This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4fcee588-0924-4ee5-98fe-3cf41ff3bf5a.roa
File:                     4fcee588-0924-4ee5-98fe-3cf41ff3bf5a.roa (raw, json)
Hash identifier:          q6o3odTX0vwcsdckySXccSbANgJfT4J4Oaq8t7GZq3s=
Subject key identifier:   0D:4F:34:59:F0:97:B9:47:49:45:F4:CF:7E:69:80:2C:00:07:0B:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       04A9873CF00F268B322466901FE752C99F0EAEF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4fcee588-0924-4ee5-98fe-3cf41ff3bf5a.roa
Signing time:             Wed 03 Dec 2025 00:20:43 +0000
ROA not before:           Wed 03 Dec 2025 00:20:43 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a9:87:3c:f0:0f:26:8b:32:24:66:90:1f:e7:52:c9:9f:0e:ae:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 00:20:43 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=cc079243edeefe772134c3b513b3c61130ee4d79251f05a550e03d27ba8d2d23, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:ff:62:a6:f2:be:80:ec:00:7b:0a:b0:26:
                    bc:a6:a3:54:42:ef:cd:b6:3b:5d:a0:81:3f:e1:19:
                    c1:70:a2:49:5c:12:40:27:11:dd:92:8e:62:07:c5:
                    01:62:44:99:95:15:ae:9e:f0:3c:3e:69:f1:cd:b0:
                    bc:cc:42:07:ec:b8:d6:56:d5:1b:3c:48:55:71:42:
                    75:18:fe:2a:e8:34:23:82:35:ca:ea:95:b2:d3:01:
                    51:19:04:f9:a0:bd:4f:8b:0d:da:41:13:95:c8:cb:
                    95:92:a9:f4:31:b7:3f:55:84:a7:db:25:43:42:3f:
                    74:87:0b:7e:27:2f:18:19:fb:dc:14:a8:cb:f4:d3:
                    46:31:4c:09:9d:e7:7a:d4:4f:e4:a4:76:fe:31:80:
                    9b:ef:65:97:02:c5:e0:5a:d0:96:a6:36:78:93:76:
                    95:2f:74:ec:b7:47:32:f0:74:37:b8:59:75:23:9c:
                    54:e3:a7:4d:34:66:aa:b9:53:1c:a8:f2:18:91:ec:
                    46:b3:6b:30:91:1c:fa:d6:05:6b:29:6f:5e:89:ea:
                    89:b2:0f:c5:9c:ff:c7:ec:19:14:4c:ec:d8:e4:63:
                    5a:fc:df:31:7a:39:24:34:6d:d8:3e:d2:85:c9:e6:
                    88:9f:07:20:da:a3:72:f9:3b:4d:b5:69:b0:bd:fb:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:34:59:F0:97:B9:47:49:45:F4:CF:7E:69:80:2C:00:07:0B:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4fcee588-0924-4ee5-98fe-3cf41ff3bf5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:6e:61:9a:f0:1d:39:09:c6:ce:be:e9:92:79:da:b1:a7:
         fb:ff:01:1d:14:79:ae:8e:5a:20:c4:a5:0f:1a:a7:df:91:91:
         49:ac:0f:c8:80:37:52:e7:58:15:fa:c0:6f:60:68:b7:32:10:
         d3:22:07:d5:9e:6e:f3:a4:85:ca:c0:91:19:89:b2:ec:fc:bd:
         82:1d:2f:b7:16:5e:61:7c:be:13:e5:f4:c6:cf:c1:1d:7a:38:
         06:06:22:ec:44:8f:a9:3f:b2:77:24:2e:67:53:66:c4:57:c8:
         d9:8a:04:35:18:40:5e:bd:8a:bb:79:09:59:4e:37:48:7c:30:
         74:88:af:f6:ca:35:3b:24:f0:ad:f7:26:c1:97:06:c0:ab:fb:
         1e:c2:4c:1e:de:64:51:32:df:27:bb:e9:d9:b2:da:18:78:c2:
         86:f9:64:33:25:8a:fd:c3:9d:e6:68:6a:c6:2c:86:0a:f5:0e:
         be:84:f6:10:f9:b0:cd:09:24:6a:06:6b:a1:60:a7:17:b9:76:
         bf:c0:9e:aa:f0:36:13:f6:33:00:a1:89:48:73:73:cf:ce:d7:
         b2:1a:99:cd:86:59:4a:65:74:b9:35:ba:a7:1b:83:85:b1:5a:
         74:da:15:61:74:65:d4:ce:c9:1a:d9:de:b4:5d:20:5b:a7:71:
         8f:3f:4b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:23:56 2025 by rpki-client