Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/b15da18c-cd37-4fe6-ac45-45e48bd6863b.roa
File: b15da18c-cd37-4fe6-ac45-45e48bd6863b.roa (raw, json)
Hash identifier: O1ITKnCeUA7mW1qek89DhzD6TDzutYc4dYWbidgl1/Q=
Subject key identifier: FD:F3:A5:55:A8:3F:1F:3F:2A:D8:77:A2:DC:95:D9:96:EF:E4:5E:BD
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 3CD587C0A24DBAB8697170D707510900948CB6FE
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/b15da18c-cd37-4fe6-ac45-45e48bd6863b.roa
Signing time: Wed 04 Nov 2026 12:29:46 +0000
ROA not before: Wed 04 Nov 2026 12:29:46 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d5:87:c0:a2:4d:ba:b8:69:71:70:d7:07:51:09:00:94:8c:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 4 12:29:46 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=040dfa66da12577a17fad7c5318f08d63c42a80c5f2dcd3e930cd1dd8fdce4d6, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:42:87:74:02:90:6f:bc:7c:1f:0f:a8:1f:
fb:e2:5f:69:79:a9:e1:12:28:8b:c0:9b:c5:b7:fa:
2c:c1:06:67:37:14:2e:88:f8:76:94:e0:b8:6e:e9:
49:25:a1:4e:c3:68:11:22:67:4c:0a:99:b3:e8:9b:
fa:07:b7:ab:3c:22:35:05:c7:96:f4:fd:89:91:a3:
65:fc:02:6f:3c:d4:c2:ac:ac:54:cd:e0:8f:96:ef:
62:0b:52:ee:0c:cf:34:f3:88:07:af:8e:5a:5b:33:
e1:8d:d6:59:8e:96:27:03:45:cd:3d:1c:2c:10:d0:
f2:5c:01:a6:5d:b3:ef:ea:28:31:fd:f6:aa:c6:e7:
a2:cf:dc:0a:51:cf:0a:a1:f0:03:ae:2b:a1:a4:37:
7b:ec:bc:c0:44:c3:ee:44:fe:f3:24:32:4c:7c:ad:
37:a7:01:18:fe:74:c6:1f:bc:e3:58:8e:41:6c:0d:
f8:d4:93:7d:9c:58:52:90:6b:96:fe:20:32:3b:fb:
d4:6e:b6:cc:6b:6d:b2:0c:ef:ab:f3:a3:e5:95:88:
c6:57:23:1f:21:8c:c1:86:50:1f:2c:bf:4c:b6:a0:
d0:64:93:da:15:2a:8f:3f:58:9a:ea:f6:1d:62:50:
39:9b:dc:91:47:1a:14:1c:09:77:80:ed:0d:ee:59:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F3:A5:55:A8:3F:1F:3F:2A:D8:77:A2:DC:95:D9:96:EF:E4:5E:BD
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/b15da18c-cd37-4fe6-ac45-45e48bd6863b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.30.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a0:4b:0e:c1:70:b6:7f:96:01:5b:99:14:53:f5:43:16:2d:
3e:34:77:4a:a6:63:6f:a6:50:4f:f7:13:06:c4:45:72:bc:2f:
77:18:32:cd:fd:40:43:8f:b0:01:0c:94:b7:d6:db:92:8c:9a:
74:58:50:9e:96:00:4c:7c:ed:1c:0b:8e:f3:26:e4:1c:41:dd:
ac:79:5c:bd:75:2c:8f:05:09:4d:8a:76:ad:1e:b1:95:2f:09:
e9:03:35:eb:34:e0:a7:9a:8b:22:ba:6f:48:ba:46:45:aa:6f:
40:7a:c5:fc:08:82:66:42:36:94:b3:2a:9e:7a:e7:e2:6c:2d:
38:94:db:ad:45:3b:83:51:9a:fb:a7:a8:c7:9d:c0:2f:0e:ce:
72:ea:58:27:99:1b:c6:e0:60:ef:41:76:34:56:45:97:3b:c9:
03:c5:7a:52:35:bf:23:4e:7d:12:3e:55:70:c9:6a:35:81:52:
37:7b:0d:90:4b:1a:ee:fd:78:62:0c:b5:0f:1f:4b:87:ad:3c:
10:62:48:ad:09:68:8b:2d:a7:de:02:38:60:a7:ac:c3:aa:1e:
ac:be:f3:b5:5b:7c:15:9b:e2:cc:06:ed:58:ca:02:24:de:91:
c6:c3:3a:dc:5e:fd:f8:b6:30:4f:a4:31:65:52:72:8a:b4:09:
73:ce:a3:f2
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPNWHwKJNurhpcXDXB1EJAJSMtv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDQxMjI5NDZaFw0yNzAyMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDA0MGRmYTY2ZGExMjU3N2ExN2ZhZDdjNTMxOGYwOGQ2M2M0MmE4MGM1ZjJk
Y2QzZTkzMGNkMWRkOGZkY2U0ZDYxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOKyQod0ApBvvHwfD6gf++JfaXmp4RIoi8Cbxbf6LMEGZzcULoj4dpTguG7p
SSWhTsNoESJnTAqZs+ib+ge3qzwiNQXHlvT9iZGjZfwCbzzUwqysVM3gj5bvYgtS
7gzPNPOIB6+OWlsz4Y3WWY6WJwNFzT0cLBDQ8lwBpl2z7+ooMf32qsbnos/cClHP
CqHwA64roaQ3e+y8wETD7kT+8yQyTHytN6cBGP50xh+841iOQWwN+NSTfZxYUpBr
lv4gMjv71G62zGttsgzvq/Oj5ZWIxlcjHyGMwYZQHyy/TLag0GST2hUqjz9Ymur2
HWJQOZvckUcaFBwJd4DtDe5Z92ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT986VV
qD8fPyrYd6LcldmW7+RevTAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
YjE1ZGExOGMtY2QzNy00ZmU2LWFjNDUtNDVlNDhiZDY4NjNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKiHjAN
BgkqhkiG9w0BAQsFAAOCAQEAhKBLDsFwtn+WAVuZFFP1QxYtPjR3SqZjb6ZQT/cT
BsRFcrwvdxgyzf1AQ4+wAQyUt9bbkoyadFhQnpYATHztHAuO8ybkHEHdrHlcvXUs
jwUJTYp2rR6xlS8J6QM16zTgp5qLIrpvSLpGRapvQHrF/AiCZkI2lLMqnnrn4mwt
OJTbrUU7g1Ga+6eox53ALw7OcupYJ5kbxuBg70F2NFZFlzvJA8V6UjW/I059Ej5V
cMlqNYFSN3sNkEsa7v14Ygy1Dx9Lh608EGJIrQloiy2n3gI4YKesw6oerL7ztVt8
FZvizAbtWMoCJN6RxsM63F79+LYwT6QxZVJyirQJc86j8g==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:43:51 2026 by rpki-client