Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
File: ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa (raw, json)
Hash identifier: mEjIo+p+vHQXnSJ3DiE0H409Yn7F62sYo0igTAHHkfY=
Subject key identifier: 3E:90:7A:D3:F7:51:29:46:2C:C4:CA:80:7D:93:D7:64:35:1A:91:52
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4BC8CBC05CA609E6CE352E230DDBD8632570C359
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
Signing time: Fri 20 Feb 2026 01:30:13 +0000
ROA not before: Fri 20 Feb 2026 01:30:13 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c8:cb:c0:5c:a6:09:e6:ce:35:2e:23:0d:db:d8:63:25:70:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:30:13 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=f1e4003aea6fa6a31cc12bab0f2ebd2c303221d0b785d1c5e4e7ad8d5396cb31, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:61:87:83:8b:30:12:09:f9:ba:49:9f:86:
57:62:38:c0:45:34:16:09:6c:9f:f2:9a:fd:5f:3f:
50:9d:6e:56:41:d7:b5:61:c2:50:5d:2f:76:66:ae:
a8:63:39:86:fe:8a:1a:d2:a3:fd:0b:29:a2:96:b7:
1b:c9:6e:c4:27:92:4c:97:cf:1a:a3:02:9c:cc:22:
73:49:23:5d:31:4f:e3:9b:13:eb:e3:a7:2d:51:88:
1e:74:20:a1:77:88:c4:81:fe:d2:69:ba:79:10:71:
43:ca:bf:1d:b9:95:ba:25:3e:b3:9d:58:77:6b:1a:
6e:be:0f:25:fa:02:05:ae:e5:89:71:1b:22:a0:a4:
b5:b4:ea:83:d1:4e:7d:68:d9:af:53:55:24:73:27:
93:3f:34:55:a3:08:d7:1f:df:e6:3d:3b:c6:4a:d5:
e5:2e:7c:1c:d1:63:55:ae:5b:58:39:c6:b1:0a:06:
9c:20:7e:72:06:b3:17:58:94:ae:d5:13:86:55:92:
d2:61:51:e7:a3:c8:ad:01:cf:21:9d:8f:5e:4d:a6:
2f:ed:9b:07:f4:14:ce:4e:c6:41:4c:6b:29:82:59:
62:1c:4e:b1:9c:e0:1b:1d:ed:44:16:ef:1b:bb:37:
ed:49:3c:59:0c:9b:ad:0b:90:69:ec:9d:02:96:71:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:90:7A:D3:F7:51:29:46:2C:C4:CA:80:7D:93:D7:64:35:1A:91:52
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
21:33:d2:af:10:88:e8:17:8c:09:62:3f:03:a8:0a:5e:48:ea:
b8:0d:16:65:cf:cc:b9:7f:b0:30:e7:8a:b4:30:fd:ae:d8:e0:
ba:52:76:48:75:76:45:45:89:7b:b0:5b:1b:cd:54:52:82:99:
f4:5b:21:77:72:41:4c:2a:7d:df:eb:8c:1b:6a:99:7c:34:34:
0d:d9:8b:84:74:68:0d:a4:3e:19:4a:a0:dc:27:31:bf:2c:ac:
85:cb:2e:db:0e:b2:d8:37:58:e0:c5:d8:00:d5:c2:75:2e:f9:
c8:d4:34:87:27:b3:26:eb:ba:3f:1e:02:c3:69:d1:b0:30:5e:
f3:ce:55:a8:e6:be:bf:13:7f:11:94:96:c9:9e:ce:65:f9:4e:
78:4c:a3:ac:4c:4e:3a:39:04:e2:7f:6f:e0:73:5b:c7:b6:83:
f8:24:bb:8e:5d:21:87:ce:91:86:8f:8a:1a:2e:2c:2d:c9:b3:
37:c2:03:ce:12:26:02:99:7b:7e:e8:3e:f8:f7:32:e2:7a:58:
32:29:9c:fa:a0:4b:7f:91:d6:8a:e9:24:4c:b9:ed:ab:7e:1f:
ac:81:fb:60:b9:3b:78:b1:88:99:b8:67:44:33:90:f4:90:79:
8e:d0:3f:29:e3:99:d6:dd:a9:7f:c4:ff:c9:eb:48:9f:c5:af:
c6:00:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:29:51 2026 by rpki-client