Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/e2e25d45-6175-4d7a-8068-af9c5b5e05f1.roa
File: e2e25d45-6175-4d7a-8068-af9c5b5e05f1.roa (raw, json)
Hash identifier: kDAxWnH4jEiPj00mOwCe1m10+3+9jT1TTelRl25tDkE=
Subject key identifier: 1B:5F:8E:CC:2C:52:40:1E:06:EE:B9:62:7A:17:C0:41:EF:3E:A1:21
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 62D2FA1B0B7FF7BED9999C5885FEA4D84A9DADC3
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/e2e25d45-6175-4d7a-8068-af9c5b5e05f1.roa
Signing time: Fri 06 Nov 2026 13:11:49 +0000
ROA not before: Fri 06 Nov 2026 13:11:49 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d2:fa:1b:0b:7f:f7:be:d9:99:9c:58:85:fe:a4:d8:4a:9d:ad:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 6 13:11:49 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=082c1b401e54d9c30908634e360906714b8ffe5639be9cada2373ed6c82254f7, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:17:1e:f9:a3:ef:24:4d:8e:30:94:b2:6b:
bf:09:d1:a0:cd:d0:11:f5:70:cf:5a:70:91:51:1d:
d3:b1:6f:c3:2a:5c:ee:e3:35:03:1f:24:8d:7d:05:
c4:ae:da:5b:05:64:c5:e4:ad:02:04:06:03:a5:7b:
31:98:10:0c:1e:5b:18:ac:8e:64:f6:12:33:32:03:
8b:0f:88:73:df:1e:3d:3a:86:c6:a9:0c:95:1b:85:
19:12:56:ca:eb:cb:f3:73:58:f9:32:4b:06:46:52:
27:53:6e:e7:e5:84:94:a0:5f:62:89:6e:69:db:88:
4d:68:62:00:ac:42:7f:ac:e4:f0:dc:94:97:ab:b8:
80:95:ab:70:4c:b9:31:e1:cf:03:09:c2:8d:76:74:
02:4f:99:18:bc:8e:45:dd:13:a1:83:b1:b8:7e:76:
e3:05:af:72:79:06:ae:1e:42:2a:57:42:7a:0a:1f:
1b:8d:4d:12:8b:ec:2d:a8:83:32:e6:c2:4f:ca:d3:
83:3c:30:7f:52:55:94:b1:6c:ec:ff:69:9c:56:a0:
74:94:f7:60:8c:09:bd:1c:cc:f1:87:a4:49:2c:ff:
5c:0d:c3:99:8a:c5:fb:cf:45:fa:43:8f:ca:55:27:
b5:82:18:ab:e3:4f:c8:02:01:21:66:db:6f:37:0b:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5F:8E:CC:2C:52:40:1E:06:EE:B9:62:7A:17:C0:41:EF:3E:A1:21
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/e2e25d45-6175-4d7a-8068-af9c5b5e05f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ab:c3:22:e7:5d:aa:78:5c:8c:54:56:e3:e5:44:a9:41:8e:
93:2d:65:ee:29:ec:18:ac:35:62:15:70:f6:b7:99:67:23:a7:
dd:76:e5:ce:d4:34:82:79:87:c7:a8:31:c4:df:26:b2:92:03:
ce:e3:19:24:54:23:47:56:f6:47:16:1f:f4:99:ed:99:e8:bf:
5a:35:72:e2:d1:1b:b2:02:53:73:0d:a1:e6:86:2f:71:f8:34:
90:18:73:16:56:bd:68:09:5d:32:da:ab:7e:33:56:7e:36:b3:
94:87:13:82:d3:c5:62:a6:27:e2:7f:30:9d:e5:e1:4b:ee:4a:
df:a6:b9:19:23:2a:71:06:3c:96:96:36:6c:47:7c:d3:3a:e6:
94:06:19:fe:1c:a2:eb:45:78:fc:bb:7d:5c:d0:6a:85:df:4f:
fe:a0:14:02:31:6a:bc:a9:e9:34:f5:b5:cb:44:5c:93:57:03:
0f:93:71:f5:fd:6b:76:b9:4a:d9:03:a6:49:86:28:d0:77:a4:
ee:43:6a:6e:b3:e7:a3:b7:18:8d:13:86:23:6e:53:1e:d3:02:
3a:82:b4:6a:11:52:a3:b2:cf:99:60:2f:4c:0c:66:1d:8e:89:
99:aa:f7:fb:b0:ae:28:51:8a:16:75:3a:6a:88:20:5d:ad:31:
d0:eb:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:42:41 2026 by rpki-client