FXhcOtCr0IlCLb0I=
Subject key identifier: 8F:52:D3:51:56:44:3A:35:E2:69:35:71:4B:C6:B9:40:32:F9:A7:5F
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 0943F8880815017A4A1299CD30D5E87DD22D077A
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/4ce0a7c3-568a-416e-8fe7-4d7a8af6dce4.roa
Signing time: Mon 09 Nov 2026 16:27:56 +0000
ROA not before: Mon 09 Nov 2026 16:27:56 +0000
ROA not after: Sun 07 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.7.224/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:43:f8:88:08:15:01:7a:4a:12:99:cd:30:d5:e8:7d:d2:2d:07:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 9 16:27:56 2026 GMT
Not After : Feb 7 23:59:59 2027 GMT
Subject: serialNumber=e2a7ad45d74fed1eac22efbe0d78ca3871ce8c76971076f1b83f2d68d93b0415, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:78:84:1d:72:d5:c3:16:aa:7c:ad:fc:c5:
ab:2f:18:02:e7:b7:de:cb:ef:39:15:1c:e6:c2:e0:
7b:2b:cf:cb:97:b3:4d:1e:68:86:ab:21:b2:22:17:
d3:1e:13:04:4d:e0:2f:fc:73:ef:86:bd:35:e1:bb:
62:83:2f:16:a9:8c:f4:ec:2d:9d:43:11:58:c0:ee:
40:1e:98:00:29:7f:bb:ea:c7:b2:07:47:3e:ed:40:
2d:f1:54:40:6f:9e:3c:0b:61:6a:07:1d:9b:6e:90:
79:e9:df:84:4a:42:2f:66:de:23:b2:14:8c:98:9c:
78:14:35:1a:e4:71:b6:de:c7:70:51:12:ea:51:37:
e7:0e:81:f0:11:a1:0d:95:94:74:d4:64:13:de:c9:
1d:47:e9:d2:b1:57:53:e7:81:f2:5a:35:e6:98:1a:
84:7e:73:9a:3b:e2:63:81:3d:30:fe:0f:1a:ef:05:
92:da:2b:0c:f7:9f:ef:de:a9:11:95:5b:23:74:b0:
96:c3:83:ec:fb:e5:93:a0:33:7a:d6:cb:bf:ce:8a:
de:79:4f:25:c4:09:de:fd:40:67:f5:45:70:81:07:
94:dd:e8:54:47:b2:3d:4b:a6:d5:1f:c5:0a:46:d2:
60:c2:2e:8f:7c:e7:fe:73:7e:fc:29:69:d1:9a:cf:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:D3:51:56:44:3A:35:E2:69:35:71:4B:C6:B9:40:32:F9:A7:5F
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/4ce0a7c3-568a-416e-8fe7-4d7a8af6dce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.7.224/28
Signature Algorithm: sha256WithRSAEncryption
00:88:4c:6b:67:9a:92:9c:ff:d7:53:27:52:9b:cf:8a:2a:79:
0a:95:0b:0f:b6:1f:27:ab:94:7a:d8:4f:13:65:96:7a:40:32:
35:b9:3d:1a:82:a0:a5:ce:c8:b7:ef:68:87:d8:0f:02:f1:46:
a1:ae:a5:b2:7b:74:dd:01:76:1b:bd:ae:6a:7c:6f:47:e8:7d:
99:ac:e8:20:2a:39:45:5c:91:31:51:6e:18:03:1c:d8:df:7a:
08:a8:e4:88:b7:fb:ed:5c:05:9d:d9:f1:79:8b:bf:a0:28:54:
5b:bb:54:80:42:4f:81:05:46:5a:9d:ba:d3:b3:e8:46:fa:56:
ed:78:9c:f3:5d:4c:12:94:bc:22:4a:c5:37:57:5f:e3:43:9c:
ea:a7:2f:2d:ef:15:b8:47:d3:6a:e2:7b:b4:ae:9f:55:7c:fe:
c0:5f:b9:cb:96:dc:0d:14:2b:ba:76:a6:b1:12:93:ef:59:cb:
b6:18:ee:ad:20:e9:14:69:a8:e3:c4:d9:cf:1a:5a:d3:1b:c4:
29:d0:7d:d6:d3:bf:e4:83:45:2d:13:21:5d:90:cc:f4:2d:e2:
c1:95:10:35:76:ec:11:cc:8a:42:45:1a:6c:8e:31:9c:64:16:
49:9a:52:3f:3d:5e:c3:60:15:f2:e1:4d:53:e1:12:06:1c:d5:
73:04:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:32:19 2026 by rpki-client