Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa
File: 4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa (raw, json)
Hash identifier: fHXvK4KMIyZIf9fv6E3J/zDe1iAWzRE2VwCINpi7AT4=
Subject key identifier: 6D:33:3D:A3:BF:50:48:37:F0:91:77:24:8D:A2:08:1F:B2:91:EB:DC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0947A9CB7F4C4A01FD8C67F3FA94FCB1727DCBB8
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa
Signing time: Fri 20 Feb 2026 01:40:05 +0000
ROA not before: Fri 20 Feb 2026 01:40:05 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:47:a9:cb:7f:4c:4a:01:fd:8c:67:f3:fa:94:fc:b1:72:7d:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:05 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=ceaf42280d26d8b75815a07217899985a135bc7ad75735cc27f48da4f33f1192, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5a:20:51:5f:57:97:6a:64:a3:c3:f9:3e:a9:
16:a6:80:c4:60:d5:31:bf:3b:6c:56:ed:a0:18:c1:
d4:da:e1:2d:35:2c:ef:20:c8:fb:4c:75:7a:4e:a6:
32:be:bd:1b:c9:85:a5:10:39:84:94:19:73:8a:0a:
20:bb:1c:db:41:4b:1a:bb:8f:eb:25:0e:82:f7:75:
72:e2:ab:d5:ff:eb:1d:f7:c8:66:85:49:52:76:85:
54:fd:2e:84:03:6c:3a:73:0b:16:a4:1f:14:e6:bb:
21:05:ba:ee:55:f2:a9:6d:6c:74:d3:12:21:06:40:
70:ac:e9:69:cb:18:01:85:5f:1e:72:2b:5d:b2:cb:
07:83:28:25:16:b9:2a:ed:2e:a2:cd:3e:0a:d7:24:
10:f1:f8:98:58:59:5a:10:dc:f5:1f:81:c4:69:4f:
36:4d:62:c2:82:f3:0c:94:08:e8:2c:6c:fe:2f:a8:
14:21:5b:1b:42:cf:5d:c1:06:17:a1:13:22:bf:e6:
55:d1:26:31:7e:61:da:ea:62:8f:a0:94:d5:98:68:
37:f5:12:1c:b1:7c:84:db:79:f5:70:d9:f9:d6:fb:
54:76:4e:17:8a:2a:b3:33:1c:45:b0:02:00:ff:4c:
2d:78:ec:14:5e:ec:35:cd:b1:ec:8b:6a:d1:0c:74:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:33:3D:A3:BF:50:48:37:F0:91:77:24:8D:A2:08:1F:B2:91:EB:DC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4000::/36
Signature Algorithm: sha256WithRSAEncryption
85:bb:4f:f6:7e:25:89:8b:2f:23:05:56:42:65:76:5b:76:b8:
d8:58:e0:2a:c3:53:2a:81:7f:19:d6:99:59:be:f9:12:61:42:
01:67:43:f1:8b:e2:f5:5c:ef:26:8d:8e:6e:22:43:9a:f9:b2:
aa:6d:84:da:d0:14:6a:5f:f3:2e:cc:49:54:dc:9d:76:58:90:
80:98:56:65:6a:b4:fa:97:fe:d9:af:96:32:89:af:16:bc:0d:
fb:df:44:98:76:3f:6d:e0:9d:cb:3a:88:f0:6f:4d:20:81:8d:
46:b7:03:d3:04:b1:48:56:57:60:2f:15:62:63:0e:1d:e4:cc:
69:43:35:24:64:9c:c9:42:38:6a:8c:af:f9:1a:94:12:fa:20:
88:7c:d2:8d:e1:d1:55:9d:e7:17:6c:22:4c:1b:1b:e6:20:c6:
d0:af:4d:f3:83:de:0d:80:0f:35:be:3e:15:03:68:25:36:18:
20:51:7a:2c:76:a5:04:33:6b:61:22:3d:c9:2b:ca:46:da:d8:
be:74:96:0e:b1:47:b2:3a:1a:d3:1e:f1:10:c4:a4:e6:7f:7e:
91:ab:a2:ec:59:ba:65:d8:29:b6:38:8b:d2:66:0b:83:22:3c:
fb:f3:80:57:76:8e:e7:e6:bb:65:0d:92:f0:44:63:31:91:99:
0b:cc:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:24:41 2026 by rpki-client