Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
File: f1ac118e-e6d3-4c1a-be43-c76f57238339.roa (raw, json)
Hash identifier: Bcm0+nX5sWbgdA3Pp8RMhfJ9H1MZqIIMbzGXa73uwHE=
Subject key identifier: 60:F7:98:00:B6:52:57:FD:59:50:7E:55:6B:54:E9:78:69:2A:46:97
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 576E12640F493FB5B279930B10ECCA520C4BBD6D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
Signing time: Fri 20 Feb 2026 01:30:52 +0000
ROA not before: Fri 20 Feb 2026 01:30:52 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc5:9800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6e:12:64:0f:49:3f:b5:b2:79:93:0b:10:ec:ca:52:0c:4b:bd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 20 01:30:52 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=75e789e4d5b8fcb3adfe81e31806c7235008b8bf75e8895b35182d51a78376f7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:d0:55:6c:ec:37:ff:96:1b:c5:66:b3:60:
b7:0c:6f:49:fa:c2:53:d2:e0:26:15:2a:dd:78:ce:
ac:2d:41:bc:d1:f6:68:a0:a6:ce:da:80:db:52:04:
5f:12:f6:3e:13:10:bf:98:b4:f4:bc:5d:9a:9f:46:
a5:75:eb:f0:18:c3:a7:11:a3:03:b0:83:62:cc:ac:
7e:95:3f:84:56:f6:64:68:86:e7:d1:bc:d8:10:78:
8a:2e:7c:7e:26:8f:70:3a:32:26:05:0a:fa:d4:f0:
55:1a:29:e7:ab:e9:9c:27:c2:f5:83:ae:69:a6:a9:
90:85:3a:04:e9:04:52:2b:e3:f4:73:dc:e6:f4:64:
95:eb:dc:de:87:08:5b:d9:ab:8c:f4:5c:70:d7:06:
07:44:af:5a:62:fe:be:2d:e4:6b:e7:b0:8c:5b:e0:
e8:eb:de:c5:4d:fc:23:b3:44:22:07:1b:d6:68:85:
08:d0:64:2d:59:8d:3d:c4:1a:37:69:02:8d:48:87:
df:c5:33:bb:e1:0e:05:48:7d:2c:07:47:2a:cd:bf:
20:b8:41:7f:17:39:c8:3a:62:4f:d9:38:96:d1:60:
d5:f1:7d:39:34:4f:4a:1b:68:01:26:da:89:f7:84:
40:05:d6:b2:9f:b3:44:9a:94:7c:d6:49:d6:22:a9:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F7:98:00:B6:52:57:FD:59:50:7E:55:6B:54:E9:78:69:2A:46:97
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9800::/40
Signature Algorithm: sha256WithRSAEncryption
3c:b2:a9:7a:b6:3e:a9:8f:e3:73:ab:65:d6:f3:3f:90:fd:0d:
c2:7c:10:82:86:1c:bf:a6:f2:a1:3c:06:5e:af:b2:9d:3d:33:
6f:8c:41:56:b6:b2:63:fd:4c:78:cf:1a:66:47:80:a8:b1:fe:
e4:f2:ad:4d:d9:0e:d4:e9:eb:b9:5b:0f:09:03:63:89:65:a0:
c1:18:4c:d5:23:be:c6:85:6a:4a:25:69:e5:7e:71:cd:2f:fe:
ad:ed:af:8f:d1:91:be:bd:7a:ad:5e:8a:0a:77:d5:57:68:de:
87:07:ce:cb:a2:d2:fc:42:ee:7b:2c:8a:2d:06:37:f0:3c:21:
7f:79:cd:8a:b0:76:ed:8e:4e:c9:2e:ea:e6:8c:c8:6b:47:50:
f7:37:74:fd:23:f6:41:55:19:4c:88:48:a7:66:17:84:52:9a:
d1:d1:f0:25:2b:ca:8f:6b:71:07:3c:3f:6e:3d:ea:86:d5:4e:
82:cc:29:b2:11:88:df:c8:57:bc:0d:ac:ec:25:17:eb:db:78:
0e:7a:69:39:10:1f:62:9e:39:19:be:cc:da:5e:ba:49:7a:ac:
d3:e1:c5:cb:cb:ca:04:76:6a:e8:5f:87:09:2a:66:a5:9b:81:
69:5a:58:b5:cf:bd:24:29:dc:bb:1a:3f:8c:ba:9d:10:62:e3:
56:6f:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:52:03 2026 by rpki-client