Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
File: 4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa (raw, json)
Hash identifier: +w+bC9YHwKD3zQ6wYeG4BYe1O3ab8DCHG9p8zoPxtUA=
Subject key identifier: 9A:53:35:D2:E9:A5:02:24:45:DA:05:31:A4:E9:C2:1C:C0:63:37:93
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 677F057CFA25500B975FA15B21090CC0132A15F6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
Signing time: Fri 20 Feb 2026 01:40:44 +0000
ROA not before: Fri 20 Feb 2026 01:40:44 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7f:05:7c:fa:25:50:0b:97:5f:a1:5b:21:09:0c:c0:13:2a:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:44 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=3d5e7c82b89eb8e78dd5e8011b330cd9fb5eca3e464db99adf10cf495ad27fe2, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:5b:41:6d:29:c2:bc:83:2c:d8:d4:73:4c:
3e:31:71:fc:3a:98:72:3e:0b:ef:35:10:b5:e0:58:
9f:85:f2:30:e3:0c:ce:f8:3a:0b:38:bb:05:4c:eb:
91:c7:50:d7:82:ac:b4:36:12:f1:d5:b5:fe:96:d7:
35:b8:40:e1:f1:34:46:fc:50:2e:08:0f:8d:9c:d2:
2d:63:85:d0:01:c3:e4:aa:14:c1:3a:8b:f1:0e:56:
93:2e:5d:9a:86:49:68:dc:e9:a5:26:76:40:5f:fe:
5f:09:a8:03:84:ef:7c:b9:58:49:cf:bb:b8:b8:9f:
31:96:4b:1b:9e:b2:d2:34:13:ce:57:57:5f:54:8b:
97:06:2d:f3:80:d6:97:47:10:65:f4:da:4d:f0:ad:
87:35:eb:cd:69:b9:b9:f5:05:c3:04:5d:c2:16:f8:
d6:1b:55:09:d7:0e:3e:b1:ab:df:e2:ae:29:2b:bc:
d5:b9:3a:a3:52:75:3e:f9:4c:29:dc:05:0c:52:61:
bd:a1:9e:51:8f:f1:1f:23:82:97:95:b4:3d:c1:3f:
99:7b:a8:cd:48:77:64:d3:4b:ed:21:dc:00:5a:58:
00:50:20:00:e0:ed:74:32:55:cb:d5:72:3c:88:d2:
c5:03:d9:75:d6:2f:5d:2a:e6:e9:4d:32:f0:e1:e2:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:35:D2:E9:A5:02:24:45:DA:05:31:A4:E9:C2:1C:C0:63:37:93
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2800::/40
Signature Algorithm: sha256WithRSAEncryption
22:8a:6a:6c:eb:18:03:7e:9e:be:c1:c8:ad:5e:35:f7:8a:dc:
c3:b1:99:a3:99:b2:97:09:a8:c6:90:1a:84:56:73:d0:45:29:
41:f0:e9:40:9d:d7:f0:15:5d:dc:c1:a4:26:9e:a9:4b:f9:d5:
6a:ac:b8:4d:d2:29:4a:fb:4f:36:d4:55:28:ed:b6:c9:bf:e2:
b4:e8:0d:90:bc:1b:87:e3:9c:7d:f6:01:ef:ab:a4:ce:c9:a3:
e7:6a:5b:fb:0b:ba:53:b9:da:9a:a0:8e:7e:25:c4:96:f1:4a:
f1:90:20:7e:dc:ff:78:3f:73:28:2f:db:d5:ee:68:84:73:6d:
c7:14:f5:f3:90:47:bc:2e:7c:40:33:23:87:50:db:75:e7:a1:
b2:3e:99:c4:e9:12:43:2f:41:ab:59:13:10:79:89:d2:df:3f:
24:82:1d:5f:ce:2e:fe:8d:d3:42:91:40:78:8d:1f:37:85:51:
10:ba:a6:2c:31:91:ac:de:69:43:51:70:45:ff:a5:95:f6:05:
24:a4:4f:bb:a6:ca:b2:3a:85:f5:3f:86:b0:8e:6e:a1:83:3f:
c3:d3:04:e6:3d:01:d7:82:30:d2:a4:a2:59:e0:2d:55:27:38:
0e:68:d3:1a:ec:e2:6a:e2:28:f8:40:80:7f:51:24:a6:35:3c:
21:f3:66:87
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZ38FfPolUAuXX6FbIQkMwBMqFfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjAyMjAwMTQwNDRaFw0yNjA1MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkNWU3YzgyYjg5ZWI4ZTc4ZGQ1ZTgwMTFiMzMwY2Q5ZmI1ZWNhM2U0NjRk
Yjk5YWRmMTBjZjQ5NWFkMjdmZTIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJpBW0FtKcK8gyzY1HNMPjFx/DqYcj4L7zUQteBYn4XyMOMMzvg6Czi7BUzr
kcdQ14KstDYS8dW1/pbXNbhA4fE0RvxQLggPjZzSLWOF0AHD5KoUwTqL8Q5Wky5d
moZJaNzppSZ2QF/+XwmoA4TvfLlYSc+7uLifMZZLG56y0jQTzldXX1SLlwYt84DW
l0cQZfTaTfCthzXrzWm5ufUFwwRdwhb41htVCdcOPrGr3+KuKSu81bk6o1J1PvlM
KdwFDFJhvaGeUY/xHyOCl5W0PcE/mXuozUh3ZNNL7SHcAFpYAFAgAODtdDJVy9Vy
PIjSxQPZddYvXSrm6U0y8OHiVqUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSaUzXS
6aUCJEXaBTGk6cIcwGM3kzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NGUxNzVlYWQtMThiMS00ZTIzLWExM2UtNjhiYTJhNjljMmFiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8Mo
MA0GCSqGSIb3DQEBCwUAA4IBAQAiimps6xgDfp6+wcitXjX3itzDsZmjmbKXCajG
kBqEVnPQRSlB8OlAndfwFV3cwaQmnqlL+dVqrLhN0ilK+0821FUo7bbJv+K06A2Q
vBuH45x99gHvq6TOyaPnalv7C7pTudqaoI5+JcSW8UrxkCB+3P94P3MoL9vV7miE
c23HFPXzkEe8LnxAMyOHUNt156GyPpnE6RJDL0GrWRMQeYnS3z8kgh1fzi7+jdNC
kUB4jR83hVEQuqYsMZGs3mlDUXBF/6WV9gUkpE+7psqyOoX1P4awjm6hgz/D0wTm
PQHXgjDSpKJZ4C1VJzgOaNMa7OJq4ij4QIB/USSmNTwh82aH
-----END CERTIFICATE-----
Generated at Sat Feb 21 08:45:52 2026 by rpki-client