Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6ada7e3e-42a2-45fa-873f-bceaed65b832.roa
File: 6ada7e3e-42a2-45fa-873f-bceaed65b832.roa (raw, json)
Hash identifier: LPybvuk1/FFyS79tI6AsthPn5yOa6LPuGLgV6VCcYgM=
Subject key identifier: 60:04:CB:A1:25:ED:0D:5E:9D:43:32:09:D4:47:1E:21:4E:46:3A:D4
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 19EDA8EA413235036AEE9B3697BDCEE59DEA2781
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6ada7e3e-42a2-45fa-873f-bceaed65b832.roa
Signing time: Fri 20 Feb 2026 01:40:41 +0000
ROA not before: Fri 20 Feb 2026 01:40:41 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ed:a8:ea:41:32:35:03:6a:ee:9b:36:97:bd:ce:e5:9d:ea:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:41 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=05c8ac5cd2f995b6b1f71b8733fb88d97cbf39d84ea1f89ed50b20bb50c3951e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:ad:05:21:09:00:36:c9:2b:04:b8:2a:95:
de:c7:5c:ac:f2:74:27:8a:ab:27:6c:1c:3b:e5:ac:
c1:93:0a:d1:81:be:c1:0b:cc:b8:73:ee:fe:d3:5b:
0f:f1:53:94:74:fc:5f:c5:e5:7d:e1:5e:22:3a:6f:
0b:b7:13:49:eb:95:4c:d5:36:90:50:54:1c:90:9b:
e4:d8:ee:3e:67:8c:c7:81:cf:17:43:fb:60:70:b0:
0c:0f:a3:82:94:5c:5b:c5:a8:48:27:04:22:a5:87:
83:0f:cf:3a:67:85:4b:47:61:45:af:f7:d9:c4:4f:
1a:b9:34:2a:dd:77:f9:b9:73:9c:0b:09:60:c6:80:
92:92:db:fe:bd:3a:a3:37:41:47:e7:3d:fe:8d:39:
9d:3b:29:4e:a6:2c:1e:97:da:c5:61:ec:43:14:a9:
75:6f:9c:40:c5:71:b7:70:e9:1f:91:58:40:70:b8:
bb:73:4f:11:8c:ab:e7:34:87:c0:92:1d:4d:43:71:
33:2e:8d:06:82:4f:c1:f2:65:20:40:fb:bd:3d:d0:
12:6d:fb:11:9a:d4:b0:6f:75:d4:7c:aa:df:58:f5:
c9:e0:a2:6a:c2:40:26:e6:fc:47:99:18:34:d6:ff:
f9:f2:c5:d5:1a:44:88:37:fe:8f:90:53:2e:3b:71:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:04:CB:A1:25:ED:0D:5E:9D:43:32:09:D4:47:1E:21:4E:46:3A:D4
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6ada7e3e-42a2-45fa-873f-bceaed65b832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8000::/36
Signature Algorithm: sha256WithRSAEncryption
c2:5a:90:7b:b5:06:89:d9:79:a8:c9:e0:bd:e6:ce:7f:13:b9:
87:82:e0:bc:48:4d:95:34:f4:03:91:f0:7d:c2:5b:60:94:aa:
34:31:26:7d:ce:47:58:20:ff:e6:0a:fa:5c:9b:79:34:6c:62:
2c:77:d6:a9:da:cf:e6:fc:e4:7a:b4:f2:fb:52:37:1a:b9:ef:
3a:be:cb:63:a3:47:cf:50:78:75:4b:6c:32:44:8b:cc:ee:c1:
3d:2d:67:90:dc:65:8e:5b:f8:25:0d:06:db:38:22:e3:31:90:
eb:59:38:bf:32:b9:6a:70:9d:78:96:a9:c2:77:c2:86:2d:bb:
76:20:94:2d:93:e7:93:46:a2:8f:f5:f6:46:e7:83:7d:b5:c4:
cd:fa:61:7f:7d:29:e7:8a:73:b0:49:57:9c:a7:d0:80:b1:30:
e4:65:b5:d2:06:6b:fe:5e:1e:02:eb:ee:8b:d6:44:31:76:b4:
dc:74:8b:55:17:94:d7:53:fa:bc:57:f7:c1:b1:94:70:48:68:
06:05:af:76:76:3c:97:8b:ed:16:c9:b7:0f:22:9d:53:99:01:
b7:13:68:44:14:65:08:b1:ee:8d:d4:98:9a:fa:ff:68:2b:2a:
bc:f0:ca:c7:22:b5:05:94:08:91:14:f3:c2:54:96:6c:16:17:
37:93:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:29:50 2026 by rpki-client