Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/d3efec2e-03c0-4941-8146-93c462355e54.roa
File: d3efec2e-03c0-4941-8146-93c462355e54.roa (raw, json)
Hash identifier: IACSNptjiOVr7TyfWn570T6vwxSr/GulNSrYPdmK9mM=
Subject key identifier: EA:D1:20:B4:76:D3:C1:A2:8F:97:6C:F1:84:81:65:0E:B2:DB:A1:DE
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 6FADBCA32FE6B247F6193C4E35CA64E7D793C65A
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/d3efec2e-03c0-4941-8146-93c462355e54.roa
Signing time: Fri 06 Nov 2026 14:48:19 +0000
ROA not before: Fri 06 Nov 2026 14:48:19 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.3.224/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ad:bc:a3:2f:e6:b2:47:f6:19:3c:4e:35:ca:64:e7:d7:93:c6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 14:48:19 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=799833c5921f755e08b1c962f3430b50bbd5198fb8b604d0760755bb13397059, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:7f:31:4d:00:89:22:62:be:5e:99:49:57:
f6:d8:17:72:46:9a:69:34:83:21:a1:ea:3a:46:2c:
ef:c3:82:a9:f1:92:56:ce:94:8c:a4:c8:f5:f4:68:
ad:68:56:d7:88:18:af:76:53:42:94:9f:ca:d9:d2:
6f:26:c1:4b:8a:2e:19:20:ef:e0:53:1a:02:aa:e1:
2f:97:8d:0e:de:51:aa:80:01:c1:fe:5d:df:b5:59:
e8:05:cf:37:1b:15:cd:4f:23:a0:5d:2e:58:5b:b1:
e8:8d:4e:12:52:76:25:bf:a8:e5:d1:fd:44:b1:10:
4e:58:e3:c1:f1:8c:bf:51:27:07:ee:15:90:d8:73:
a4:1a:af:77:1b:49:a2:0e:27:cb:da:93:37:80:ec:
45:c6:41:6e:42:11:30:93:78:98:00:35:aa:22:ba:
04:62:b2:cf:74:49:d7:87:32:49:c4:27:3e:f6:ae:
12:11:be:b8:45:f7:26:ba:2e:ce:0e:32:f0:4e:83:
94:58:dc:d9:19:e7:99:fe:ca:e0:2b:1a:29:43:09:
4a:26:43:2a:37:c7:a4:a8:a1:fb:94:41:e7:7e:20:
66:cf:af:c4:39:51:80:c8:dc:f7:53:85:51:44:ef:
94:f9:49:98:18:a3:04:f0:78:44:bb:ba:99:f3:74:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D1:20:B4:76:D3:C1:A2:8F:97:6C:F1:84:81:65:0E:B2:DB:A1:DE
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/d3efec2e-03c0-4941-8146-93c462355e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.3.224/28
Signature Algorithm: sha256WithRSAEncryption
30:ff:03:e3:2d:0d:2f:99:52:9a:ce:4f:4c:e5:43:b5:33:e7:
e8:36:ea:32:ea:08:bb:45:5a:98:3a:4d:91:6e:d8:c3:56:0a:
8d:de:1a:18:07:c6:15:ae:0c:0e:49:0a:84:29:81:da:b7:42:
1b:42:f2:35:33:e8:2f:35:0e:1f:4e:3a:02:f4:b5:84:42:9b:
55:38:a3:37:49:ca:18:41:e2:47:db:e5:df:0b:99:e1:49:36:
ea:52:11:2f:2d:63:a7:55:57:b7:0c:2e:4c:53:a1:29:d3:23:
b0:02:5a:21:76:a5:01:3f:5d:6d:54:eb:24:a9:56:30:a2:d8:
a6:3d:77:b5:e0:71:02:89:fb:39:36:8d:1e:e8:ff:0c:7a:3d:
86:52:df:ce:be:1f:c3:cf:6b:78:89:86:c2:4f:b0:3b:64:04:
76:86:42:86:51:57:3e:af:a3:82:da:64:da:b2:d8:b9:2f:5a:
7e:aa:e1:de:b6:a9:00:d7:00:dd:19:0f:48:7c:c7:fa:22:85:
7c:f9:a8:fe:ab:fd:96:80:e6:9d:9c:60:1a:9e:4f:42:80:73:
60:21:2f:60:1f:8e:9f:a6:3b:2e:8a:73:f0:e3:76:0a:8c:80:
fe:4c:0c:85:dd:32:e8:cc:09:9a:55:4c:af:aa:53:7d:47:3f:
44:2e:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 22:35:12 2026 by rpki-client