Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/de27a5e1-e39e-4b08-aa1f-7af0a9df939a.roa
File: de27a5e1-e39e-4b08-aa1f-7af0a9df939a.roa (raw, json)
Hash identifier: e7+P0DC5KLFvR52rKzCyIJL8BDesyEqGbDNZEHF8vjs=
Subject key identifier: DA:0C:B0:DE:D8:7C:31:CE:14:54:D8:5B:D7:90:6D:E1:91:CA:C1:30
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 2375D7FB2DE4D85D20FA02F051CFF10DC360826F
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/de27a5e1-e39e-4b08-aa1f-7af0a9df939a.roa
Signing time: Fri 06 Nov 2026 11:37:48 +0000
ROA not before: Fri 06 Nov 2026 11:37:48 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:75:d7:fb:2d:e4:d8:5d:20:fa:02:f0:51:cf:f1:0d:c3:60:82:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 11:37:48 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=6575a6c39c56f9d8277eba12d5eab2e4d3b6b9189614ccbaa95837dc842364f5, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:6e:ed:da:26:f1:2b:93:fb:6e:71:5a:cc:
ef:0d:ea:56:64:26:05:e9:54:10:9b:30:d2:3a:cb:
8a:d2:22:03:d6:8c:4b:dc:d1:23:71:b3:b2:cd:c9:
1b:57:3c:f9:35:26:c1:1e:16:dc:5f:e3:a9:2f:e3:
50:f1:60:a1:87:fc:0f:04:16:28:a7:b5:94:70:d0:
a7:a5:3a:28:5d:fe:b9:6c:d1:e8:d5:a1:6c:b0:0c:
89:98:00:0d:bc:a2:28:49:d4:a0:90:cc:60:b3:36:
57:e7:4c:c6:28:71:02:bd:3f:c8:93:ab:2b:16:64:
c8:0b:1c:93:3f:eb:b8:20:43:67:25:02:e2:1c:75:
61:0f:54:e9:d5:ef:5c:87:3b:0c:3f:37:ce:1f:d8:
91:1c:a4:24:cb:8c:d9:f4:f6:8e:c8:04:d4:be:9b:
7d:af:9d:98:8e:e5:05:19:8b:34:be:6b:6d:24:d4:
da:e3:28:e7:f7:9a:ab:12:30:66:d2:58:df:91:01:
a4:34:c6:6e:77:a8:7e:12:46:75:69:c9:b7:18:5e:
b7:5f:84:f3:88:2f:20:c5:24:a4:86:8a:90:e5:8c:
f2:73:a8:86:20:b5:b7:8e:06:87:9c:c8:1f:44:1e:
3c:3d:8d:d9:5f:24:3e:9c:80:80:2c:64:fc:08:de:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:B0:DE:D8:7C:31:CE:14:54:D8:5B:D7:90:6D:E1:91:CA:C1:30
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/de27a5e1-e39e-4b08-aa1f-7af0a9df939a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.4.0/24
Signature Algorithm: sha256WithRSAEncryption
65:21:33:bd:2b:b0:f4:1b:da:73:fb:d4:f6:5e:16:fe:e7:14:
d6:86:06:f8:d9:ad:66:63:19:7b:8e:ea:21:0b:61:ac:b6:66:
66:ef:65:4f:2f:aa:e3:a4:d0:78:6f:95:3a:31:e0:03:a4:de:
f5:b6:bb:01:41:bf:8a:d0:89:de:12:28:45:16:3d:21:6f:ac:
90:ab:e8:0f:c7:9d:f9:0d:e6:58:1b:1f:c5:0e:ea:bc:3e:1f:
8d:ce:4e:10:df:83:02:07:7c:16:78:d3:c7:b0:c0:c1:24:72:
c2:84:80:0f:40:a3:3d:1f:d7:e2:4b:42:c4:1e:f9:67:c4:85:
b3:51:b9:77:2d:e3:fe:90:60:03:ea:2e:e0:aa:e7:f2:3e:d5:
ec:7e:3f:50:72:f5:01:3f:68:ba:6a:ae:c5:cb:5a:e6:b8:01:
27:b0:cb:6a:ad:e5:91:c2:8c:54:8f:3c:7f:31:ba:40:57:81:
e6:44:e2:67:c5:81:d7:67:62:b2:ec:f9:78:66:39:fa:6d:8f:
cf:5f:06:7d:3a:24:f3:44:07:ad:58:b2:95:d7:9c:5b:11:f5:
16:e6:70:22:83:d1:b8:37:19:d5:e8:ee:9b:ad:da:9a:0f:9d:
72:39:bd:fa:d8:80:09:bc:f7:9c:97:a4:0b:d0:41:dc:17:b4:
ad:4a:65:cd
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUI3XX+y3k2F0g+gLwUc/xDcNggm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDYxMTM3NDhaFw0yNzAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDY1NzVhNmMzOWM1NmY5ZDgyNzdlYmExMmQ1ZWFiMmU0ZDNiNmI5MTg5NjE0
Y2NiYWE5NTgzN2RjODQyMzY0ZjUxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOSObu3aJvErk/tucVrM7w3qVmQmBelUEJsw0jrLitIiA9aMS9zRI3Gzss3J
G1c8+TUmwR4W3F/jqS/jUPFgoYf8DwQWKKe1lHDQp6U6KF3+uWzR6NWhbLAMiZgA
DbyiKEnUoJDMYLM2V+dMxihxAr0/yJOrKxZkyAsckz/ruCBDZyUC4hx1YQ9U6dXv
XIc7DD83zh/YkRykJMuM2fT2jsgE1L6bfa+dmI7lBRmLNL5rbSTU2uMo5/eaqxIw
ZtJY35EBpDTGbneofhJGdWnJtxhet1+E84gvIMUkpIaKkOWM8nOohiC1t44Gh5zI
H0QePD2N2V8kPpyAgCxk/Ajei9cCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTaDLDe
2HwxzhRU2FvXkG3hkcrBMDAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
ZGUyN2E1ZTEtZTM5ZS00YjA4LWFhMWYtN2FmMGE5ZGY5MzlhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKiBDAN
BgkqhkiG9w0BAQsFAAOCAQEAZSEzvSuw9Bvac/vU9l4W/ucU1oYG+NmtZmMZe47q
IQthrLZmZu9lTy+q46TQeG+VOjHgA6Te9ba7AUG/itCJ3hIoRRY9IW+skKvoD8ed
+Q3mWBsfxQ7qvD4fjc5OEN+DAgd8FnjTx7DAwSRywoSAD0CjPR/X4ktCxB75Z8SF
s1G5dy3j/pBgA+ou4Krn8j7V7H4/UHL1AT9oumquxcta5rgBJ7DLaq3lkcKMVI88
fzG6QFeB5kTiZ8WB12disuz5eGY5+m2Pz18GfTok80QHrViyldecWxH1FuZwIoPR
uDcZ1ejum63amg+dcjm9+tiACbz3nJekC9BB3Be0rUplzQ==
-----END CERTIFICATE-----
Generated at Wed Nov 11 12:07:59 2026 by rpki-client