Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/0a8b6e8d-7c30-4fa2-b009-7b99eeca32ec.roa
File: 0a8b6e8d-7c30-4fa2-b009-7b99eeca32ec.roa (raw, json)
Hash identifier: /3jikbp63mDWoeMVfQGFbGGg8jUzRZHNP7ek79X6IyM=
Subject key identifier: 90:F0:49:9F:39:11:5D:36:B3:FC:D7:FD:A7:C2:AB:6F:31:E9:BF:FB
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 1A7066EB7BB8A17494CA743A5415C75E0E02AF81
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/0a8b6e8d-7c30-4fa2-b009-7b99eeca32ec.roa
Signing time: Wed 04 Nov 2026 12:30:16 +0000
ROA not before: Wed 04 Nov 2026 12:30:16 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 146.162.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:70:66:eb:7b:b8:a1:74:94:ca:74:3a:54:15:c7:5e:0e:02:af:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 4 12:30:16 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=4f41b3b02f25074ab79876c8e977b78060944383d3d6dbdc15d552b6d5145c0b, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:28:5d:e2:2f:e7:84:19:ae:05:1d:9d:5c:48:
a1:3a:2b:a3:8b:d8:70:68:93:2e:e4:97:a7:0e:da:
62:a2:0b:c5:62:59:68:6e:ba:9b:bf:29:8d:4a:a6:
52:cc:87:c9:20:ab:54:74:79:c7:f3:6d:88:ad:d2:
60:15:42:36:be:97:9e:c9:58:0a:a9:fa:cf:4c:6f:
75:ea:a8:a1:99:b1:2c:28:54:e1:37:56:df:98:0e:
31:3f:23:85:93:56:3e:39:cb:ac:56:60:68:1c:06:
17:2f:d5:42:0b:9f:d0:39:40:66:71:ab:5f:f7:c6:
3b:2b:7e:1b:6c:e0:a0:09:0d:ea:5d:fa:7c:a9:d1:
af:eb:70:13:e9:e5:70:74:79:1b:57:9e:83:73:4c:
ec:ac:ef:72:9d:71:e7:48:9c:6b:85:16:06:9d:0f:
a1:55:fa:f7:54:e6:15:ae:94:44:b1:dc:8d:a7:c5:
fa:90:35:65:58:a6:a2:c4:9d:22:87:54:a1:2d:b3:
d5:ca:b9:05:1e:ff:cc:cf:b9:07:5f:6b:e3:a5:36:
34:fd:b7:c7:93:ce:83:d1:68:b0:31:4a:d8:b2:30:
47:8e:02:c5:fd:49:42:d3:f0:37:78:7b:2b:c2:c5:
8a:c7:1e:4b:6d:f9:5c:1a:8c:75:55:03:a4:2a:03:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:49:9F:39:11:5D:36:B3:FC:D7:FD:A7:C2:AB:6F:31:E9:BF:FB
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/0a8b6e8d-7c30-4fa2-b009-7b99eeca32ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:d3:ab:8e:e2:de:42:98:d7:45:cb:03:84:e1:60:bb:97:ab:
e9:b1:f3:93:a4:9d:87:2c:47:4c:d5:fa:16:5b:89:3b:7a:7b:
d1:70:06:a6:e7:51:41:70:55:49:f4:dd:05:71:2f:0b:65:eb:
45:8e:4b:8b:e1:87:7d:68:1b:4f:17:e4:6f:02:80:52:1e:9d:
ee:7a:31:07:8e:b7:8a:1e:4b:70:4c:9d:40:50:63:69:6c:b4:
bd:1d:6b:28:74:79:fb:6b:8e:bd:cb:29:e6:f6:1e:1c:5b:0a:
5c:da:50:7d:b7:aa:ad:0d:81:c8:c4:1b:99:99:89:78:52:7c:
4f:0e:ae:60:95:8d:73:94:c2:1f:89:2f:5c:90:d6:4a:7c:09:
e6:df:28:7f:a7:89:dd:d3:4e:8d:00:ed:e4:a9:6a:95:ea:7a:
48:a7:cf:57:ea:73:ff:90:dc:52:d1:f6:f4:cd:b5:35:2a:51:
b2:f0:32:56:c9:c0:a1:18:e7:08:a9:b4:43:22:d9:ae:fe:67:
ce:d9:1e:1a:d7:48:ed:3a:3b:52:9d:db:ed:f9:a6:fa:0e:38:
b1:c3:f8:63:2c:02:27:7d:61:c3:16:d8:52:91:0b:fd:4d:e0:
3f:23:0b:16:6a:0e:e3:d6:ac:59:14:47:f5:c6:be:04:80:29:
8e:b0:60:2f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUGnBm63u4oXSUynQ6VBXHXg4Cr4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDQxMjMwMTZaFw0yNzAyMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDRmNDFiM2IwMmYyNTA3NGFiNzk4NzZjOGU5NzdiNzgwNjA5NDQzODNkM2Q2
ZGJkYzE1ZDU1MmI2ZDUxNDVjMGIxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO8oXeIv54QZrgUdnVxIoToro4vYcGiTLuSXpw7aYqILxWJZaG66m78pjUqm
UsyHySCrVHR5x/NtiK3SYBVCNr6XnslYCqn6z0xvdeqooZmxLChU4TdW35gOMT8j
hZNWPjnLrFZgaBwGFy/VQguf0DlAZnGrX/fGOyt+G2zgoAkN6l36fKnRr+twE+nl
cHR5G1eeg3NM7Kzvcp1x50ica4UWBp0PoVX691TmFa6URLHcjafF+pA1ZVimosSd
IodUoS2z1cq5BR7/zM+5B19r46U2NP23x5POg9FosDFK2LIwR44Cxf1JQtPwN3h7
K8LFisceS235XBqMdVUDpCoDGyECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSQ8Emf
ORFdNrP81/2nwqtvMem/+zAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
MGE4YjZlOGQtN2MzMC00ZmEyLWIwMDktN2I5OWVlY2EzMmVjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKiHzAN
BgkqhkiG9w0BAQsFAAOCAQEAxNOrjuLeQpjXRcsDhOFgu5er6bHzk6SdhyxHTNX6
FluJO3p70XAGpudRQXBVSfTdBXEvC2XrRY5Li+GHfWgbTxfkbwKAUh6d7noxB463
ih5LcEydQFBjaWy0vR1rKHR5+2uOvcsp5vYeHFsKXNpQfbeqrQ2ByMQbmZmJeFJ8
Tw6uYJWNc5TCH4kvXJDWSnwJ5t8of6eJ3dNOjQDt5Klqlep6SKfPV+pz/5DcUtH2
9M21NSpRsvAyVsnAoRjnCKm0QyLZrv5nztkeGtdI7To7Up3b7fmm+g44scP4YywC
J31hwxbYUpEL/U3gPyMLFmoO49asWRRH9ca+BIApjrBgLw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:13:13 2026 by rpki-client