Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa
File: 37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa (raw, json)
Hash identifier: BFYkJHf2DFlWlKQonW7IUH/jq3CQAoF4T/xVtqQEkCs=
Subject key identifier: ED:F0:81:F3:FE:05:19:F4:C1:1E:9C:43:11:18:33:92:CF:E4:6C:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51B7F5C3B90DE4758411CC30D61DA51E989355EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa
Signing time: Mon 26 Oct 2026 04:50:40 +0000
ROA not before: Mon 26 Oct 2026 04:50:40 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 185.48.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b7:f5:c3:b9:0d:e4:75:84:11:cc:30:d6:1d:a5:1e:98:93:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:40 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=b9bd97b36379378e3ead8c4458c9f20bc9ee35e3e22b5bfaf230ba19755c0b43, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:28:3a:2f:28:bb:58:36:f0:b5:45:6d:ca:
60:d4:4c:16:54:7e:bc:7b:7a:66:8d:02:ca:44:08:
43:aa:1a:b4:c6:84:e3:65:75:84:4b:4f:73:f4:d7:
1f:e8:d0:4a:81:44:35:e0:28:ad:36:3d:54:eb:f0:
7b:b1:da:51:60:f5:ac:a3:69:61:84:2e:29:9c:7d:
4e:1e:53:c5:58:3f:b4:5d:f0:55:25:b6:6f:5a:65:
98:2d:fd:c6:69:cf:fb:3b:9f:9f:72:89:58:3a:9f:
70:b3:3d:25:9d:32:8b:a8:5e:77:e9:2a:05:43:12:
74:01:ab:b7:6b:c8:e8:ce:14:b0:70:37:4d:09:f5:
fe:01:95:28:e9:8a:75:f9:51:a3:8a:e8:14:86:90:
94:ea:2b:2e:58:bb:85:80:f2:ff:42:08:4e:e7:90:
66:63:0f:df:cf:18:00:f1:b9:eb:1d:06:93:60:fc:
ea:10:71:2d:50:3b:d4:e7:f2:0a:43:65:ff:f2:5d:
4c:8d:c2:44:46:39:2f:04:2d:80:7d:f3:99:85:fe:
0f:8f:4a:20:19:46:3d:4c:3f:ef:4d:5a:e7:e2:5c:
b7:9c:b9:02:d2:60:8e:a5:58:10:82:13:c8:14:ad:
b8:bd:18:25:7c:39:3d:4b:6d:97:42:87:e1:91:fc:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:81:F3:FE:05:19:F4:C1:1E:9C:43:11:18:33:92:CF:E4:6C:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b584fa-f648-4a07-9cbd-40bfef4a0b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.120.0/22
Signature Algorithm: sha256WithRSAEncryption
85:9d:55:ba:b6:58:2b:de:cd:91:92:93:d2:eb:a3:03:c8:b1:
ea:4e:4f:fd:5a:54:55:e6:2c:2c:35:30:23:e5:97:c4:5e:43:
09:23:52:f5:08:6e:d1:a7:86:35:67:d2:5a:30:17:5d:75:81:
d8:94:5f:6d:fc:79:ff:83:19:57:50:5c:26:fc:f7:87:e7:62:
70:b7:81:ea:56:a9:5c:7b:6c:e2:b1:5d:34:72:86:38:39:8d:
ce:31:1f:02:62:58:9c:69:62:f5:84:6b:b9:d8:39:cd:08:e7:
a5:91:f6:44:51:ab:b2:8d:1c:4d:91:3d:33:fe:2e:0a:f8:e6:
f6:c4:61:17:a7:8b:0d:09:37:ab:02:3a:87:95:8d:d4:ce:29:
08:39:94:40:67:12:b1:09:07:39:86:d6:c5:ce:da:d5:f8:9a:
22:a7:29:c6:7f:e8:88:08:08:b0:2c:8e:15:4c:b5:44:96:7c:
f8:c9:74:01:80:ca:8e:41:eb:99:fd:24:c6:34:93:02:09:db:
d8:8f:5f:97:9a:cd:76:a0:0d:65:3a:df:42:83:ea:ef:f7:19:
3b:33:ca:68:f0:b6:26:42:ac:bf:6f:97:8c:4e:d7:76:a4:91:
c2:17:ff:df:ec:61:30:fe:d3:ed:67:12:d8:6f:59:00:b1:e7:
c1:25:46:ea
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUbf1w7kN5HWEEcww1h2lHpiTVe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDUwNDBaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5YmQ5N2IzNjM3OTM3OGUzZWFkOGM0NDU4YzlmMjBiYzllZTM1ZTNlMjJi
NWJmYWYyMzBiYTE5NzU1YzBiNDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANWFKDovKLtYNvC1RW3KYNRMFlR+vHt6Zo0CykQIQ6oatMaE42V1hEtPc/TX
H+jQSoFENeAorTY9VOvwe7HaUWD1rKNpYYQuKZx9Th5TxVg/tF3wVSW2b1plmC39
xmnP+zufn3KJWDqfcLM9JZ0yi6hed+kqBUMSdAGrt2vI6M4UsHA3TQn1/gGVKOmK
dflRo4roFIaQlOorLli7hYDy/0IITueQZmMP388YAPG56x0Gk2D86hBxLVA71Ofy
CkNl//JdTI3CREY5LwQtgH3zmYX+D49KIBlGPUw/701a5+Jct5y5AtJgjqVYEIIT
yBStuL0YJXw5PUttl0KH4ZH8sssCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTt8IHz
/gUZ9MEenEMRGDOSz+RspjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzdiNTg0ZmEtZjY0OC00YTA3LTljYmQtNDBiZmVmNGEwYjJmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkweDAN
BgkqhkiG9w0BAQsFAAOCAQEAhZ1VurZYK97NkZKT0uujA8ix6k5P/VpUVeYsLDUw
I+WXxF5DCSNS9Qhu0aeGNWfSWjAXXXWB2JRfbfx5/4MZV1BcJvz3h+dicLeB6lap
XHts4rFdNHKGODmNzjEfAmJYnGli9YRrudg5zQjnpZH2RFGrso0cTZE9M/4uCvjm
9sRhF6eLDQk3qwI6h5WN1M4pCDmUQGcSsQkHOYbWxc7a1fiaIqcpxn/oiAgIsCyO
FUy1RJZ8+Ml0AYDKjkHrmf0kxjSTAgnb2I9fl5rNdqANZTrfQoPq7/cZOzPKaPC2
JkKsv2+XjE7XdqSRwhf/3+xhMP7T7WcS2G9ZALHnwSVG6g==
-----END CERTIFICATE-----
Generated at Sun Nov 1 15:27:46 2026 by rpki-client