Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/df7cdd9a-e0f7-4931-82bf-0d0697e1b386.roa
File: df7cdd9a-e0f7-4931-82bf-0d0697e1b386.roa (raw, json)
Hash identifier: T33gZWWC7V7jYSjE6EFZpVkupf95y/JP4HYgLE0l/gM=
Subject key identifier: 7C:FB:2A:17:39:E3:69:FB:9D:AC:5C:2B:CE:3C:68:94:A7:36:32:AD
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 7B814E4EA44266AC46D8F4E2DA9DCEA49ED43D
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/df7cdd9a-e0f7-4931-82bf-0d0697e1b386.roa
Signing time: Thu 05 Nov 2026 10:18:10 +0000
ROA not before: Thu 05 Nov 2026 10:18:10 +0000
ROA not after: Wed 03 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:81:4e:4e:a4:42:66:ac:46:d8:f4:e2:da:9d:ce:a4:9e:d4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 5 10:18:10 2026 GMT
Not After : Feb 3 23:59:59 2027 GMT
Subject: serialNumber=9f6348c303ee2810b71995b5a1ad94972d10c58529c8a36d022f620b75c3278c, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:35:e9:8e:00:14:4a:74:f4:00:bf:44:8d:
de:85:04:bb:a6:2e:16:6c:d9:5c:23:e8:e4:ff:d3:
fe:2f:f1:25:a2:27:b3:a8:40:ef:96:81:b0:df:d8:
31:1a:51:af:59:d2:e9:74:21:eb:f0:88:10:21:7a:
e8:1c:46:c0:93:af:bb:90:44:18:f6:02:b4:22:e8:
99:b2:0c:04:ba:21:12:9c:9e:0f:51:10:80:56:b6:
97:d7:18:14:70:c0:ee:4d:49:41:00:e4:ff:18:98:
11:d7:96:b3:a1:a0:40:7b:f7:e4:9a:c3:b1:8d:b5:
ea:5e:54:ef:89:8b:76:03:29:5e:a9:f7:a9:9c:16:
a6:55:82:09:36:19:4a:37:01:2c:4f:c8:b9:01:21:
dd:4c:f9:cf:27:78:ed:d8:07:f2:42:5c:9d:75:95:
9f:a8:2f:88:25:94:a5:41:12:28:a7:7c:9e:21:a6:
5c:a9:8d:8f:93:c7:7d:72:45:5d:5a:8e:a0:51:f0:
7e:40:7d:8e:0f:cd:c1:eb:a8:84:d4:0f:f6:83:7f:
2c:cd:52:b2:7a:b7:21:ee:9a:b0:cc:3d:8c:e5:64:
e5:9c:24:39:15:f4:27:c6:8c:03:a9:60:64:cd:03:
fa:8f:fe:73:2f:96:ad:31:69:24:00:4b:fc:8c:87:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:2A:17:39:E3:69:FB:9D:AC:5C:2B:CE:3C:68:94:A7:36:32:AD
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/df7cdd9a-e0f7-4931-82bf-0d0697e1b386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ba:cd:10:c8:5e:d6:55:a4:9d:a5:18:30:21:18:70:2b:aa:
c0:36:cd:f1:dd:dd:48:2a:31:5c:4a:8a:cb:d9:09:e4:1b:0b:
fc:ad:37:e5:05:5c:57:4f:3d:d3:46:31:6d:7a:41:45:d9:45:
2a:d2:7b:1f:ea:9f:60:92:9c:6e:fb:b2:bc:7d:21:e9:a9:71:
c6:09:2e:22:14:89:02:4e:61:b2:ea:8f:94:90:9e:e4:1f:3d:
e8:12:e8:e0:bd:25:c6:18:07:61:d9:92:db:5f:a4:da:2c:5b:
b0:d4:da:e9:70:df:47:9f:ed:35:ab:f1:1b:86:ee:d4:51:67:
10:3b:ce:ad:56:a8:4d:f7:43:43:d2:b7:1e:db:29:3c:63:a7:
e4:0d:24:6e:cf:cb:35:01:a8:e2:95:73:a7:f8:37:1f:43:d9:
56:3f:0d:64:4b:a2:48:a6:0e:3b:09:bb:7c:64:54:58:8c:0f:
56:b8:1c:4d:56:9e:f4:36:29:3e:3c:67:66:b1:e2:4f:06:3a:
3d:38:bc:cf:f9:ae:63:e8:ac:c4:ac:55:c7:a7:b9:a5:cf:ab:
af:02:d5:10:b0:a2:00:d4:c7:38:81:a5:c6:65:0b:0b:bb:38:
c3:d3:a3:b0:e9:cc:7f:59:c2:25:12:6c:34:d0:e9:44:65:81:
4e:0a:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:33:25 2026 by rpki-client