This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca6952b-736c-4e0d-bb88-06392f70e077.roa
File:                     eca6952b-736c-4e0d-bb88-06392f70e077.roa (raw, json)
Hash identifier:          8f0I1Mn5Y4nah2JvsMk2ZOHfEmIiy5JjAE6JXJaGQCE=
Subject key identifier:   4A:36:44:E4:8E:12:36:B9:D1:A7:2B:9D:CD:2B:1F:D3:13:C7:01:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27A409DE3D2E281B3BA940294404FDA714A794B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca6952b-736c-4e0d-bb88-06392f70e077.roa
Signing time:             Wed 03 Dec 2025 00:20:10 +0000
ROA not before:           Wed 03 Dec 2025 00:20:10 +0000
ROA not after:            Tue 03 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a4:09:de:3d:2e:28:1b:3b:a9:40:29:44:04:fd:a7:14:a7:94:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  3 00:20:10 2025 GMT
            Not After : Mar  3 23:59:59 2026 GMT
        Subject: serialNumber=60a5497215b3a125d730eaf606977fcc65529a7517ff92bf069b18c674fd3e86, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:16:8f:9d:11:1f:6f:63:82:f9:58:49:33:
                    49:94:0b:f0:0e:12:2f:24:7a:1a:c8:d3:a9:e1:1f:
                    98:85:2b:25:69:50:48:cc:f5:01:d2:d4:67:9c:e4:
                    de:58:a2:b5:37:65:bf:65:0f:ba:d3:0f:4e:f2:b6:
                    24:fa:b1:f2:5e:70:b9:29:ab:ba:7c:21:e4:82:e4:
                    57:ce:69:b5:44:ec:9a:4b:1f:81:71:7a:c2:7b:ed:
                    ca:0d:e7:6a:ac:2b:20:68:5b:68:fb:98:a5:a6:d6:
                    33:de:6b:36:51:17:ba:b9:4c:cf:f6:05:72:78:3a:
                    e2:9a:ee:ca:85:3f:2a:0e:b7:84:e1:af:6e:8c:f5:
                    07:2e:5e:8e:ed:88:18:d8:64:cd:cc:60:a7:7e:5b:
                    83:1f:66:e5:b4:14:18:ca:c4:da:00:6f:c7:c7:0f:
                    fb:2d:db:37:18:8c:54:f9:a4:36:4c:14:c2:5b:4a:
                    cb:ad:89:19:e6:71:ca:0a:74:3d:8b:37:04:63:78:
                    51:7a:fd:4f:cd:5a:34:d0:a7:ef:90:90:44:b8:9c:
                    a4:37:d0:31:7e:73:e9:d8:c4:96:24:93:ba:4b:fb:
                    14:3f:2d:06:18:3f:a6:36:d2:fc:eb:a8:fc:1e:ad:
                    b1:d1:7b:3c:4c:e9:87:b3:26:a1:00:e9:09:83:8d:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:44:E4:8E:12:36:B9:D1:A7:2B:9D:CD:2B:1F:D3:13:C7:01:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca6952b-736c-4e0d-bb88-06392f70e077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:57:8d:3c:c0:60:1a:c1:48:44:61:bf:26:8e:6c:c3:72:8f:
         1d:8e:9b:cf:76:89:52:5d:34:7e:2b:ad:8e:a1:ba:52:d5:fc:
         c9:a9:e0:6d:f6:16:f0:53:50:d2:60:1c:ab:73:40:f6:57:88:
         1a:39:28:28:94:3a:06:e0:36:e3:1c:0c:58:0a:c0:ed:09:95:
         20:2e:88:14:6a:a7:a7:90:6c:ce:4a:de:e8:ad:f9:ae:de:46:
         1b:5b:5a:1d:98:95:2b:5d:55:70:81:50:9e:99:45:7e:f0:b8:
         8f:ab:fb:a5:12:52:bb:91:dd:b8:5d:1a:29:42:85:02:90:da:
         94:3d:cf:02:a1:ae:f0:aa:30:68:46:af:eb:62:a4:de:9b:77:
         81:9e:f0:ec:e5:ab:a1:59:82:1b:bf:50:d9:c5:97:8e:0d:d0:
         00:ba:86:8f:84:b8:8c:e5:f4:7f:bd:8b:6f:d8:cc:64:9a:0d:
         87:48:69:2e:b2:10:a3:f0:27:3a:1e:8d:09:14:a4:a2:ec:31:
         f8:9c:ff:6f:a4:27:3a:44:80:7b:b9:01:75:49:2a:00:79:31:
         67:dc:ee:3b:71:80:93:1e:a0:32:b2:9b:1d:e8:e0:01:7d:07:
         b5:57:e1:eb:43:41:e6:6c:f3:2f:c5:49:b3:57:01:b0:68:28:
         9a:ee:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:57:11 2025 by rpki-client