Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da9e970-b050-44d0-83e9-f0e83f98a196.roa
File: 1da9e970-b050-44d0-83e9-f0e83f98a196.roa (raw, json)
Hash identifier: ffMob8w0YdUZfs6j/IcRbSdYGILaDGL3xRmUDliPla0=
Subject key identifier: 84:95:68:06:E7:F9:13:3F:C1:9A:E2:03:B1:9C:E1:F7:FE:30:3F:53
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5BEF8DA06C84A975EA1BD1076958B72EFA46AC38
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da9e970-b050-44d0-83e9-f0e83f98a196.roa
Signing time: Fri 20 Feb 2026 01:30:53 +0000
ROA not before: Fri 20 Feb 2026 01:30:53 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ef:8d:a0:6c:84:a9:75:ea:1b:d1:07:69:58:b7:2e:fa:46:ac:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:30:53 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=8090610b9663ff0bcf5dd62098853ccce3e60c228bd7ca60d374b612e67f7a8e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:cf:fc:f0:a4:35:49:ac:ee:10:a4:b0:ec:
00:b5:01:9d:fc:5e:a6:b7:55:1d:85:5c:a0:33:7c:
ca:2f:f0:90:18:76:f1:bf:88:02:cf:40:6d:dc:9d:
4a:33:67:5a:0c:c7:93:a4:85:bb:a5:68:20:f0:1b:
2c:0a:97:89:f6:8e:59:c6:69:9f:d2:15:69:b3:f9:
88:a0:11:41:ac:7f:b0:0b:60:95:6d:59:86:1d:37:
31:28:87:ac:54:5d:23:d5:81:86:08:f6:90:5b:21:
ec:bd:6f:97:70:2f:ae:96:64:7c:88:b7:ea:4b:53:
1d:a0:fb:2e:5c:0f:c9:c2:7f:9f:27:4d:bf:06:e0:
9a:2a:10:f4:6a:29:fd:2f:69:fb:de:a0:0b:59:6c:
f8:09:56:14:cd:22:ed:13:60:3b:ed:26:3b:e7:d9:
fb:de:dd:5e:07:2c:5b:f7:fd:7e:c5:ed:2d:d1:5b:
ae:82:fd:6c:05:d9:43:2a:cd:50:be:47:01:c6:f7:
32:90:c7:33:e1:f0:f1:6a:4f:70:b1:cf:d4:32:cc:
3e:d3:5b:41:4d:c2:33:5e:01:52:57:23:2c:3e:a6:
b4:49:71:a4:11:5d:a4:9a:27:45:77:d7:f8:aa:74:
ea:f4:6c:ac:bb:95:dd:a9:18:ed:22:fd:45:34:a7:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:68:06:E7:F9:13:3F:C1:9A:E2:03:B1:9C:E1:F7:FE:30:3F:53
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da9e970-b050-44d0-83e9-f0e83f98a196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
98:ab:1b:e6:34:62:46:cf:c3:6c:61:6d:c8:89:ef:12:20:67:
75:72:f1:c8:1a:b2:2b:bc:7d:1a:44:94:6b:8e:2c:ec:dd:08:
24:42:6d:61:fa:a3:30:76:00:c3:90:18:a7:d1:98:7e:5d:83:
a7:f2:ab:29:ac:f3:30:be:52:0b:10:96:76:88:44:00:60:77:
0a:68:63:95:cc:54:8d:13:da:03:91:ef:9c:b0:e5:c4:bc:3c:
60:62:03:b4:9f:b8:ae:84:58:51:eb:9b:32:3f:ef:70:76:d6:
f8:69:36:b9:ba:00:51:ce:8c:fd:ac:96:28:4e:ba:40:6c:51:
dc:6d:28:b8:1f:6a:f3:fa:f1:6a:56:fd:f2:48:f5:4c:c1:c2:
c0:c2:5f:bd:e8:b2:2c:ac:36:3e:d1:fe:67:6e:7a:39:f3:3c:
3f:f8:9c:a7:6e:db:44:f4:f5:ab:6d:32:9d:75:38:ed:3e:5e:
55:9d:2d:26:83:f3:63:30:d2:3a:a5:f0:c0:89:25:17:68:59:
c4:5e:fc:69:62:b2:f5:19:7c:14:e4:47:3c:bf:a4:18:8a:2b:
28:4f:2e:92:e9:10:ca:2f:21:1b:26:99:a9:1d:1d:62:86:95:
6b:c9:93:e7:7a:e3:01:ca:a0:a3:a8:3f:fc:35:0d:39:51:5a:
01:22:a1:67
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUW++NoGyEqXXqG9EHaVi3LvpGrDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjAyMjAwMTMwNTNaFw0yNjA1MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDgwOTA2MTBiOTY2M2ZmMGJjZjVkZDYyMDk4ODUzY2NjZTNlNjBjMjI4YmQ3
Y2E2MGQzNzRiNjEyZTY3ZjdhOGUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiIz/zwpDVJrO4QpLDsALUBnfxeprdVHYVcoDN8yi/wkBh28b+IAs9Abdyd
SjNnWgzHk6SFu6VoIPAbLAqXifaOWcZpn9IVabP5iKARQax/sAtglW1Zhh03MSiH
rFRdI9WBhgj2kFsh7L1vl3AvrpZkfIi36ktTHaD7LlwPycJ/nydNvwbgmioQ9Gop
/S9p+96gC1ls+AlWFM0i7RNgO+0mO+fZ+97dXgcsW/f9fsXtLdFbroL9bAXZQyrN
UL5HAcb3MpDHM+Hw8WpPcLHP1DLMPtNbQU3CM14BUlcjLD6mtElxpBFdpJonRXfX
+Kp06vRsrLuV3akY7SL9RTSn+bUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSElWgG
5/kTP8Ga4gOxnOH3/jA/UzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MWRhOWU5NzAtYjA1MC00NGQwLTgzZTktZjBlODNmOThhMTk2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8QA
MA0GCSqGSIb3DQEBCwUAA4IBAQCYqxvmNGJGz8NsYW3Iie8SIGd1cvHIGrIrvH0a
RJRrjizs3QgkQm1h+qMwdgDDkBin0Zh+XYOn8qsprPMwvlILEJZ2iEQAYHcKaGOV
zFSNE9oDke+csOXEvDxgYgO0n7iuhFhR65syP+9wdtb4aTa5ugBRzoz9rJYoTrpA
bFHcbSi4H2rz+vFqVv3ySPVMwcLAwl+96LIsrDY+0f5nbno58zw/+JynbttE9PWr
bTKddTjtPl5VnS0mg/NjMNI6pfDAiSUXaFnEXvxpYrL1GXwU5Ec8v6QYiisoTy6S
6RDKLyEbJpmpHR1ihpVryZPneuMByqCjqD/8NQ05UVoBIqFn
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:52:01 2026 by rpki-client