Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/937eb85b-e6f2-4bab-9a47-4a8237266e71.roa
File: 937eb85b-e6f2-4bab-9a47-4a8237266e71.roa (raw, json)
Hash identifier: EFW1WYB19IeuhDzEJASI3KViX3X4tiZuzN7t3A1b9eY=
Subject key identifier: 0D:8B:FC:7A:CE:18:DD:A7:C8:A3:F4:F9:3F:07:D2:47:C0:D8:9A:86
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 4D14E1BEFC8CF2A2B296162A2D2600746801859C
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/937eb85b-e6f2-4bab-9a47-4a8237266e71.roa
Signing time: Fri 06 Nov 2026 14:48:50 +0000
ROA not before: Fri 06 Nov 2026 14:48:50 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.3.128/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:14:e1:be:fc:8c:f2:a2:b2:96:16:2a:2d:26:00:74:68:01:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 14:48:50 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=59b3a1722cf4616daef5689af8ce406965a65b70602659315e5ba460fe86cfc4, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:46:6a:f6:e8:a9:02:cb:a1:03:03:10:91:
c4:55:d2:c8:85:77:53:bb:45:1d:03:4a:34:06:b4:
88:4c:e4:57:8c:6d:9f:f0:91:2a:5f:36:53:f2:bb:
12:8e:b6:e9:af:4e:b8:6e:1c:a9:d7:e7:f6:00:1e:
1b:b7:a8:f0:39:6c:af:7d:c8:c4:51:ba:10:80:eb:
12:f3:70:25:7e:1e:17:02:e5:d6:4c:f1:31:31:b5:
a3:9b:f3:a2:e1:90:fc:2c:8b:93:0f:38:b8:57:ee:
eb:c9:cc:f6:6b:3f:da:da:2c:04:12:f8:a6:52:44:
45:9e:3e:30:52:f9:42:b7:65:0f:22:99:42:2a:f8:
c7:81:d0:de:72:b8:01:aa:36:1c:a3:57:b4:fa:fa:
e6:92:dc:d8:75:cd:a5:bd:c3:4e:8b:69:4e:8a:fe:
79:ef:39:8c:ce:34:e0:85:a3:12:f2:ba:28:05:9b:
76:8d:d8:b5:ef:7a:bd:ac:e4:69:cb:89:76:ce:6e:
31:7d:73:88:36:37:76:0f:ac:38:12:3c:03:78:5e:
63:dd:b3:fd:1b:6c:45:7e:7b:f6:1e:f6:3a:5b:a4:
18:43:b1:f2:e0:03:c6:96:aa:a4:d7:5d:8b:56:a8:
49:ba:13:2f:a0:06:31:50:7c:c4:d4:70:85:95:20:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:FC:7A:CE:18:DD:A7:C8:A3:F4:F9:3F:07:D2:47:C0:D8:9A:86
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/937eb85b-e6f2-4bab-9a47-4a8237266e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.3.128/26
Signature Algorithm: sha256WithRSAEncryption
cc:96:2f:52:d8:21:10:b6:bd:da:a9:44:c6:62:61:98:c7:af:
95:94:a2:a0:56:6b:9b:2e:c7:ff:2f:f8:cb:96:52:58:5b:25:
b1:b6:b4:ea:40:6e:0e:1f:e4:2d:ad:8d:4f:05:cc:cd:fa:55:
38:60:63:66:53:a2:63:50:28:27:03:df:f9:87:2a:97:9e:65:
17:f7:32:25:a0:2b:86:1e:71:b3:53:a2:21:b2:34:47:03:3e:
08:64:03:cb:5d:27:18:a1:45:56:1b:86:1f:d8:82:b4:8d:ae:
28:03:a6:f9:ac:1b:59:5e:ae:3b:64:5d:ca:73:89:07:76:55:
5a:2b:84:ec:f4:90:cc:79:62:57:8d:1d:7f:18:91:07:85:15:
cb:1f:c2:81:c2:8b:8b:2d:f5:df:69:16:74:3e:47:ac:de:18:
61:4f:39:0a:85:4f:3b:af:a9:d2:b3:b5:59:4f:9d:98:4c:b7:
1b:bd:fa:32:92:6a:5c:7c:5f:9c:43:b0:21:6a:de:86:b4:0c:
11:70:2d:b4:9d:00:55:cd:81:a2:e8:3f:48:f8:77:97:2c:a6:
ed:5e:19:7d:7e:c9:3b:11:05:a7:a2:9d:9d:a9:8e:d6:28:8e:
39:fb:60:39:40:19:19:33:e7:ec:c9:90:ee:1a:8a:cc:15:8b:
91:a1:63:7c
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUTRThvvyM8qKylhYqLSYAdGgBhZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDYxNDQ4NTBaFw0yNzAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDU5YjNhMTcyMmNmNDYxNmRhZWY1Njg5YWY4Y2U0MDY5NjVhNjViNzA2MDI2
NTkzMTVlNWJhNDYwZmU4NmNmYzQxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJkoRmr26KkCy6EDAxCRxFXSyIV3U7tFHQNKNAa0iEzkV4xtn/CRKl82U/K7
Eo626a9OuG4cqdfn9gAeG7eo8Dlsr33IxFG6EIDrEvNwJX4eFwLl1kzxMTG1o5vz
ouGQ/CyLkw84uFfu68nM9ms/2tosBBL4plJERZ4+MFL5QrdlDyKZQir4x4HQ3nK4
Aao2HKNXtPr65pLc2HXNpb3DTotpTor+ee85jM404IWjEvK6KAWbdo3Yte96vazk
acuJds5uMX1ziDY3dg+sOBI8A3heY92z/RtsRX579h72OlukGEOx8uADxpaqpNdd
i1aoSboTL6AGMVB8xNRwhZUgURMCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBQNi/x6
zhjdp8ij9Pk/B9JHwNiahjAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
OTM3ZWI4NWItZTZmMi00YmFiLTlhNDctNGE4MjM3MjY2ZTcxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBpKiA4Aw
DQYJKoZIhvcNAQELBQADggEBAMyWL1LYIRC2vdqpRMZiYZjHr5WUoqBWa5sux/8v
+MuWUlhbJbG2tOpAbg4f5C2tjU8FzM36VThgY2ZTomNQKCcD3/mHKpeeZRf3MiWg
K4YecbNToiGyNEcDPghkA8tdJxihRVYbhh/YgrSNrigDpvmsG1lerjtkXcpziQd2
VVorhOz0kMx5YleNHX8YkQeFFcsfwoHCi4st9d9pFnQ+R6zeGGFPOQqFTzuvqdKz
tVlPnZhMtxu9+jKSalx8X5xDsCFq3oa0DBFwLbSdAFXNgaLoP0j4d5cspu1eGX1+
yTsRBaeinZ2pjtYojjn7YDlAGRkz5+zJkO4aiswVi5GhY3w=
-----END CERTIFICATE-----
Generated at Wed Nov 11 13:27:32 2026 by rpki-client