Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
File: 1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa (raw, json)
Hash identifier: OMM02x3bCu9WftV5OHPGcMRIsNETLDinjKwq+93ofOE=
Subject key identifier: 15:FD:17:10:93:1C:2C:FB:F9:E8:75:47:87:E8:7E:92:AE:18:33:B2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1DDE11C4CE02439882470F4C4D871C8A55FFC903
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
Signing time: Fri 20 Feb 2026 01:30:50 +0000
ROA not before: Fri 20 Feb 2026 01:30:50 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:de:11:c4:ce:02:43:98:82:47:0f:4c:4d:87:1c:8a:55:ff:c9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:30:50 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=b1d81ce044bf65e938aea3efef66159741c042d56a6fdf50f093509b934e7c61, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:a7:2b:d2:4c:37:91:ad:28:8b:7a:90:23:
10:27:4f:b2:b0:2a:fc:4c:ed:fd:d2:f5:b3:9d:75:
e0:99:f8:a1:8d:25:7e:b3:a6:c7:18:8d:4b:1c:f2:
8f:79:05:98:aa:d7:48:6d:51:52:31:99:bd:1f:49:
3e:1d:43:d1:6d:dc:94:31:7d:aa:b8:2f:a5:b6:fa:
d2:e4:d7:f6:02:9d:4b:57:db:98:c8:a3:ea:fc:15:
7d:f1:43:a5:60:3c:fa:eb:3f:cd:b5:6c:33:9e:a5:
2a:d3:91:67:90:25:7b:56:4a:a5:7c:42:fa:f0:66:
9e:fc:d5:18:5a:13:1a:62:80:68:2e:1f:0c:8f:57:
eb:a4:b7:e4:d5:d1:bf:f1:2f:82:c3:38:9e:c1:62:
f5:2c:56:1b:b2:bf:00:d9:72:90:08:ec:01:31:99:
b0:05:77:24:70:54:f6:31:05:90:dc:fd:7f:5e:a3:
36:0c:01:69:b8:af:c6:2e:9d:d1:46:88:7a:49:6b:
fd:c6:d4:b4:18:b3:01:3b:66:c9:cc:14:81:af:84:
be:09:3f:6d:71:ab:57:1f:e7:58:56:a9:9d:6f:cb:
44:44:87:ea:6c:36:96:f3:9e:65:65:75:76:7b:a2:
29:df:59:6b:54:9a:57:83:69:83:68:a2:4a:b4:d2:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:17:10:93:1C:2C:FB:F9:E8:75:47:87:E8:7E:92:AE:18:33:B2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:8::/47
Signature Algorithm: sha256WithRSAEncryption
77:62:e6:9d:47:26:a2:43:c3:fa:70:8a:df:4f:67:24:fa:06:
ea:19:df:b9:4f:b3:07:1a:63:c5:95:7f:8d:d9:0a:c3:dd:cc:
fe:f5:8d:02:98:16:15:f1:d6:f5:50:cb:55:15:c5:7d:8b:bc:
85:3c:25:36:7b:95:38:9f:44:71:08:78:6b:1d:14:d3:61:eb:
ce:de:6c:a7:f1:2f:1f:99:e7:47:6b:8b:f9:ac:93:7a:da:77:
3c:75:40:c4:97:89:1c:af:37:67:0e:80:11:ab:98:0a:7e:7f:
c2:85:97:63:91:c1:fd:1b:80:42:8d:1c:2d:67:c0:00:9b:04:
45:71:d7:fb:a1:d6:3d:bc:d6:10:67:f1:fb:a2:79:9e:0b:39:
eb:78:b3:97:04:f6:3c:2a:d9:56:7f:30:b7:ea:50:c9:6f:83:
3e:32:62:ad:1c:45:8f:8c:7a:3e:32:89:93:85:d2:dc:88:6c:
e0:e2:c1:e9:53:9f:e8:bc:45:84:ec:6c:92:94:23:4e:01:cc:
f3:32:73:07:a8:29:88:3f:73:89:78:b4:b6:60:f5:be:b8:22:
75:00:11:f5:8a:00:3b:bb:95:82:3d:cc:f6:00:7e:d8:5f:66:
d0:7a:a1:c7:cc:85:e8:e1:b4:d8:65:5f:2d:da:43:41:03:f9:
56:e9:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:24:42 2026 by rpki-client