Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/dbbae141-16d6-4005-935c-887ace4080ba.roa
File: dbbae141-16d6-4005-935c-887ace4080ba.roa (raw, json)
Hash identifier: 0rZQjxORmM3ueBlCShos8Bhw50mc0ogoMV/MzSyhM6E=
Subject key identifier: B4:6A:18:CC:DA:79:8E:77:5B:85:40:CB:ED:A1:68:33:2A:EA:F6:C9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7234842064F542CE7C44ECACB5E76015870D36D3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/dbbae141-16d6-4005-935c-887ace4080ba.roa
Signing time: Fri 20 Feb 2026 01:30:14 +0000
ROA not before: Fri 20 Feb 2026 01:30:14 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:34:84:20:64:f5:42:ce:7c:44:ec:ac:b5:e7:60:15:87:0d:36:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:30:14 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=51702f9fb2c10359c07a5255fa074d27c2e7a72af003e99e666d9650c1b8331f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:81:08:98:cf:85:f5:58:4d:80:7f:35:da:
b0:30:08:b9:a9:61:77:c2:e0:2a:f5:8d:6e:0f:88:
37:7a:c3:61:ef:8a:e7:00:63:31:4d:e8:a5:ce:8d:
7d:13:63:3c:a8:84:e0:8c:3c:b9:da:d2:c5:3f:96:
db:aa:2a:03:7d:0d:8e:30:35:79:3d:bc:da:49:04:
9b:7b:4a:ce:33:ce:0e:30:73:1f:6b:3a:4f:09:d2:
6b:57:f3:0e:a3:0c:e1:9f:5a:0e:3c:7b:cd:9c:b5:
66:a7:af:20:88:3c:ff:62:b5:b0:96:7e:b6:1c:22:
bd:80:05:ea:3d:83:ad:46:e4:d7:45:eb:45:0c:1a:
ec:f3:ea:c9:8f:68:74:8e:78:b2:dc:23:b7:e8:49:
9f:b2:33:41:93:da:55:f3:a6:fd:03:18:53:19:18:
82:91:5e:a9:25:4d:e1:3d:d7:ba:8e:04:fb:ba:fc:
0a:17:2e:b5:d2:2f:70:fd:8a:e1:60:a3:30:d6:fb:
d2:2b:c2:d9:34:61:cc:1f:e8:eb:4c:09:a2:8c:8d:
ef:f4:7c:22:d8:34:e1:92:03:de:54:e9:0c:57:ae:
4c:c9:9c:db:e2:c2:83:68:70:08:d2:53:99:e2:b4:
e2:7e:45:2d:8f:58:aa:e3:7c:35:08:d4:8a:fd:d8:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6A:18:CC:DA:79:8E:77:5B:85:40:CB:ED:A1:68:33:2A:EA:F6:C9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/dbbae141-16d6-4005-935c-887ace4080ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
55:9c:17:72:c9:93:16:b5:ab:1a:43:fc:c7:7e:01:c1:f0:55:
22:7e:96:16:ae:a9:20:43:3c:21:e3:38:99:bc:4e:8f:a5:39:
e7:9d:b7:c9:74:f3:19:de:60:4b:2a:05:b8:cd:17:9e:c0:da:
7e:6c:03:2a:36:c6:9c:b8:60:28:4c:6b:f4:d6:9e:df:5d:f6:
25:c9:91:63:cc:dd:0a:06:af:9b:12:38:d2:34:1a:98:8f:b4:
79:db:e9:60:e1:ca:0b:ca:3e:de:21:d2:19:d3:35:d2:9f:99:
42:08:20:f1:9d:c1:d9:fc:9f:00:ce:a6:e6:29:01:72:61:d9:
a5:07:87:0e:77:d2:85:a9:25:a8:86:6a:40:7b:9c:d2:a2:78:
4a:ac:a5:7d:f4:16:09:86:b6:da:39:25:32:aa:88:b9:06:04:
de:ca:35:f9:5e:f7:8c:75:53:d4:fb:04:14:b0:26:a6:a0:94:
ca:71:46:83:77:43:1e:03:5a:6d:f9:34:e8:7f:7a:77:80:ed:
d7:ec:a6:4b:57:5b:c8:26:a9:90:59:64:6c:3c:f1:f0:ad:d7:
fb:4e:0b:f2:23:33:88:8e:7f:7f:2a:8e:b7:0a:21:54:1b:a4:
cf:ab:8f:8a:a4:f2:36:d3:43:00:2b:a9:0f:d0:28:b2:94:d5:
55:c2:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:25:29 2026 by rpki-client