Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/f2a04663-1dbc-4147-b9eb-e5a999106956.roa
File: f2a04663-1dbc-4147-b9eb-e5a999106956.roa (raw, json)
Hash identifier: PxHVJ9jQYu8zaDBddQt3JutukO65FtdmW2tpUWe6mdY=
Subject key identifier: A2:BD:7B:FC:99:15:40:6D:FA:29:6C:B0:DD:15:F4:FE:E7:5D:1B:5E
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 20BD628AE26D0C00CD32D2463997BE1BEBCF5D14
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/f2a04663-1dbc-4147-b9eb-e5a999106956.roa
Signing time: Thu 05 Nov 2026 10:17:39 +0000
ROA not before: Thu 05 Nov 2026 10:17:39 +0000
ROA not after: Wed 03 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:bd:62:8a:e2:6d:0c:00:cd:32:d2:46:39:97:be:1b:eb:cf:5d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 5 10:17:39 2026 GMT
Not After : Feb 3 23:59:59 2027 GMT
Subject: serialNumber=92d41e9b9ab9cd7f6257bee248627236fded3bbb10d220bec709d034d47d2986, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:5a:e5:db:04:fe:7e:19:da:30:c2:cd:96:
31:c8:12:90:84:46:f3:30:86:66:ac:72:3d:50:7c:
84:66:f4:fb:62:9b:21:b2:ff:fb:59:84:2b:2a:1a:
02:6b:e7:79:8d:fe:d0:81:2a:f5:15:02:d1:1a:e4:
18:e2:dc:6a:63:d0:41:0b:4a:3f:c1:fc:65:e2:bc:
f8:61:13:1f:76:c4:04:ae:4a:33:0b:3e:5f:61:f5:
82:10:6e:0b:8b:1d:cd:1d:8f:9b:8b:37:6e:bc:d6:
d6:15:13:18:21:17:7d:2e:9a:88:7a:62:fe:56:93:
fe:97:81:70:86:cb:83:6d:9e:23:9d:87:69:76:1a:
09:40:34:1c:01:b6:a2:fc:ae:d3:3d:e6:cc:58:e7:
95:ab:ca:bc:34:1b:a1:1c:ae:27:c3:3e:25:f9:05:
15:5e:0f:9d:b1:26:0d:e4:71:43:28:d9:f6:97:95:
15:f4:c0:cb:9a:18:87:03:f3:92:9a:7b:94:85:97:
80:a8:58:d8:e0:30:25:77:1c:a0:f8:38:e4:22:e5:
d5:67:6f:16:4a:d3:a1:a4:57:a9:81:ff:c9:94:3d:
e1:cf:08:56:3a:5a:41:64:d1:9a:86:eb:3d:97:a3:
e2:02:c1:ae:29:06:75:50:8a:84:b4:e1:fa:61:76:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BD:7B:FC:99:15:40:6D:FA:29:6C:B0:DD:15:F4:FE:E7:5D:1B:5E
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/f2a04663-1dbc-4147-b9eb-e5a999106956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.26.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9c:bd:d0:73:79:e0:43:7b:f4:95:58:e9:65:61:df:96:88:
e3:cd:88:a9:72:6e:f9:fe:98:9e:65:3f:fc:55:67:86:83:e3:
5f:ad:c4:81:50:93:92:dc:f7:f1:fd:26:53:4d:be:c7:45:c4:
eb:5e:bc:1b:c7:81:ce:8e:8b:cc:59:de:d3:d5:e7:ad:7a:b6:
90:71:da:55:cc:00:df:f5:49:70:03:7c:8e:7b:55:cf:e1:9d:
ad:af:62:78:3c:d6:85:ba:4e:ed:84:b3:fa:7f:00:1b:51:cb:
30:0b:52:f1:d6:70:70:d2:9f:9a:be:d2:0a:5c:3c:9b:7e:8d:
cf:ef:d8:bd:d2:de:9d:bb:c9:92:ee:2c:f6:7e:fa:07:e3:37:
2c:71:7f:46:df:7b:6c:42:6b:b4:eb:44:ae:61:86:67:67:cd:
4c:87:f5:4b:64:91:78:d2:ff:fc:f4:b4:06:05:3b:30:4c:8e:
62:e1:01:e4:8d:45:3f:fa:9b:69:b4:e2:ba:5c:9f:54:ae:54:
31:bb:57:4f:d6:20:52:57:e8:22:c2:0b:ce:23:c9:72:5d:d9:
5c:f8:57:ed:59:7b:d5:9e:f8:c7:6a:28:f1:c9:d8:d1:e8:6a:
cf:37:43:ad:da:18:ec:bc:b9:b5:31:f2:1a:be:f3:7d:17:d8:
a2:f5:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 12:02:54 2026 by rpki-client