Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/9aefc989-f280-4c34-8791-8734e3e984c2.roa
File: 9aefc989-f280-4c34-8791-8734e3e984c2.roa (raw, json)
Hash identifier: pAQEsPwH6Ms86nGIHjj4WWhBN9DMzW+tpDG1DogCR/I=
Subject key identifier: B4:47:F4:24:5F:0C:A0:C0:05:F0:8D:95:95:B2:34:3D:04:8B:29:22
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 48D4AF86972A3F82D4C9D3A5E6F2B56E23D7E501
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/9aefc989-f280-4c34-8791-8734e3e984c2.roa
Signing time: Wed 04 Nov 2026 17:13:18 +0000
ROA not before: Wed 04 Nov 2026 17:13:18 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d4:af:86:97:2a:3f:82:d4:c9:d3:a5:e6:f2:b5:6e:23:d7:e5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 4 17:13:18 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=16c0b0fde858af116df00ae1be272fd354c4a4180807b4bec90503fd6d501984, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4a:93:e2:8a:e9:ee:46:e4:dd:57:f0:4e:c3:
9c:40:5a:72:ff:d2:a9:90:01:5e:f0:87:0b:42:3b:
52:36:bc:7d:90:00:09:d0:89:00:79:e3:21:52:0f:
e1:e0:89:54:e1:cd:17:6b:9e:c9:82:ed:cd:47:76:
48:75:70:18:45:23:d3:4a:5b:7c:d8:b4:d6:32:19:
f7:17:32:32:43:49:a3:32:cc:db:88:77:72:f6:4d:
a4:b6:3b:77:fe:7b:4f:aa:d9:8e:09:fe:73:46:df:
f8:5d:d0:a1:10:ce:44:ac:cb:4f:cc:59:b3:e9:98:
3d:21:69:c0:28:00:0e:74:69:e1:4b:ef:7d:83:6c:
72:9a:74:90:50:74:e0:92:ff:9e:26:0e:50:38:c0:
94:8d:df:f6:da:b5:52:f1:52:4f:2b:9d:c2:2f:5e:
dc:2b:05:58:34:21:a2:2a:fb:59:85:dc:68:9d:02:
db:b8:9f:3a:02:06:8d:43:61:6b:4c:c9:64:37:98:
2d:64:45:19:19:a4:6c:d6:f6:c8:2d:08:ef:88:b5:
bc:aa:c5:8a:f7:e2:b8:09:ee:ee:f9:e9:72:78:ce:
a4:0e:07:2b:bb:71:29:5e:f8:f2:3f:a2:db:5c:16:
ca:83:8a:44:b9:1b:15:2c:78:86:ab:40:1c:2d:c3:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:F4:24:5F:0C:A0:C0:05:F0:8D:95:95:B2:34:3D:04:8B:29:22
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/9aefc989-f280-4c34-8791-8734e3e984c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.24.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ff:80:97:58:b5:d4:56:50:f2:cc:68:2a:ed:a2:cd:15:bb:
f2:03:01:f8:ab:1e:4b:b0:9b:fd:56:ce:07:ff:bf:e3:4a:4f:
96:c7:6f:ec:e3:0c:01:b2:d7:74:1a:08:b3:d7:12:a9:fc:35:
9e:1f:ba:ac:dd:48:79:dd:e1:37:7d:d5:ef:33:e0:39:08:26:
b5:e1:4c:bd:ef:6a:a5:ad:4f:2e:0f:66:44:8f:67:ea:02:8f:
bb:a8:94:5e:ac:e5:cd:1d:db:70:07:7e:41:87:f4:87:0c:a2:
5c:ee:b5:40:1d:f9:52:64:44:cc:8c:81:c0:cf:c1:36:86:62:
96:d6:a3:6b:e8:a0:6f:a4:ab:47:a9:12:ca:4b:5b:e8:0c:9e:
1d:6b:1a:3b:a9:81:6c:ab:8b:ec:c2:5e:5c:49:68:56:3c:eb:
a5:89:91:8a:15:5e:44:3c:73:1d:79:a3:40:c3:ca:f8:4a:22:
0a:00:13:0d:03:73:29:ac:e0:01:99:ba:bc:25:7b:f7:7c:7b:
1b:3f:77:5e:77:ac:40:cc:33:01:c8:b5:2d:99:dd:4f:7a:27:
a1:3c:86:54:12:56:fa:f8:7c:ea:ce:f2:5b:cf:d7:6d:67:0f:
6d:7f:7b:8e:00:12:17:86:ad:2c:16:ee:24:ee:b8:91:bb:55:
ac:34:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:39:28 2026 by rpki-client