Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/666ed628-7847-4e0f-b125-81f44586ecd2.roa
File: 666ed628-7847-4e0f-b125-81f44586ecd2.roa (raw, json)
Hash identifier: S1dtbjeHYArAVwkugdEJExUUNE19VshhihGut3B5v7E=
Subject key identifier: EA:37:CC:27:F8:D5:A5:F5:9C:42:A8:08:01:1E:F9:84:19:5E:0A:A4
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 40CE0604594CAA3BEAEC0795D680B543ACF54393
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/666ed628-7847-4e0f-b125-81f44586ecd2.roa
Signing time: Fri 06 Nov 2026 12:31:58 +0000
ROA not before: Fri 06 Nov 2026 12:31:58 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ce:06:04:59:4c:aa:3b:ea:ec:07:95:d6:80:b5:43:ac:f5:43:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 12:31:58 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=6b2c80889e432e2f4c9baee86cf2c94000a504e710a46f04ccb46a9e28e2f74e, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:4b:17:0a:bd:9c:6b:83:44:d1:f9:4c:94:
d6:e0:2d:3b:96:8b:94:d7:3f:6e:cf:ef:2e:e5:0b:
68:29:32:44:dc:29:3c:73:0d:3a:44:b8:78:5b:6a:
82:94:a6:b5:de:c2:2a:b9:72:40:91:7b:c9:c4:84:
e7:dc:99:06:c0:f6:7f:7e:53:26:f3:9e:14:6b:36:
c2:a2:37:ec:cf:e8:99:89:87:23:9b:9e:25:e8:f2:
f3:99:db:ef:84:5e:d7:d5:cc:66:cb:9c:44:37:e8:
c5:4b:6a:ae:13:fa:fb:f1:83:75:c8:bc:97:8d:4e:
cf:b5:d6:ab:86:66:c9:20:8c:36:b2:da:d7:81:77:
08:0a:e7:69:85:d3:49:df:54:4b:cd:b6:0c:51:d2:
bb:26:ad:60:be:49:25:e0:59:75:0b:e8:24:2e:93:
1e:30:46:1a:ee:0d:3e:9b:fc:d7:67:41:30:2e:f1:
56:b7:43:a9:50:ad:8c:84:8a:7a:53:51:de:6e:53:
e1:15:b1:c4:29:ec:a8:99:ff:d4:19:bf:96:75:12:
b8:63:63:46:64:4a:33:41:41:54:c2:04:dd:36:15:
6c:06:d0:24:88:0e:12:19:bc:49:ce:b0:b4:41:08:
86:57:5f:0b:31:f9:46:aa:52:cc:8b:5e:aa:60:f4:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:37:CC:27:F8:D5:A5:F5:9C:42:A8:08:01:1E:F9:84:19:5E:0A:A4
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/666ed628-7847-4e0f-b125-81f44586ecd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3b:19:81:c8:5a:ec:fd:03:49:b9:98:90:1e:cf:28:e5:65:
a3:5c:05:ed:6f:ab:3d:04:1a:b2:fa:f7:24:34:e3:30:2a:9d:
10:f8:e9:12:c5:93:d7:dd:21:c1:d9:6b:a3:b1:fe:98:07:df:
23:53:85:32:f3:cb:14:0a:a6:e0:72:9d:3c:80:fe:5e:5b:44:
71:b3:d8:61:62:a3:1b:53:73:5f:8b:cb:6b:13:6d:2f:b3:46:
17:b3:11:e8:01:6f:37:fb:c0:5f:eb:c5:b1:7a:86:91:ef:ef:
d1:6f:a0:e2:22:81:4a:7c:4e:31:41:c1:7c:37:9a:e7:7d:46:
de:25:3c:37:af:59:dc:fb:eb:1a:cb:c4:12:40:f0:6b:3b:8e:
b2:35:f3:18:d6:7e:fe:31:8a:61:ee:36:c8:1f:79:5c:b8:ae:
fd:38:f4:39:52:6f:5e:7c:e1:5d:78:51:71:26:26:0c:81:88:
b4:5b:ac:01:07:38:9a:d0:38:32:57:22:00:ae:95:39:9b:fe:
3d:b8:81:b8:b8:e8:7a:0e:d3:fe:95:18:9e:cc:0d:86:25:62:
3f:c6:92:07:9a:06:05:fa:d4:c6:5f:7a:6c:01:af:b1:d9:c6:
4e:85:40:bb:62:bc:14:c6:32:7f:25:7b:d4:5f:93:26:d4:1b:
53:6c:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:20:34 2026 by rpki-client