Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
File: 3ad06e7c-7473-4104-a394-28daf30bc72f.roa (raw, json)
Hash identifier: orWxwsCdK//UrVEID/wmrCOzWeSv0/V+SY6VemiMwR0=
Subject key identifier: 61:DB:74:3C:2A:AE:B1:67:BA:13:05:B3:4B:19:DE:A3:53:01:FC:03
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 27ACDCC8AD24389B5AD2A2CAF024A7A138AE36A1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
Signing time: Fri 20 Feb 2026 01:30:47 +0000
ROA not before: Fri 20 Feb 2026 01:30:47 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ac:dc:c8:ad:24:38:9b:5a:d2:a2:ca:f0:24:a7:a1:38:ae:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:30:47 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=aa20af606ad19ba531b72027227b84938b27ed1cec7a18486c1ad9c97073ab5b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:6d:89:67:56:1a:be:35:e0:2b:ce:0d:28:
13:32:e7:cc:38:04:5f:0f:ed:fe:44:64:ac:49:af:
93:1c:01:b9:82:c4:7f:6c:a6:04:16:98:d3:1a:ff:
98:31:99:a9:22:0a:f4:3e:bb:82:1e:32:91:b1:4d:
30:e0:4a:1a:7b:f1:8b:25:f1:9c:4d:2f:00:e2:ab:
51:5b:f3:c5:0c:b5:8a:8f:c5:3e:a9:ba:00:e7:79:
ec:a4:5a:21:2a:4c:fe:87:e1:d5:f2:64:63:4d:d3:
08:8d:b4:c6:a4:6e:48:1b:4b:5c:a5:03:8b:41:3b:
9f:4f:78:fc:ee:d2:c9:a4:ec:f0:0e:d7:28:9c:6a:
52:6f:4d:62:6a:4e:90:4d:b6:55:19:0d:42:93:7c:
4a:c6:cd:47:2c:ed:01:d2:6c:49:e4:3d:fa:a0:2a:
da:15:08:c2:ee:6c:28:32:3f:80:1a:62:8f:e3:cd:
34:38:5e:25:2a:c0:2f:a9:2b:44:de:77:ff:32:88:
c7:cc:d7:d5:9f:fb:da:fe:e4:ba:5d:cd:4f:3d:50:
6e:35:2e:b1:62:e3:cd:c3:e3:f0:53:8b:78:ee:69:
fb:b3:c7:02:65:a5:92:c1:87:13:b7:96:b8:de:fa:
cc:63:2b:1c:17:70:18:ca:0d:00:8e:93:f4:b7:d7:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:74:3C:2A:AE:B1:67:BA:13:05:B3:4B:19:DE:A3:53:01:FC:03
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5800::/40
Signature Algorithm: sha256WithRSAEncryption
4e:b9:21:9d:99:b1:df:03:39:82:40:cc:49:cf:61:c4:b0:c3:
7c:b3:07:16:b8:ef:d4:94:c9:5a:b5:77:62:b4:f1:d7:30:e1:
b5:cf:65:42:8d:f8:9a:c6:1d:59:e3:d8:dc:29:0f:c4:da:d8:
47:71:04:ca:df:8c:05:65:10:87:55:ca:9d:fc:df:6c:ef:b7:
19:f5:07:bc:cf:42:02:8a:34:70:00:0b:d4:9a:d5:95:5b:39:
63:bd:d7:44:2f:8e:7b:b1:8c:bd:03:82:cc:93:eb:b5:0b:92:
3e:3c:8a:d4:59:55:36:74:ea:cd:53:91:bc:16:60:c1:8b:08:
c7:51:65:0d:22:49:1d:d8:9c:28:7d:a8:a6:96:c3:53:eb:3e:
47:19:69:70:f4:f0:4d:99:c5:bd:5f:d8:cd:62:38:2f:25:ef:
5d:1b:53:7f:60:a6:a1:33:0d:1e:58:1a:1a:47:3b:af:08:1d:
72:bc:17:8d:9f:65:bd:97:06:0e:d4:19:02:eb:69:33:0b:b8:
03:fe:c9:87:ad:2e:85:e8:80:c3:56:5a:0c:a4:13:ed:eb:5e:
84:ce:77:8c:91:01:7c:9d:4d:0d:df:89:b3:67:51:1c:3f:f1:
6b:83:26:c6:c5:9d:28:d0:cd:65:06:50:5e:34:30:c2:e1:fd:
7c:e7:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:25:31 2026 by rpki-client