Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
File: 81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa (raw, json)
Hash identifier: VEHZcNaaTgCXyNV9W2lxew64oi2XXM6qwZTTc8rpS8M=
Subject key identifier: 4C:FE:0A:46:03:D9:21:F4:7B:88:DA:0A:65:B3:C1:25:B4:9A:6F:58
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3F41EC26AF03368DA0412BB99A1DCCDBC9448406
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
Signing time: Fri 20 Feb 2026 01:40:08 +0000
ROA not before: Fri 20 Feb 2026 01:40:08 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:41:ec:26:af:03:36:8d:a0:41:2b:b9:9a:1d:cc:db:c9:44:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:08 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=5db9397c74730f79b7df6efba3a5db7e182a4ff40568ef2b01f314ccf631ef1f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:5b:30:d8:5d:f9:c6:fb:76:b4:e7:b2:27:
c8:bb:6c:4a:cf:f6:5c:e2:54:ac:eb:cb:8b:78:0f:
ef:a3:61:8a:d8:b3:4c:58:03:e3:bb:b9:ca:e8:93:
cd:d4:b0:d6:f6:34:eb:c4:6c:4e:ef:7d:2e:ef:13:
60:95:a9:83:e7:23:f0:b8:07:6f:88:d3:f5:81:dc:
bd:8a:e3:c4:4e:aa:6c:f0:54:cb:a1:1d:73:5d:bd:
2a:c3:30:82:37:f9:da:d2:4c:d5:8a:28:18:ec:84:
5d:06:dd:32:01:30:69:a2:db:5a:a3:e9:17:a3:e2:
aa:b0:3a:2e:2c:79:f6:e4:3f:e9:d2:07:e8:99:a2:
f0:2f:16:85:95:2d:0e:52:62:78:64:e5:fd:ed:6a:
1b:29:e6:77:2b:8a:18:4b:8b:ce:bd:06:3d:a0:92:
40:bc:36:ab:80:d3:6e:7a:97:2f:2c:62:98:9d:8c:
ab:32:eb:9d:0c:e8:e7:f7:fb:96:7c:35:b5:b8:21:
13:fc:7a:c3:b5:54:08:45:00:53:91:a5:92:c3:a1:
42:e1:08:54:32:5a:41:f6:81:3a:0e:c0:0e:18:bd:
3a:b0:94:f2:14:6b:c1:20:ce:73:b5:bf:11:b4:f4:
72:21:18:1e:f3:e4:ac:af:5c:84:df:e3:46:af:42:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:0A:46:03:D9:21:F4:7B:88:DA:0A:65:B3:C1:25:B4:9A:6F:58
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
bc:a7:fb:7e:1a:3f:49:9d:10:87:d9:0d:be:12:22:31:cf:e7:
b6:84:c3:1c:51:45:56:e3:7d:48:c7:5a:f4:75:de:f2:bd:af:
fe:10:8b:a5:5a:d3:d7:49:13:18:23:ee:39:81:3f:18:12:b0:
80:57:22:14:b7:4c:29:dd:f5:ce:9a:31:02:0b:76:8c:a5:39:
6e:58:a4:a9:15:4f:a8:f5:5d:ad:ce:86:a3:19:a6:7a:a9:eb:
65:ab:86:59:fa:73:d6:c0:5a:ac:6d:1f:06:0e:b0:b2:78:30:
21:6f:cb:b2:e9:a6:99:12:8f:fa:89:bf:ac:3d:c6:b3:48:b1:
af:12:4f:a0:70:3e:39:18:db:0e:66:96:c0:39:5a:70:98:60:
64:ae:75:52:16:1c:14:79:f1:dd:40:be:06:ed:45:7a:f6:eb:
eb:47:0d:9a:f5:0b:de:27:f2:c9:85:7a:76:e0:6a:0c:7a:5a:
e1:b5:5f:bd:40:51:19:24:15:6a:84:2b:6b:ba:77:fa:ee:c1:
6f:a3:b3:fb:ac:f2:14:68:09:1e:66:e3:fd:5d:78:07:5d:20:
1f:43:32:d8:c4:f4:bb:3e:9a:1f:8e:4f:f8:cf:91:6b:03:46:
0b:13:ac:f0:af:fe:8d:6d:fd:c7:32:71:11:ae:fc:f6:86:75:
7b:e1:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:29:49 2026 by rpki-client