Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa
File: 6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa (raw, json)
Hash identifier: 4RkQd/STZAUbIeR32VofXIkFX0sneVDbXQEA7QEYHs8=
Subject key identifier: BA:D6:80:C4:AE:A7:00:F4:F1:AA:CB:3A:52:2E:36:88:2D:B1:6B:68
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 310F5318CA3B9F12C321A3DACA5086DB64141B5E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa
Signing time: Fri 20 Feb 2026 01:40:27 +0000
ROA not before: Fri 20 Feb 2026 01:40:27 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0f:53:18:ca:3b:9f:12:c3:21:a3:da:ca:50:86:db:64:14:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:27 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=97d310ff79592403f342154b71c85edc64528a25e110f4be1906d6b78bda0828, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:43:34:d4:e1:ea:29:bb:42:da:c7:8f:83:
7c:b7:fb:65:61:0a:af:73:02:4a:88:5c:2a:39:12:
8c:60:e6:42:00:c4:f8:d0:4f:81:8d:e5:ba:01:4f:
a5:02:c9:f7:c8:9a:c3:85:4a:87:4a:08:66:7b:7c:
50:1c:b2:9b:2d:3e:06:59:77:e1:47:63:e3:70:f4:
52:25:04:22:64:fa:a6:25:42:fd:fa:90:40:31:f3:
ef:50:0a:59:9e:57:3e:73:4a:8d:52:aa:1d:b4:c9:
0e:59:9b:b2:d9:ac:61:1b:cd:05:81:80:bd:4e:dd:
f9:c9:75:09:77:9b:e5:9c:67:92:d8:e4:75:f5:71:
89:90:02:a9:1e:47:15:c2:76:79:5f:02:6d:7c:38:
be:04:66:d4:38:b1:3f:a6:a5:46:0a:99:fa:cb:f4:
ab:50:be:22:b8:83:6f:39:d3:9d:8e:a2:09:92:5b:
81:24:69:4b:78:07:1e:9a:cb:34:0d:8d:27:23:08:
94:9a:8b:c4:46:48:f7:e8:4f:c2:44:f7:eb:d8:7b:
c8:4b:30:9b:34:a0:1c:1c:37:6a:be:99:ac:97:69:
4b:04:e3:a6:3c:e0:dc:83:bc:5f:9e:79:31:82:96:
5f:66:09:47:b5:c3:3e:d7:d1:6c:a3:a1:ba:e0:65:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D6:80:C4:AE:A7:00:F4:F1:AA:CB:3A:52:2E:36:88:2D:B1:6B:68
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d4:dd:4e:fe:b7:7b:a8:c3:15:eb:ba:71:d7:b9:f2:b1:f7:
8b:83:d4:cf:7c:46:e3:1e:57:ca:8f:80:ec:71:31:2f:f8:87:
cb:9a:09:97:1b:e5:a2:4f:18:01:20:45:bf:bb:9d:43:91:47:
33:13:f7:ee:7f:7c:3a:c7:11:b8:8a:7a:26:92:74:6c:68:34:
05:37:1b:8e:0a:62:ed:23:7a:f2:0c:17:27:99:23:b0:da:9d:
42:b0:2f:c9:eb:d1:db:5e:1f:b6:bd:e3:37:fb:41:9c:8d:e3:
89:7a:09:cf:e0:96:52:d4:b7:bf:57:9a:04:3e:72:ea:39:ff:
e4:ad:16:99:13:4e:49:5b:08:e8:45:37:8e:4f:c0:48:1b:f7:
17:56:0f:c4:20:7f:45:34:a7:d1:00:6e:f4:10:b9:02:db:26:
36:6a:87:0a:a3:09:da:8a:9c:14:7e:b8:30:33:a7:24:c9:b7:
58:b1:ab:6b:80:85:b1:97:10:03:f9:0c:68:6d:42:b7:ad:83:
02:25:03:05:48:6e:8c:f9:79:4f:00:8a:65:3b:e5:21:76:fa:
30:27:92:91:34:12:51:66:1b:bf:32:85:c1:4b:c6:50:00:cd:
c1:48:07:8b:66:e5:17:e2:0b:db:8c:a0:8d:dc:7e:10:e1:a9:
e3:c7:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:29:49 2026 by rpki-client