Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae013680-e4f4-449c-9a2c-715867c85a51.roa
File: ae013680-e4f4-449c-9a2c-715867c85a51.roa (raw, json)
Hash identifier: DJrpoPlgUNLGrrSMW7ZMg5IXrjZFnhcHVwujJNh3q3E=
Subject key identifier: 77:55:50:38:A2:B5:F9:DB:BF:9C:12:15:3A:D9:83:27:09:46:0A:32
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 61339E4ED77BCD53EE2240979160077FA883FC10
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae013680-e4f4-449c-9a2c-715867c85a51.roa
Signing time: Fri 20 Feb 2026 01:40:26 +0000
ROA not before: Fri 20 Feb 2026 01:40:26 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:33:9e:4e:d7:7b:cd:53:ee:22:40:97:91:60:07:7f:a8:83:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:40:26 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=e5b71ff5736a57dcabb0528b2bed5e01566b463e0280214b066163051a2c3d4d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:a7:4b:1c:00:ec:ee:93:5e:0f:2f:e8:b4:
ce:7c:35:72:62:e4:3f:c7:45:8f:d5:a0:a6:0d:32:
94:50:0f:91:bc:b5:40:05:6f:0c:39:43:b3:22:9b:
4e:f0:54:78:30:6d:40:f5:f2:44:01:59:c8:a3:81:
67:a9:92:d4:52:c0:0a:81:21:9d:c3:7d:b7:44:4a:
af:3d:83:17:37:2d:00:4c:df:52:25:73:f1:dc:e9:
8b:b3:55:d9:ee:1a:8b:57:1f:50:ad:4e:7c:28:87:
94:93:a8:82:61:2a:16:24:0d:15:6c:23:92:7d:77:
40:da:20:d0:08:89:02:05:50:0c:f0:57:27:37:b2:
e2:bc:dc:d9:f1:2f:7c:5d:0c:83:d8:da:2e:61:f5:
3a:50:46:09:51:e0:91:b4:22:1d:c1:86:15:b2:48:
9c:c4:0d:c5:51:71:8c:7e:ee:5f:a7:54:c7:96:16:
a8:63:71:e9:44:48:58:96:ac:45:1c:d0:15:9c:68:
22:70:92:1a:e7:07:4f:8e:46:9f:7d:49:6f:20:ef:
08:c5:92:89:53:c2:b0:0a:60:ff:15:87:eb:47:99:
ca:a2:e8:3b:1b:eb:d2:10:48:c8:af:43:42:5f:11:
61:91:45:2d:ac:bd:ad:29:8c:67:34:c9:4f:38:1c:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:55:50:38:A2:B5:F9:DB:BF:9C:12:15:3A:D9:83:27:09:46:0A:32
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae013680-e4f4-449c-9a2c-715867c85a51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:8::/45
Signature Algorithm: sha256WithRSAEncryption
40:19:4f:cb:4f:ae:ac:6f:7d:cc:e4:09:d4:b5:0b:f6:5e:0e:
eb:4a:65:e1:fc:4b:86:c5:19:b7:0d:85:10:45:37:95:11:4f:
aa:77:b1:1d:16:5d:73:96:c4:42:65:e1:4f:68:5d:cf:e4:54:
37:2f:07:26:f8:fe:29:cc:a1:7c:36:cd:8b:cc:79:af:3f:92:
70:5e:9d:e7:77:4b:4c:32:c4:39:7e:87:bd:b2:0c:e7:f3:fc:
c3:fa:69:79:68:86:12:a5:f2:3c:f8:95:3f:fe:86:e6:b7:ef:
61:d5:a1:c8:df:68:be:b2:e3:c5:ce:e3:85:45:24:c8:c6:10:
67:0e:4d:ed:8f:ec:1c:0a:ed:81:e4:a7:0f:6d:d6:9c:0f:e1:
03:3c:c2:96:ec:fe:c0:15:1c:5d:41:70:bf:7d:52:48:28:ab:
c0:d7:99:01:05:f8:b1:57:4a:44:1a:13:08:fb:ab:63:56:61:
20:ac:a7:87:54:4e:00:4e:c1:73:e6:70:f3:ec:4e:5d:4c:2b:
bb:ea:b9:2a:66:b8:b7:1d:f6:e4:29:f8:ab:cf:34:eb:a7:8f:
31:61:89:89:c1:26:0b:a5:a7:1d:bc:2d:f4:00:50:33:bd:c6:
d9:e0:c6:29:66:5d:20:d0:dc:7c:95:81:11:28:03:e7:85:5d:
9a:c1:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:29:49 2026 by rpki-client