Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/a6356c3a-a3ad-40c7-a5e8-1a5ab5da594d.roa
File: a6356c3a-a3ad-40c7-a5e8-1a5ab5da594d.roa (raw, json)
Hash identifier: ibCJ/u09AGlbUgPILt00e+7YKyrgiwbS5JZiejGpUYY=
Subject key identifier: D2:DA:42:98:98:A7:5B:7A:77:59:5B:0E:D1:46:F8:B2:6C:26:29:42
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 3396C078B759899F0FE33330F35EE8769EFA9AEA
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/a6356c3a-a3ad-40c7-a5e8-1a5ab5da594d.roa
Signing time: Fri 06 Nov 2026 12:09:26 +0000
ROA not before: Fri 06 Nov 2026 12:09:26 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:96:c0:78:b7:59:89:9f:0f:e3:33:30:f3:5e:e8:76:9e:fa:9a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 12:09:26 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=83cbb3d27f96e55f29c49bae23ecbb2dfa5a45e221f64da81ea1e18bcacfcd4d, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:d7:0f:eb:cd:9e:de:83:4a:80:af:01:67:
74:67:60:5a:07:63:60:4b:c1:4c:8e:2c:10:2a:96:
88:b8:ff:8f:26:bc:bf:f1:29:c3:f1:43:49:cd:a8:
9e:4e:f4:5a:10:1b:8b:e5:7d:d5:fd:86:1b:dc:55:
4a:c4:a9:2b:2d:d3:4e:ea:cf:ca:39:45:a0:97:c9:
b7:ee:78:65:be:d1:63:e9:77:5b:32:3d:e3:4d:d5:
03:0a:71:59:bf:b5:93:f8:28:bc:da:da:13:3c:8f:
65:21:43:0a:ef:76:df:e0:ee:61:b4:f4:c6:4d:76:
3a:4c:aa:9b:07:fd:8a:2e:95:40:fc:b0:a6:6c:58:
b9:ee:9f:db:df:e2:17:4b:0f:90:37:90:fa:10:2d:
07:74:61:e5:53:93:4c:8a:cc:16:9e:e0:56:ad:27:
00:41:27:98:d4:80:46:c3:54:c8:09:ac:21:f1:36:
51:20:ab:30:75:69:d6:08:29:f5:e0:99:a0:a9:7c:
2e:76:35:8c:c8:1b:8e:ce:35:d1:1a:9e:55:ba:69:
44:71:dc:e4:10:ab:67:66:68:01:8f:d6:c8:c1:4d:
dd:bc:72:0d:e8:e7:35:04:c1:c8:dd:49:9b:ea:09:
c1:5d:fd:35:9d:d4:11:a6:ec:71:ea:35:59:85:2c:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:42:98:98:A7:5B:7A:77:59:5B:0E:D1:46:F8:B2:6C:26:29:42
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/a6356c3a-a3ad-40c7-a5e8-1a5ab5da594d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.10.0/24
Signature Algorithm: sha256WithRSAEncryption
45:63:a4:64:87:c4:53:59:ce:51:35:83:a8:5b:22:ed:95:45:
b0:80:7e:19:12:18:8f:ac:f5:82:c4:ef:b0:15:b6:4c:16:9e:
8e:69:fc:e9:24:9c:f5:22:f1:1a:d6:1d:28:74:e7:bb:a3:57:
93:0a:74:92:ae:ae:6f:c2:ae:c0:00:80:ef:e0:0f:9d:97:72:
dc:77:80:29:8d:98:b5:8a:7b:0d:7a:67:49:e5:a7:b1:18:06:
e7:b4:9a:e0:bd:3b:29:82:7f:e4:7b:51:c1:2c:f6:91:1c:37:
46:56:42:c0:7c:4d:09:d7:a8:df:4d:6f:e7:16:70:22:0b:df:
8d:b3:18:c7:91:dc:7c:8c:15:d5:3d:4c:45:c5:c5:8e:14:fb:
a7:83:41:9e:87:c4:67:fc:04:92:ee:4a:d4:0a:90:48:37:c2:
88:39:03:8e:d5:8a:50:41:72:8b:54:54:b2:af:71:4d:c9:4b:
ec:97:b4:00:3f:82:59:bc:d4:aa:11:8e:45:b0:38:61:c3:af:
b6:a4:06:34:cc:d6:ab:c7:40:d7:7c:d4:18:b7:b9:8c:c2:08:
6c:c3:45:8f:ab:22:48:80:6a:df:fd:37:9e:4d:4c:79:1f:dd:
83:04:4a:c3:dc:b1:4a:e2:11:f4:ba:c1:b5:95:fa:d0:c9:8a:
dd:26:4f:8f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUM5bAeLdZiZ8P4zMw817odp76muowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDYxMjA5MjZaFw0yNzAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDgzY2JiM2QyN2Y5NmU1NWYyOWM0OWJhZTIzZWNiYjJkZmE1YTQ1ZTIyMWY2
NGRhODFlYTFlMThiY2FjZmNkNGQxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhW1w/rzZ7eg0qArwFndGdgWgdjYEvBTI4sECqWiLj/jya8v/Epw/FDSc2o
nk70WhAbi+V91f2GG9xVSsSpKy3TTurPyjlFoJfJt+54Zb7RY+l3WzI9403VAwpx
Wb+1k/govNraEzyPZSFDCu923+DuYbT0xk12Okyqmwf9ii6VQPywpmxYue6f29/i
F0sPkDeQ+hAtB3Rh5VOTTIrMFp7gVq0nAEEnmNSARsNUyAmsIfE2USCrMHVp1ggp
9eCZoKl8LnY1jMgbjs410RqeVbppRHHc5BCrZ2ZoAY/WyMFN3bxyDejnNQTByN1J
m+oJwV39NZ3UEabsceo1WYUsBH0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTS2kKY
mKdbendZWw7RRviybCYpQjAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
YTYzNTZjM2EtYTNhZC00MGM3LWE1ZTgtMWE1YWI1ZGE1OTRkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKiCjAN
BgkqhkiG9w0BAQsFAAOCAQEARWOkZIfEU1nOUTWDqFsi7ZVFsIB+GRIYj6z1gsTv
sBW2TBaejmn86SSc9SLxGtYdKHTnu6NXkwp0kq6ub8KuwACA7+APnZdy3HeAKY2Y
tYp7DXpnSeWnsRgG57Sa4L07KYJ/5HtRwSz2kRw3RlZCwHxNCdeo301v5xZwIgvf
jbMYx5HcfIwV1T1MRcXFjhT7p4NBnofEZ/wEku5K1AqQSDfCiDkDjtWKUEFyi1RU
sq9xTclL7Je0AD+CWbzUqhGORbA4YcOvtqQGNMzWq8dA13zUGLe5jMIIbMNFj6si
SIBq3/03nk1MeR/dgwRKw9yxSuIR9LrBtZX60MmK3SZPjw==
-----END CERTIFICATE-----
Generated at Thu Nov 12 17:17:42 2026 by rpki-client