Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/11098277-95a7-4f99-bb91-f65381696681.roa
File: 11098277-95a7-4f99-bb91-f65381696681.roa (raw, json)
Hash identifier: ltf1SkbTAcZ/Cb9/l98n0C7YxEoFj1kTH2sIDfdORHI=
Subject key identifier: ED:07:38:1C:DB:B5:2E:86:1F:5F:93:D8:5E:9D:0B:5E:9E:D5:CF:0F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 01FCEDB6671FDE4A4FA3960C26C401C26DE2393E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/11098277-95a7-4f99-bb91-f65381696681.roa
Signing time: Fri 20 Feb 2026 01:40:08 +0000
ROA not before: Fri 20 Feb 2026 01:40:08 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fc:ed:b6:67:1f:de:4a:4f:a3:96:0c:26:c4:01:c2:6d:e2:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:08 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=4d258c4ae57e9d0d0e04c164f939fa93f0fa32556440697d05ee785b21314ddb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:f8:e0:c6:00:3c:45:8b:dd:e7:a9:2e:50:
40:ad:76:30:98:c4:40:8e:75:47:c6:52:d3:a6:b9:
de:24:5f:1c:59:d5:75:1d:5c:d7:bc:b4:be:5c:46:
cb:a0:1b:59:df:60:70:be:44:75:ab:cc:8b:e2:6c:
5d:55:f7:ef:42:aa:cb:4b:2b:8e:6f:02:6a:60:e5:
d4:5c:af:b9:61:c5:c1:e4:2e:cb:67:88:6b:5a:ab:
19:67:63:42:cd:e8:31:92:27:2e:89:90:99:62:ad:
e8:a3:79:f8:84:88:d3:f9:e0:8f:a9:5d:b7:bb:1f:
95:00:a4:e3:8a:33:11:92:f8:48:ad:ab:3c:0a:9b:
23:19:47:de:1f:49:56:a8:7e:15:39:bd:b1:d8:f6:
f5:21:02:40:60:76:3d:b8:6b:f5:78:88:40:2d:d7:
7f:e4:6a:26:9f:98:f4:fc:be:55:f3:4f:ae:fe:db:
7d:e2:39:fe:df:e5:f8:ee:56:b2:97:73:98:3d:2b:
3f:05:fd:f9:61:67:23:47:58:41:1a:8a:57:ce:c2:
19:6e:6b:1b:68:07:16:c2:5e:f5:fb:fe:c9:8a:c7:
8b:8c:69:0a:f5:2d:cd:84:81:94:55:4b:76:d1:ef:
7a:1b:ca:7f:03:94:48:e7:22:a1:95:0a:28:1c:a3:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:07:38:1C:DB:B5:2E:86:1F:5F:93:D8:5E:9D:0B:5E:9E:D5:CF:0F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/11098277-95a7-4f99-bb91-f65381696681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:1000::/36
Signature Algorithm: sha256WithRSAEncryption
2e:94:56:72:51:d3:d1:41:81:e1:9c:37:0e:9c:ce:6e:c9:e3:
7c:85:4c:4c:98:56:30:0f:df:75:aa:6e:03:93:ea:5c:73:4e:
9c:70:e6:88:0b:f2:af:15:24:05:6b:06:0b:6b:01:0f:70:91:
5b:26:ac:25:fe:86:de:e7:d0:50:4c:05:5f:3f:db:14:52:0f:
21:7c:24:5a:b3:c9:5d:f3:57:8e:8e:22:24:c4:b0:30:63:c6:
33:4c:9c:fa:79:2f:0d:e6:90:dc:35:47:0a:8d:b5:e7:9f:48:
42:34:23:93:03:02:51:28:df:ec:b0:b9:be:6e:39:04:f7:f6:
ef:7b:4c:ad:a5:b1:9e:64:7e:2e:45:e1:32:72:04:da:26:27:
ba:73:00:57:b1:06:ed:86:fe:70:8d:c8:f6:db:1d:b1:09:d4:
3e:85:ed:16:d7:a3:89:1b:13:3a:21:ad:68:12:80:74:a2:ee:
f8:1d:34:11:94:68:7c:dc:f2:ac:31:01:fc:b5:fc:27:81:37:
03:e2:3f:8b:b0:14:0b:a6:2e:b4:11:33:e1:27:4b:97:64:96:
ea:de:14:78:8c:db:11:b1:95:11:3a:39:48:c6:cc:71:59:8c:
c9:d2:82:6e:f2:32:19:fd:0a:54:df:9c:6c:ec:59:26:7f:ec:
cb:e8:a0:bf
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUAfzttmcf3kpPo5YMJsQBwm3iOT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjAyMjAwMTQwMDhaFw0yNjA1MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDRkMjU4YzRhZTU3ZTlkMGQwZTA0YzE2NGY5MzlmYTkzZjBmYTMyNTU2NDQw
Njk3ZDA1ZWU3ODViMjEzMTRkZGIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANz0+ODGADxFi93nqS5QQK12MJjEQI51R8ZS06a53iRfHFnVdR1c17y0vlxG
y6AbWd9gcL5EdavMi+JsXVX370Kqy0srjm8CamDl1FyvuWHFweQuy2eIa1qrGWdj
Qs3oMZInLomQmWKt6KN5+ISI0/ngj6ldt7sflQCk44ozEZL4SK2rPAqbIxlH3h9J
Vqh+FTm9sdj29SECQGB2Pbhr9XiIQC3Xf+RqJp+Y9Py+VfNPrv7bfeI5/t/l+O5W
spdzmD0rPwX9+WFnI0dYQRqKV87CGW5rG2gHFsJe9fv+yYrHi4xpCvUtzYSBlFVL
dtHvehvKfwOUSOcioZUKKByj9TsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTtBzgc
27Uuhh9fk9henQtentXPDzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MTEwOTgyNzctOTVhNy00Zjk5LWJiOTEtZjY1MzgxNjk2NjgxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8MQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAulFZyUdPRQYHhnDcOnM5uyeN8hUxMmFYwD991
qm4Dk+pcc06ccOaIC/KvFSQFawYLawEPcJFbJqwl/obe59BQTAVfP9sUUg8hfCRa
s8ld81eOjiIkxLAwY8YzTJz6eS8N5pDcNUcKjbXnn0hCNCOTAwJRKN/ssLm+bjkE
9/bve0ytpbGeZH4uReEycgTaJie6cwBXsQbthv5wjcj22x2xCdQ+he0W16OJGxM6
Ia1oEoB0ou74HTQRlGh83PKsMQH8tfwngTcD4j+LsBQLpi60ETPhJ0uXZJbq3hR4
jNsRsZUROjlIxsxxWYzJ0oJu8jIZ/QpU35xs7Fkmf+zL6KC/
-----END CERTIFICATE-----
Generated at Sat Feb 21 07:25:49 2026 by rpki-client