Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/6ae3720b-b158-42c2-ace1-ec0f74e21739.roa
File: 6ae3720b-b158-42c2-ace1-ec0f74e21739.roa (raw, json)
Hash identifier: IpTd81eFbvpL23dExFz1cGm1Ic9oThUrkq/+VTEp/78=
Subject key identifier: 3E:22:E0:EC:9F:1C:02:12:FA:F5:7C:60:8F:C5:94:40:E0:11:16:9B
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 47BD630E4796E3C4149BFB5C4EE2805F084024D7
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/6ae3720b-b158-42c2-ace1-ec0f74e21739.roa
Signing time: Wed 04 Nov 2026 17:12:38 +0000
ROA not before: Wed 04 Nov 2026 17:12:38 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 146.162.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bd:63:0e:47:96:e3:c4:14:9b:fb:5c:4e:e2:80:5f:08:40:24:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 4 17:12:38 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=3e8997921efc7467db46e93d4169491414aa5da05903cb68e162026bfbed1bc1, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:01:43:c7:5e:fd:41:54:4c:67:25:c0:7c:
4f:00:00:92:75:f3:a0:a9:3a:3e:87:78:2a:c0:4f:
e2:72:00:8a:9b:f0:19:89:c9:08:ac:c3:29:f6:35:
4f:00:f8:80:dc:f9:58:49:8c:7d:fd:db:4d:87:76:
15:4a:86:32:90:ed:84:47:f0:a3:40:e1:7a:ef:ac:
6d:a3:6b:ef:ee:d2:3d:e6:6b:15:fa:5a:38:da:fc:
33:95:32:a9:40:5d:da:a3:ba:d4:94:8f:e0:89:ad:
7d:4f:9a:1f:f9:ea:62:ab:60:12:cb:ac:91:43:7a:
c7:ae:51:ca:bf:ef:70:d2:1d:a9:a1:bc:2f:4c:99:
9c:28:d7:9b:de:a6:bb:4a:e0:ad:8a:49:35:43:9d:
df:ca:52:04:44:77:16:a0:8c:71:00:eb:57:5f:98:
1d:1b:eb:cb:28:05:95:ad:c2:85:5c:9f:9f:90:4b:
97:1d:e7:24:41:fe:00:4d:36:bf:67:07:5f:5a:f4:
48:05:fa:bf:05:9b:96:5c:73:4f:96:95:81:f2:34:
09:47:38:23:61:0e:f5:67:4c:75:98:0a:dc:fa:a2:
80:68:b8:37:c3:f8:ac:d1:06:55:ed:cd:56:db:52:
fb:01:7b:8c:bd:67:68:8b:b8:37:5b:88:9f:2b:fd:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:E0:EC:9F:1C:02:12:FA:F5:7C:60:8F:C5:94:40:E0:11:16:9B
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/6ae3720b-b158-42c2-ace1-ec0f74e21739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.16.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:5e:53:44:83:9f:37:12:e2:88:7d:a2:45:7a:43:04:1e:5d:
d3:e6:3b:4d:90:84:43:5e:fa:1f:f2:7b:b6:83:9c:bc:ef:69:
3e:ff:a3:4f:d2:a0:b7:85:cc:f0:fc:e5:16:44:8f:a6:71:7e:
ca:00:a9:b2:61:1d:f5:96:91:3d:55:6b:3c:b0:f0:40:ed:d7:
4d:d1:6f:d7:d9:2f:3f:f4:2f:f7:77:80:94:6f:bc:92:cd:e8:
9f:93:1a:0a:e2:fe:43:22:17:11:ac:dd:f4:55:6b:7d:b1:ea:
07:02:cb:2b:91:0a:56:9f:f1:90:25:ac:c1:7a:79:67:65:71:
39:c6:4e:62:87:dc:21:5e:9a:d9:38:3a:0a:75:48:57:bf:d3:
1c:bc:f3:40:d6:92:6d:ce:fe:7a:71:c3:fa:e2:e8:c0:f8:73:
16:08:69:2d:22:bb:6d:1c:f0:fd:7e:2d:d5:35:37:65:a3:32:
8f:a8:7f:12:f1:87:a7:0d:4f:29:c0:7c:77:4f:e7:12:92:54:
96:e9:bf:a0:59:87:c1:6f:76:b8:c5:46:36:18:a8:7d:46:99:
fd:50:0e:65:37:1c:0a:b9:61:c4:c7:83:fe:84:f2:79:d9:0a:
be:d8:d9:e0:11:31:1a:99:63:94:ce:b9:c5:77:e3:6c:8c:70:
e5:e0:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:53:41 2026 by rpki-client