Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/b2415bdd-3465-4d81-b0aa-75151771afb2.roa
File: b2415bdd-3465-4d81-b0aa-75151771afb2.roa (raw, json)
Hash identifier: yA68RGsxF7pxzhcH5cMzkLT7r7m/E4NZgk8a1F0UfaU=
Subject key identifier: F3:2C:6A:6B:29:87:C2:89:47:8C:2E:6F:60:7A:6F:8E:65:82:45:82
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 56AA79B24318B30FABF4DA5465F7EF0424FE98E2
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/b2415bdd-3465-4d81-b0aa-75151771afb2.roa
Signing time: Wed 04 Nov 2026 12:30:17 +0000
ROA not before: Wed 04 Nov 2026 12:30:17 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 146.162.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:aa:79:b2:43:18:b3:0f:ab:f4:da:54:65:f7:ef:04:24:fe:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 4 12:30:17 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=e591a3928596a94de64d833c0d87ab8842ba0e657035674ddd69043584b1625d, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:77:ae:9d:38:a9:5b:ae:23:c3:db:82:b9:
e7:82:91:9f:e0:3a:89:a6:d7:93:6b:9c:bd:e7:b2:
5d:41:9c:03:f3:e0:18:63:95:14:aa:f6:a9:ad:31:
b4:a0:6f:cc:6c:ee:b5:06:ec:02:b6:f9:85:26:a6:
1d:f8:88:64:90:b2:c4:a3:ef:74:88:c8:3e:49:e8:
ba:da:90:16:3b:1d:c1:d7:21:06:b1:57:29:bc:9c:
28:e5:3c:04:8a:18:d3:fa:55:66:9e:56:cc:0f:af:
fc:bd:e3:4f:be:05:b5:03:4e:a6:05:4f:d9:52:c4:
c3:fe:2b:df:a4:dc:58:36:76:ef:0f:8f:af:c6:5e:
e4:3c:a8:9a:12:12:f9:af:7f:5d:ac:21:4e:07:4c:
4f:34:5e:29:ea:90:6b:fd:1f:8d:e2:28:3e:94:95:
ac:f4:66:da:fe:5c:b6:bc:88:a0:04:1b:49:60:4d:
33:8e:85:1e:b7:d6:1f:aa:a8:14:ad:e5:75:6c:55:
f5:ee:e8:4e:04:03:3e:ac:cb:eb:f7:0a:90:f5:7e:
06:15:8f:f7:14:1f:aa:c9:63:c2:17:41:7b:3c:18:
24:61:14:36:fe:27:db:87:ba:ba:37:09:23:24:da:
83:80:57:db:4e:65:b5:27:eb:98:85:7c:8c:6b:d2:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2C:6A:6B:29:87:C2:89:47:8C:2E:6F:60:7A:6F:8E:65:82:45:82
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/b2415bdd-3465-4d81-b0aa-75151771afb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:db:22:81:de:de:6b:e6:dd:bf:10:6d:60:bc:67:f2:13:f3:
98:39:7e:74:14:59:cd:e4:71:3d:be:88:61:23:cb:c0:c7:f8:
92:52:e6:24:6a:2e:68:22:ca:2a:02:5a:e1:99:c7:46:86:1f:
91:91:f9:75:24:b6:40:40:6e:2d:54:c9:e4:41:94:4a:28:1e:
bc:f0:40:f1:34:bd:e9:2d:5f:1d:13:7c:11:87:ef:34:f8:3b:
cf:9d:80:01:8b:1d:e6:16:36:1b:f1:d3:67:bb:fa:2d:a9:5e:
59:c7:82:a8:a7:20:84:07:ea:64:fb:3a:65:3b:14:09:97:c4:
9b:50:f1:c4:68:2d:a3:37:2a:4d:bc:16:1c:2a:e0:3c:06:1c:
24:cb:0a:e5:ed:3f:04:20:69:72:cc:ec:ae:04:63:b4:f8:b3:
ad:45:55:52:c8:ba:1f:98:d9:8f:dc:83:68:0a:80:56:f6:01:
19:5d:ab:c9:7f:9e:38:30:b7:1d:3c:a2:35:ea:a9:a8:74:d2:
bb:e0:78:b2:70:f4:b9:19:68:06:93:26:5c:35:02:93:58:d8:
c5:27:10:76:7f:d5:48:88:54:a8:88:4e:56:d7:85:c1:ec:29:
8c:db:a2:f3:b9:5d:9b:ae:9b:c6:0e:34:72:1d:01:c9:58:da:
9a:eb:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:40:09 2026 by rpki-client