This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa
File: ffb6038f-b139-4708-b914-4c688fc3609a.roa (raw, json)
Hash identifier: DeYtbJKQemHwTetNgGf9J/QBMoevst3n0CofDPWfTQA=
Subject key identifier: 0C:B6:DA:80:FA:ED:7C:3B:F5:10:A6:30:F4:8D:A6:36:AE:00:9E:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E7ACB48EDA1B23D7CF1557ACA65AFE60DBA7C68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa
Signing time: Sat 06 Dec 2025 02:31:12 +0000
ROA not before: Sat 06 Dec 2025 02:31:12 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 160.214.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7a:cb:48:ed:a1:b2:3d:7c:f1:55:7a:ca:65:af:e6:0d:ba:7c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 02:31:12 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=fe990e6e6160aea1df7241b74a1a2d39a86ae34d561af316602fe192c01f633a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:5f:c3:82:5c:46:87:75:21:a0:f1:cd:5e:
56:ab:c0:71:82:3e:d4:d8:22:a5:ca:90:f6:3a:3a:
76:aa:c1:8b:95:74:3e:eb:0a:d7:7b:f2:5b:24:ac:
42:81:91:7f:fa:a7:e9:90:3c:f5:f0:ee:32:9f:a8:
55:83:45:01:0b:14:b4:41:f3:b2:cc:f7:cd:3c:5c:
57:c0:0c:af:e1:23:d7:56:c4:97:06:ad:1d:0d:83:
47:ce:c6:76:55:b2:b6:39:80:df:f8:08:91:2e:2e:
0e:c1:0e:6f:d1:22:13:ac:f6:1e:68:ae:f7:f6:c5:
39:9d:16:fa:31:9d:e0:46:5a:97:d4:32:66:a1:23:
0f:96:25:a0:98:5e:a5:91:ee:1c:9b:49:f0:59:cb:
89:0b:d8:27:66:e2:d9:8c:91:6c:ae:88:73:75:09:
5f:59:cb:f3:75:43:28:3c:68:38:b7:20:ab:19:bc:
30:4d:eb:44:19:f8:6f:bd:4e:03:2b:a7:78:41:a4:
7d:6e:f1:9a:64:5e:0a:14:17:17:b6:86:76:2c:05:
52:b7:6e:10:fb:71:e9:e9:1b:12:c2:84:89:a1:91:
b6:11:b1:00:f2:9e:d8:b2:fb:d9:ca:62:ab:28:7e:
30:40:b8:1d:b6:22:50:b1:84:bf:dd:fb:b9:1d:fc:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:DA:80:FA:ED:7C:3B:F5:10:A6:30:F4:8D:A6:36:AE:00:9E:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb6038f-b139-4708-b914-4c688fc3609a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:fa:73:a7:06:4b:16:1a:6c:3f:e8:c9:5a:8c:53:8c:04:c6:
95:a6:09:6b:18:51:3d:7e:7d:e8:96:a8:83:ef:77:d9:1c:37:
a0:12:f8:2a:c4:19:6d:f8:8a:a6:34:fe:ad:38:e8:92:84:49:
2a:51:a4:6c:5e:20:74:f8:32:5b:0d:cc:01:f5:2a:b0:dc:20:
8c:34:71:62:0b:52:a7:bd:46:77:3e:d3:71:5b:1d:0a:b9:47:
7b:cb:d4:ab:ab:09:78:0f:fb:81:78:aa:53:01:cc:bd:d9:4e:
90:d1:33:09:cc:41:c2:05:cf:12:40:6b:d1:48:6f:f5:c4:da:
14:dd:6e:78:3a:de:8d:77:eb:e6:58:a3:83:bc:11:32:69:c8:
50:e1:e9:b1:a1:4d:34:5c:54:3e:95:d2:66:40:5e:87:45:39:
29:a0:fd:f6:24:68:38:08:9c:f2:fc:70:8d:37:72:bb:dc:77:
94:0e:5c:4f:4f:bb:de:95:d7:41:52:ec:cc:cb:58:9a:50:5d:
26:33:c2:3f:ce:39:88:26:94:11:62:c0:07:93:d0:aa:73:0e:
b4:2b:d6:00:6e:c8:8d:e9:11:62:91:95:e0:42:27:75:3e:80:
c8:d6:6e:ef:43:37:4f:aa:5f:31:f1:ec:58:8f:67:ee:a7:d5:
35:38:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:05:51 2025 by rpki-client