Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
File: 932067a7-3440-4f62-98a4-f23b9058ac95.roa (raw, json)
Hash identifier: bMzrmyLWxTiK0R1UGZ7Em7xMzql6kP58RhW7yc3EM9Q=
Subject key identifier: F2:76:5A:5B:CA:EA:F5:95:1E:32:5E:14:AA:19:25:ED:09:6E:31:B3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0FF280AB628BA03B3DDAEF651CAA91126D6F3AD6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
Signing time: Fri 20 Feb 2026 01:30:12 +0000
ROA not before: Fri 20 Feb 2026 01:30:12 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f2:80:ab:62:8b:a0:3b:3d:da:ef:65:1c:aa:91:12:6d:6f:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:30:12 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=fab51c1ff47b8095662b43ae862d1b4ef6ff765657fd84b6d99601d470fe9ea0, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:f6:85:88:da:8e:20:9a:18:fd:3a:9b:2a:
82:fe:2c:50:2d:93:e9:54:e9:d6:14:bc:c3:6f:2a:
cb:df:89:62:16:b6:21:5f:66:8a:1b:72:74:f6:87:
8a:8a:a0:ed:3c:ce:ad:77:28:fc:a6:a1:af:33:91:
8b:bc:c4:0f:56:e0:71:7c:8f:54:54:fa:fb:c0:2a:
a6:72:af:39:94:73:9e:7a:9c:01:0b:bb:fd:15:3d:
a4:a4:03:d7:af:2b:b9:e5:3f:e9:d7:7e:0d:3a:38:
07:7f:81:48:b0:04:c8:a6:d4:18:77:40:4a:76:9f:
7e:bf:4a:ef:c9:ba:5d:fe:08:44:9f:25:96:b2:83:
82:90:d6:ed:53:46:10:06:62:be:0b:1a:4a:f0:cb:
14:eb:d3:80:a5:c7:27:63:04:fc:19:fa:16:76:9a:
85:88:cb:b0:f2:df:51:bd:d9:2e:d4:39:51:e4:71:
1e:b6:27:bf:1c:9a:c3:c5:4d:29:44:27:5c:8c:fe:
1b:42:a7:57:76:02:3c:3c:8a:9e:50:51:23:d8:a1:
b7:84:11:73:43:e8:de:ec:d6:97:18:50:74:ff:46:
16:1f:0e:85:a7:f1:8a:de:c8:75:5f:1f:59:a5:ad:
26:44:28:b0:06:46:73:65:81:8f:3d:c0:21:bb:24:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:76:5A:5B:CA:EA:F5:95:1E:32:5E:14:AA:19:25:ED:09:6E:31:B3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6::/40
Signature Algorithm: sha256WithRSAEncryption
b6:eb:81:88:66:02:5f:fb:49:4a:13:f9:50:fd:6b:8c:55:fa:
a7:b4:c4:2e:c8:26:71:47:51:25:40:f3:cb:a9:c2:04:69:c6:
20:5c:4f:71:15:9e:ee:04:20:06:f9:34:d4:a0:35:bf:d0:38:
50:88:4f:ed:d6:a6:70:e0:db:c6:5a:23:75:9f:21:4e:60:e3:
d6:28:13:07:96:ff:7e:a8:04:05:3a:f8:63:8d:32:92:00:58:
3f:ba:48:3e:60:ab:c3:d6:c9:52:2e:15:49:d2:25:97:35:28:
ee:26:12:0a:48:72:6e:b3:3a:cf:f8:50:94:d4:e7:99:0d:5e:
7e:b5:14:53:c5:7b:82:21:39:a7:ca:d6:29:49:6f:40:7b:9e:
ff:38:1e:f9:91:8f:cf:d4:61:dd:65:8f:08:b6:29:b0:ad:90:
36:e5:ec:5f:1b:19:e0:2e:b7:2c:85:c0:e5:4c:af:fa:de:64:
39:53:7d:91:b0:f7:25:df:89:dd:fd:cc:9f:f6:91:2a:08:84:
b5:a9:49:f9:fe:94:6e:6d:fa:84:2f:12:28:4b:0d:e2:c2:34:
bb:23:47:70:6f:69:04:fd:b4:e3:7e:21:48:0a:fd:27:18:94:
8a:bd:f0:ec:6c:11:e7:31:3e:77:ac:95:5d:65:0c:28:f6:73:
75:49:cc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:25:48 2026 by rpki-client