Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
File: 296c0259-01c8-4923-9577-44db7a2ae85b.roa (raw, json)
Hash identifier: 5mQOIu6k8iLbvps3zUzg2dnFEwk0CSt1Jj9a4wyOFI4=
Subject key identifier: 60:A0:57:19:87:C9:BF:7F:C8:6B:7F:24:07:E2:3B:65:5C:B1:5F:6B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 095D19F19B04F81EE7EC151FF7D117F3F55FDCFE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
Signing time: Fri 20 Feb 2026 01:40:45 +0000
ROA not before: Fri 20 Feb 2026 01:40:45 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5d:19:f1:9b:04:f8:1e:e7:ec:15:1f:f7:d1:17:f3:f5:5f:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:45 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=e12dce67afcb0837efd83e2b37bc5ee0bf026fad16479c9972f18e26e54f301f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:59:3d:5a:85:96:b7:e0:8d:08:b1:37:e5:
21:fe:91:63:c4:11:73:72:70:0e:42:cb:5c:ea:ef:
1f:be:f9:63:7e:46:f6:23:35:bd:d5:04:2c:fd:17:
c4:5f:75:26:31:7b:70:62:1f:31:db:9d:6b:8c:f8:
4b:4b:f5:de:e1:86:fc:ac:b7:9f:2a:db:6c:53:f5:
af:8a:ca:7f:64:85:31:f8:c8:2d:44:b3:e8:ef:d4:
bb:ca:7c:c2:bd:76:69:26:bd:53:b7:b0:c2:45:0d:
ae:64:ea:83:62:ea:15:8a:78:e4:22:89:c4:d2:f5:
0b:c9:f9:39:f8:a2:8a:db:7d:be:8e:19:ef:ec:15:
43:37:29:b5:6f:81:26:d7:b6:82:c7:aa:39:4a:ac:
92:04:fb:af:00:c9:d2:71:bd:b8:b3:cd:70:4a:c0:
33:4e:56:57:cc:27:7c:7e:a5:57:23:4e:45:64:6d:
93:a6:5c:40:91:f5:df:6b:a0:fd:78:9a:98:33:3f:
69:9e:96:42:ab:10:c0:e4:8a:28:66:b2:10:f7:ac:
ff:49:d0:eb:ce:34:4c:af:80:74:2f:e5:3e:79:54:
88:03:54:a7:d8:70:8b:75:87:ca:bc:8a:f0:76:65:
61:68:30:77:2f:1d:3a:1b:b3:72:7f:9e:64:23:d9:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:57:19:87:C9:BF:7F:C8:6B:7F:24:07:E2:3B:65:5C:B1:5F:6B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5::/36
Signature Algorithm: sha256WithRSAEncryption
9c:9f:04:04:ff:e0:2b:fc:78:60:98:35:98:e4:c0:30:cf:3f:
71:ea:e9:b7:8f:b6:a2:e3:f6:76:fd:cc:ed:db:5e:e7:13:3d:
a1:d8:c3:0d:8b:8f:5d:ca:e8:ec:90:30:44:30:26:6f:5d:d5:
ab:d4:63:ce:36:2a:6b:c0:f0:af:15:3e:64:2d:dd:1d:7f:b2:
26:c1:08:ad:cb:ba:a5:d8:c4:2a:e3:16:ee:12:8a:f6:90:78:
d9:d1:1f:47:40:d5:0f:78:95:de:0d:ce:97:de:cf:d6:ef:75:
e5:aa:68:eb:c2:c8:2d:f9:2a:93:3a:54:ca:4b:45:3f:16:83:
fe:f3:89:d5:9a:72:af:6c:01:58:60:4b:6e:f6:8d:e0:d8:16:
b3:10:e3:23:a8:09:d7:9b:e0:8d:fb:d3:cf:12:a3:6e:62:af:
05:bf:54:da:10:12:b1:c7:64:49:ed:78:9d:10:e9:87:fe:53:
d9:0f:d3:64:a0:29:4f:f9:1f:c0:16:25:a2:de:a2:03:c9:53:
88:09:60:a3:64:22:68:ae:a5:26:93:24:c3:b0:27:ca:3c:9d:
3c:9b:d2:be:d1:e3:7c:d3:99:7c:83:23:3f:5b:0b:09:cb:fa:
fe:d7:b0:23:59:47:3c:f5:ab:f7:a7:64:f7:1b:96:da:42:6d:
22:c6:1c:c1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCV0Z8ZsE+B7n7BUf99EX8/Vf3P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjAyMjAwMTQwNDVaFw0yNjA1MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGUxMmRjZTY3YWZjYjA4MzdlZmQ4M2UyYjM3YmM1ZWUwYmYwMjZmYWQxNjQ3
OWM5OTcyZjE4ZTI2ZTU0ZjMwMWYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkAWT1ahZa34I0IsTflIf6RY8QRc3JwDkLLXOrvH775Y35G9iM1vdUELP0X
xF91JjF7cGIfMduda4z4S0v13uGG/Ky3nyrbbFP1r4rKf2SFMfjILUSz6O/Uu8p8
wr12aSa9U7ewwkUNrmTqg2LqFYp45CKJxNL1C8n5Ofiiitt9vo4Z7+wVQzcptW+B
Jte2gseqOUqskgT7rwDJ0nG9uLPNcErAM05WV8wnfH6lVyNORWRtk6ZcQJH132ug
/XiamDM/aZ6WQqsQwOSKKGayEPes/0nQ6840TK+AdC/lPnlUiANUp9hwi3WHyryK
8HZlYWgwdy8dOhuzcn+eZCPZqjsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRgoFcZ
h8m/f8hrfyQH4jtlXLFfazAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
Mjk2YzAyNTktMDFjOC00OTIzLTk1NzctNDRkYjdhMmFlODViLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8UA
MA0GCSqGSIb3DQEBCwUAA4IBAQCcnwQE/+Ar/HhgmDWY5MAwzz9x6um3j7ai4/Z2
/czt217nEz2h2MMNi49dyujskDBEMCZvXdWr1GPONiprwPCvFT5kLd0df7ImwQit
y7ql2MQq4xbuEor2kHjZ0R9HQNUPeJXeDc6X3s/W73Xlqmjrwsgt+SqTOlTKS0U/
FoP+84nVmnKvbAFYYEtu9o3g2BazEOMjqAnXm+CN+9PPEqNuYq8Fv1TaEBKxx2RJ
7XidEOmH/lPZD9NkoClP+R/AFiWi3qIDyVOICWCjZCJorqUmkyTDsCfKPJ08m9K+
0eN805l8gyM/WwsJy/r+17AjWUc89av3p2T3G5baQm0ixhzB
-----END CERTIFICATE-----
Generated at Sat Feb 21 07:24:39 2026 by rpki-client