This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1bbf117d-2531-42a6-b595-4c38287c1d36.roa
File: 1bbf117d-2531-42a6-b595-4c38287c1d36.roa (raw, json)
Hash identifier: 2qNTh4451fcF1XWP7ZCfh4UXwanmGz8wSiglgi9Lh6Q=
Subject key identifier: F3:F3:9B:FD:0D:3F:94:15:B4:B4:1F:37:07:5E:CA:51:6C:62:3C:BD
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 21247FA6F317D72232C937DD063019D98B9927C5
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1bbf117d-2531-42a6-b595-4c38287c1d36.roa
Signing time: Tue 25 Nov 2025 19:40:48 +0000
ROA not before: Tue 25 Nov 2025 19:40:48 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:24:7f:a6:f3:17:d7:22:32:c9:37:dd:06:30:19:d9:8b:99:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 25 19:40:48 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=9d28da073c083324c0a8fc0f932e486414e13af6e37bc95e5c9650d38fdd117d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:31:30:fb:f5:ce:6a:3b:6d:62:d1:75:3c:
09:4c:cd:44:99:82:9b:31:1d:b8:f8:9c:ab:fb:a8:
8d:9c:b8:2d:f6:76:cc:33:f0:9f:08:15:c6:0c:80:
a1:d7:db:6b:44:d1:59:98:3b:20:2b:c0:e3:cb:63:
0b:1c:90:47:94:0c:71:11:fb:06:e3:8d:63:79:04:
ec:9a:21:37:47:a8:0a:f1:7f:74:78:71:cd:a4:2f:
8c:63:8a:2e:97:93:b8:bd:18:2b:ed:65:f4:5a:c9:
bd:55:00:7c:7e:9c:1f:da:51:94:e2:ea:e5:56:0a:
8e:c5:e1:74:b4:25:bb:70:2f:8f:51:55:d3:83:ac:
53:0f:a3:c0:5e:f9:44:9b:eb:05:59:97:07:06:7d:
44:3d:cc:ba:df:be:7e:6f:93:94:99:18:b2:25:65:
34:a9:22:bc:df:9a:85:11:cd:e9:16:d2:f2:42:c2:
3b:34:aa:72:c9:df:8c:a0:13:82:51:73:37:b4:5e:
89:79:02:7a:fb:a9:65:b2:ca:66:53:b0:0c:c5:91:
f9:e3:9e:80:34:5c:1c:2a:ad:1e:c0:84:52:a3:89:
bd:cb:54:c9:34:56:3c:8d:4d:b5:dd:fa:2b:c9:11:
09:e8:4e:c1:f6:24:48:17:4d:ac:91:b4:c0:0f:8f:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:9B:FD:0D:3F:94:15:B4:B4:1F:37:07:5E:CA:51:6C:62:3C:BD
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1bbf117d-2531-42a6-b595-4c38287c1d36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.5.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e5:0c:3b:48:8b:52:2d:eb:9d:f8:e3:a4:ef:ca:1d:33:18:
23:c2:0f:5d:be:a0:bd:c9:4f:87:b4:a2:cb:9e:fd:3d:ce:61:
77:75:ef:82:02:d5:f7:07:34:c3:b9:8e:2b:d1:42:03:4e:46:
ee:44:82:fe:44:81:24:b4:03:11:58:15:e3:7f:82:5c:eb:e4:
20:21:76:4f:9a:44:7c:3c:d3:2f:da:b0:cc:3d:d9:06:28:1d:
7b:99:4a:4b:25:e6:cf:cf:35:4b:4c:9e:ef:f2:4d:dc:d7:46:
a2:31:92:6b:c4:dc:24:91:b7:95:9a:7b:7e:55:d9:77:b2:b0:
63:5b:24:de:54:01:6c:3a:ff:73:16:06:6e:b8:81:1f:5d:df:
a7:64:33:88:83:88:49:c6:94:89:bb:6c:8f:50:7d:e4:15:6d:
57:e0:fb:59:4f:a9:65:2d:6f:52:bd:a1:e9:a0:31:55:10:12:
73:dd:63:a8:33:e3:40:02:86:6f:10:cb:a0:94:7d:22:2b:86:
0b:34:f6:f7:56:05:17:97:cc:04:0f:cc:f0:ef:7e:c7:da:4f:
8b:e3:2f:f2:e6:51:8f:04:2a:17:8a:fd:ef:21:11:9d:65:37:
a2:ce:b0:64:c5:35:16:e5:dd:b8:c0:9a:1a:24:9d:58:ba:a9:
4e:7a:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:55 2025 by rpki-client