Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4a0ca7a1-00ab-48be-a825-9123b34b7077.roa
File: 4a0ca7a1-00ab-48be-a825-9123b34b7077.roa (raw, json)
Hash identifier: onJ426Z4Xnr6tWaAjvx/B6+xvj8OHY7WrkkCqvtQF8g=
Subject key identifier: 3D:91:AD:96:43:9A:21:DF:16:61:9A:44:58:FB:15:99:1F:BB:63:F6
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 761B4C0A4FC418E84335619F1403F27082795DB7
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4a0ca7a1-00ab-48be-a825-9123b34b7077.roa
Signing time: Fri 20 Feb 2026 01:40:47 +0000
ROA not before: Fri 20 Feb 2026 01:40:47 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1b:4c:0a:4f:c4:18:e8:43:35:61:9f:14:03:f2:70:82:79:5d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:47 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=0b1f1e166e6b705f66fd948bbdcfdfcc85d68c1e8a59457ce38064768f050fac, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:81:a0:af:f3:be:8e:ea:3d:f4:f4:1d:43:
af:76:88:c1:b1:87:3f:db:19:4a:ed:c7:c9:86:9b:
79:a4:51:ca:e6:44:55:84:8e:0a:ba:18:e7:0e:d4:
16:90:02:b1:a1:06:22:bc:e3:6e:7e:b1:b8:dd:e8:
07:08:8b:08:9e:d5:53:92:e1:84:77:bf:9a:b5:a4:
34:17:3f:19:bc:4e:9f:34:64:63:83:a4:46:4b:46:
59:f9:d4:9f:b0:41:eb:66:ad:3f:a1:60:96:06:da:
77:af:df:f4:0c:00:d2:77:f0:b4:93:68:3e:ce:e0:
fd:67:f0:12:35:ea:25:fc:7d:28:5e:4a:7e:15:35:
c7:35:59:64:d8:12:2a:39:a0:47:d7:97:a4:47:bd:
7a:fe:e7:ef:17:8f:4c:26:d9:14:44:55:da:91:2c:
46:b0:19:b3:c6:20:ac:76:06:73:8a:bd:08:ce:03:
b2:7a:d5:70:21:79:88:22:ae:5d:1e:a4:eb:c1:17:
b4:e9:66:1d:85:12:64:c5:85:11:b8:88:22:32:94:
1e:45:53:6b:83:5b:23:3a:12:26:1a:92:d9:c7:da:
76:46:ad:6a:7a:ed:00:2e:a8:19:8f:5c:65:24:8d:
63:67:ed:7c:db:e0:77:d6:d1:e0:37:68:93:7a:23:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:AD:96:43:9A:21:DF:16:61:9A:44:58:FB:15:99:1F:BB:63:F6
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4a0ca7a1-00ab-48be-a825-9123b34b7077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f880::/48
Signature Algorithm: sha256WithRSAEncryption
c9:fa:21:ed:3d:a4:47:e9:97:e1:77:a0:34:d6:c4:ce:b4:96:
c7:1d:af:07:20:c4:d3:92:d3:39:7d:9b:50:b4:84:ae:d7:8c:
12:d5:04:ef:a4:a3:b0:f6:88:14:fc:2e:b8:21:e9:1d:fa:4d:
2d:52:5e:b9:64:b3:65:ac:1a:38:e1:56:50:32:43:6c:bf:41:
c5:94:8e:cd:92:3d:6b:4c:63:a1:ff:ef:2f:7b:5c:1e:4e:36:
c2:c7:b4:9f:32:4c:3f:8e:d1:c0:af:6a:86:d0:9d:b5:40:06:
de:98:5a:a5:c4:f4:44:04:79:9f:97:d6:15:b3:3f:2f:5e:ae:
32:b7:33:04:70:e5:f7:94:75:2b:6b:5d:a2:7c:cf:e3:1c:e3:
bf:08:b8:aa:7e:8e:0b:72:5b:7a:22:04:e9:b5:f9:16:78:54:
92:06:36:e8:b1:b1:b5:91:40:8c:83:b7:ac:56:07:34:90:a6:
18:f8:95:10:06:24:6b:c1:7b:3c:4c:0b:19:0b:f3:4e:03:f1:
a6:6c:7e:4a:dd:a0:64:04:e4:f4:8e:e5:ff:a7:72:c4:f6:05:
64:e3:6c:f2:73:34:d7:9b:5a:8d:39:76:60:12:34:89:16:83:
71:4b:c2:eb:c6:1f:c5:6a:4d:ba:a3:28:8e:11:13:18:d3:8a:
ac:09:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:25:29 2026 by rpki-client