Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/e091280a-1e65-4f5c-acb0-0bd7f826aee9.roa
File: e091280a-1e65-4f5c-acb0-0bd7f826aee9.roa (raw, json)
Hash identifier: c1A4qHQeyhFn+AZ4iMBrH644Ia9eJYK4SNf2tQR6HIY=
Subject key identifier: 90:38:A0:0C:A8:C5:86:25:40:96:F8:42:D8:BD:C4:FA:5F:21:B7:34
Certificate issuer: /CN=309861f0554a6994e186a70cdf8487e32031ffee
Certificate serial: 4EDFFB3B1E4CA6C54DE4B42CDA609E12FFDA1048
Authority key identifier: 30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/e091280a-1e65-4f5c-acb0-0bd7f826aee9.roa
Signing time: Wed 04 Nov 2026 12:29:45 +0000
ROA not before: Wed 04 Nov 2026 12:29:45 +0000
ROA not after: Tue 02 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 146.162.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:df:fb:3b:1e:4c:a6:c5:4d:e4:b4:2c:da:60:9e:12:ff:da:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309861f0554a6994e186a70cdf8487e32031ffee
Validity
Not Before: Nov 4 12:29:45 2026 GMT
Not After : Feb 2 23:59:59 2027 GMT
Subject: serialNumber=351c295f0fb60f60032d713e5f5aac71cb815585635e342b5b8e33d16b2a90d8, CN=4004ffc2-d53c-4b2c-831b-89e215f51105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:7e:e6:3c:45:35:8e:8d:81:33:ba:4f:03:
09:fe:8c:23:5f:76:51:e6:38:3b:2b:e2:64:28:06:
e9:a0:d5:fc:7a:0d:88:d9:b5:d7:6a:23:17:f9:1e:
64:a0:ea:5b:c6:10:41:1d:f8:29:92:07:a0:27:ec:
5e:fd:3c:68:c4:08:b7:e2:4c:e4:78:8a:10:fb:e9:
a4:8d:48:5c:30:43:e5:50:db:48:62:bb:ae:c5:7e:
52:cd:99:cd:db:bb:e6:a9:ff:82:07:1e:c6:b3:8a:
3e:55:33:52:04:95:af:07:c5:5c:e5:87:97:87:05:
10:0a:96:e6:a6:f1:ac:b5:f1:54:a8:7d:92:fe:6f:
2d:79:6b:bc:53:b3:50:67:8d:e2:9c:67:6b:c9:28:
50:e7:ca:2b:a1:4f:82:c7:b8:b6:85:77:95:e8:d4:
93:3d:15:5e:ca:e4:ab:37:18:81:27:b7:63:ef:6b:
cb:dd:ba:bb:60:35:0a:dc:cb:93:92:03:ef:ff:b9:
ba:4b:fe:b8:32:01:ff:8c:64:c8:10:d5:03:83:d0:
05:8e:ca:89:dd:64:d5:f2:fb:7e:9b:21:a1:07:27:
49:8b:4c:44:50:f8:b9:40:3f:88:50:6a:85:06:c6:
ab:3e:c3:cb:97:38:e3:1b:19:75:a8:8d:1c:44:69:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:A0:0C:A8:C5:86:25:40:96:F8:42:D8:BD:C4:FA:5F:21:B7:34
X509v3 Authority Key Identifier:
keyid:30:98:61:F0:55:4A:69:94:E1:86:A7:0C:DF:84:87:E3:20:31:FF:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJhh8FVKaZThhqcM34SH4yAx_-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/e091280a-1e65-4f5c-acb0-0bd7f826aee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/395c874a-bcf9-4f7c-b900-d255072c3ee7/VXSsb0rWwSAzgipHmNLj59ujPVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.162.30.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f6:46:87:00:fa:92:47:cb:c3:67:b7:f0:28:ca:a1:88:89:
12:ea:a9:85:62:f8:30:ef:21:4e:df:a2:fd:b2:ad:5b:f9:d4:
e3:2b:e0:9b:ae:9e:3f:b4:a4:e7:67:0c:d4:ce:88:dd:76:83:
d6:b1:d4:76:08:b1:da:f9:c8:50:76:6a:87:52:1d:3f:12:ff:
4c:8e:e1:73:22:fe:c2:ea:3a:3f:07:2c:a2:dd:25:5e:0b:9f:
eb:76:99:16:1e:c6:07:ef:41:43:e7:5b:fc:03:ed:74:2c:c6:
e5:90:42:68:f9:05:8a:ee:11:61:d3:43:a9:0c:a8:17:d8:09:
da:f2:69:1f:ed:b9:c4:92:e7:a5:55:d4:76:ce:5f:37:54:8c:
f3:f7:d0:26:32:5c:12:af:d4:d0:36:34:32:0e:15:eb:ad:2c:
4a:72:ec:d5:9f:e8:79:1f:14:26:e0:f8:ad:c1:43:6d:94:33:
46:69:39:ae:d9:a5:c6:a8:63:4e:e0:6a:bd:55:22:53:12:34:
e0:0b:87:4d:86:34:46:88:08:e0:00:49:85:8f:4f:dc:0c:fc:
56:00:85:ee:6a:69:58:c8:a9:27:bc:eb:3d:62:3a:e5:58:d1:
7b:c1:68:e1:b2:2b:65:4d:7e:92:78:1e:f9:ea:a2:5e:5c:e8:
e0:81:50:26
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTt/7Ox5MpsVN5LQs2mCeEv/aEEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5ODYxZjA1NTRhNjk5NGUxODZhNzBjZGY4NDg3ZTMy
MDMxZmZlZTAeFw0yNjExMDQxMjI5NDVaFw0yNzAyMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDM1MWMyOTVmMGZiNjBmNjAwMzJkNzEzZTVmNWFhYzcxY2I4MTU1ODU2MzVl
MzQyYjViOGUzM2QxNmIyYTkwZDgxLTArBgNVBAMTJDQwMDRmZmMyLWQ1M2MtNGIy
Yy04MzFiLTg5ZTIxNWY1MTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWEfuY8RTWOjYEzuk8DCf6MI192UeY4OyviZCgG6aDV/HoNiNm112ojF/ke
ZKDqW8YQQR34KZIHoCfsXv08aMQIt+JM5HiKEPvppI1IXDBD5VDbSGK7rsV+Us2Z
zdu75qn/ggcexrOKPlUzUgSVrwfFXOWHl4cFEAqW5qbxrLXxVKh9kv5vLXlrvFOz
UGeN4pxna8koUOfKK6FPgse4toV3lejUkz0VXsrkqzcYgSe3Y+9ry926u2A1CtzL
k5ID7/+5ukv+uDIB/4xkyBDVA4PQBY7Kid1k1fL7fpshoQcnSYtMRFD4uUA/iFBq
hQbGqz7Dy5c44xsZdaiNHERpt+8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSQOKAM
qMWGJUCW+ELYvcT6XyG3NDAfBgNVHSMEGDAWgBQwmGHwVUpplOGGpwzfhIfjIDH/
7jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01KaGg4RlZL
YVpUaGhxY00zNFNINHlBeF8tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8zOTVjODc0YS1iY2Y5LTRmN2MtYjkwMC1kMjU1MDcyYzNlZTcv
ZTA5MTI4MGEtMWU2NS00ZjVjLWFjYjAtMGJkN2Y4MjZhZWU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvMzk1Yzg3NGEtYmNmOS00ZjdjLWI5MDAtZDI1NTA3MmMz
ZWU3L1ZYU3NiMHJXd1NBemdpcEhtTkxqNTl1alBWYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKiHjAN
BgkqhkiG9w0BAQsFAAOCAQEAk/ZGhwD6kkfLw2e38CjKoYiJEuqphWL4MO8hTt+i
/bKtW/nU4yvgm66eP7Sk52cM1M6I3XaD1rHUdgix2vnIUHZqh1IdPxL/TI7hcyL+
wuo6Pwcsot0lXguf63aZFh7GB+9BQ+db/APtdCzG5ZBCaPkFiu4RYdNDqQyoF9gJ
2vJpH+25xJLnpVXUds5fN1SM8/fQJjJcEq/U0DY0Mg4V660sSnLs1Z/oeR8UJuD4
rcFDbZQzRmk5rtmlxqhjTuBqvVUiUxI04AuHTYY0RogI4ABJhY9P3Az8VgCF7mpp
WMipJ7zrPWI65VjRe8Fo4bIrZU1+knge+eqiXlzo4IFQJg==
-----END CERTIFICATE-----
Generated at Sun Nov 8 06:51:14 2026 by rpki-client