Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/23a17b0b-260d-4cf8-b258-4e17adae4eed.roa
File: 23a17b0b-260d-4cf8-b258-4e17adae4eed.roa (raw, json)
Hash identifier: P3hlSC38Q+EcHSW2p9JneRsWPFkAoI7P1+Tf1L4zRPA=
Subject key identifier: A6:10:94:D0:8A:BE:72:BE:C8:CC:00:EC:8A:87:54:87:3E:43:18:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 233EE2C3E62E967948876C6FAB31D5F331EED1B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/23a17b0b-260d-4cf8-b258-4e17adae4eed.roa
Signing time: Mon 10 Aug 2026 01:01:11 +0000
ROA not before: Mon 10 Aug 2026 01:01:11 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3e:e2:c3:e6:2e:96:79:48:87:6c:6f:ab:31:d5:f3:31:ee:d1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:01:11 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=b2a4322ba2098b48135628b5bf098bc91d387069b402d4e1643c94d4e3de0914, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:a2:25:cb:18:1c:a0:a6:e0:96:9d:64:9c:
d5:be:e9:4a:55:49:2b:92:67:5c:16:b8:9a:bb:fb:
6c:ca:7c:88:b6:74:a7:d5:66:e0:e2:5c:41:c3:60:
2a:58:43:ff:b6:c6:45:69:3a:af:56:b7:7d:bc:18:
cc:d4:c9:c1:54:d7:a1:31:cd:80:ba:73:eb:f5:9a:
87:99:74:15:da:40:ee:1f:7a:88:7c:61:59:14:c1:
3b:bb:8a:f9:fd:e8:a3:ad:99:f8:d5:83:34:17:5d:
10:36:0a:57:59:55:cd:d9:3b:27:0d:6e:75:14:cc:
3a:78:c5:3e:f9:e2:ae:78:ef:fe:f5:21:95:2e:37:
72:cb:d7:e4:7a:b3:a3:94:b9:86:25:7f:71:3c:5c:
bc:c7:0e:79:0a:0c:06:18:3c:13:a8:4f:b9:0b:dc:
33:e3:b1:1c:98:e3:1c:10:4c:09:6e:ed:36:f2:af:
cb:d7:57:7d:64:f9:49:03:58:86:51:92:72:84:e2:
17:f1:41:d1:e8:be:37:f3:1e:bb:dc:9d:c4:09:8a:
f0:1d:47:da:0e:bf:23:14:3a:03:8b:23:9a:56:a0:
d1:cf:03:ab:1e:91:d9:de:3c:ac:b0:3c:2c:4e:d7:
75:b9:83:0a:bb:75:9e:92:24:20:f6:25:a6:e0:14:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:94:D0:8A:BE:72:BE:C8:CC:00:EC:8A:87:54:87:3E:43:18:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/23a17b0b-260d-4cf8-b258-4e17adae4eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a000::/40
Signature Algorithm: sha256WithRSAEncryption
98:1f:f9:4c:79:b7:2a:4a:e2:94:71:f3:3c:d0:22:6e:09:42:
7b:41:2b:f9:b6:d6:72:9a:83:34:cb:c4:45:99:f7:2d:eb:91:
85:99:22:a1:ec:4f:a0:ed:e9:80:2c:0f:74:33:3d:d6:5b:e8:
61:78:9f:71:ae:0e:00:1e:8e:68:5b:fb:ad:fe:82:d1:cf:9f:
19:ea:b5:5c:0c:6a:86:86:4a:bc:7d:19:a6:98:39:1e:b8:d7:
d2:9a:16:0d:5b:87:d3:8e:26:01:49:96:7b:0a:06:15:b8:1c:
6f:65:4d:66:c8:7b:ef:70:02:f5:8c:9c:9c:54:c1:d3:a3:75:
1e:6e:ee:98:d4:8b:d9:d6:80:46:22:83:22:fb:50:0e:48:90:
06:3e:aa:60:5c:1f:fa:8e:af:65:7c:1d:f5:5e:9a:ab:20:96:
aa:75:ee:77:2d:74:48:93:90:2f:47:d1:c5:1d:53:ba:2f:6e:
68:34:0f:82:e2:4a:55:d1:16:aa:b3:45:a6:da:93:b9:d7:87:
8a:97:25:1c:4b:8b:a3:c4:d6:fd:c2:e4:e1:82:d0:87:20:bc:
59:8e:eb:35:20:18:40:03:1f:e9:59:ef:9c:ff:f0:49:2d:9a:
cb:06:e2:cc:07:ae:d9:15:ea:47:ac:af:96:66:20:b5:71:0b:
0f:65:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:58 2026 by rpki-client