This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa
File: 7410036b-a503-456e-a06c-b7b863590354.roa (raw, json)
Hash identifier: +/Vzs4GHbrLsPQNdJPWzUSmh/8V9R6cxeNGRlaN7w1Y=
Subject key identifier: 24:13:D1:D8:0B:78:30:BE:17:84:52:99:3F:D7:1C:05:66:77:45:AC
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: BC0378FB2A31A5FC43D8E4738A0FE7031C4FB8
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa
Signing time: Wed 03 Dec 2025 01:50:06 +0000
ROA not before: Wed 03 Dec 2025 01:50:06 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bc:03:78:fb:2a:31:a5:fc:43:d8:e4:73:8a:0f:e7:03:1c:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 3 01:50:06 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=205da89556b1081a70167ca1e90ad6e1460c09f6027e5904c0c08c8f258e5ba3, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:2e:c9:2f:a0:d3:cd:9d:05:b5:bd:90:27:
d0:ef:9b:86:f2:1c:8b:f2:d3:ba:bd:00:6d:59:e8:
f4:5a:cb:4b:8a:86:ae:a9:eb:a2:ec:df:22:27:7f:
2f:b9:29:5f:a5:56:3d:3f:7e:49:92:f8:ae:57:36:
33:0e:e1:1b:21:39:99:ad:07:71:56:a4:f9:5f:2c:
96:d0:26:a0:5d:a5:4f:03:84:8f:d6:ae:75:c4:a3:
18:d5:76:e1:86:c8:1c:fe:26:84:72:7e:f2:14:11:
a8:26:f0:d9:38:18:72:a0:b8:b0:58:b7:49:15:d6:
17:03:4a:2b:a8:60:d8:d8:86:45:1e:5c:13:59:77:
51:6d:dc:47:a7:8a:21:f2:05:56:dd:b8:41:88:26:
06:b0:a2:dc:58:ce:02:66:dc:b4:7d:d8:0f:97:4b:
5f:18:76:53:1f:18:14:07:d2:e1:a1:6a:e8:20:f0:
0c:fb:57:4d:08:89:86:b9:16:c7:b0:9e:75:da:2e:
14:94:e9:fb:81:58:fb:16:d8:fe:6b:dc:42:3b:16:
a9:fa:eb:ef:4f:00:f5:17:f0:ac:aa:29:21:91:01:
6d:c0:ee:2b:e5:22:5e:48:81:4b:02:c0:4b:84:09:
9c:a2:a2:c7:4e:c1:af:b2:65:63:5a:bc:6d:d5:f2:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:D1:D8:0B:78:30:BE:17:84:52:99:3F:D7:1C:05:66:77:45:AC
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c5:b0:dd:81:78:56:e4:c7:72:39:33:fb:92:f7:d5:b5:3b:
95:02:13:7c:91:98:af:f2:27:b5:f3:ae:f3:c9:50:9f:be:5b:
a7:95:63:65:c9:f0:87:af:de:8d:9e:a1:b5:2a:41:99:43:a2:
52:3e:59:f0:d6:dd:87:4f:79:ee:bb:46:1b:aa:64:c2:08:3d:
69:76:03:4e:ee:74:c8:c4:ff:d5:b2:c7:25:7a:74:77:9a:e6:
5f:bc:58:0a:f0:68:a7:e5:d9:29:10:99:55:2d:42:ba:d3:49:
bc:fe:a7:3c:f7:fe:4e:59:4f:7d:60:c4:c5:e5:c4:b9:20:95:
e9:7c:58:1f:62:1c:72:96:fe:1e:b6:73:8b:ca:68:d6:b2:d9:
77:64:52:75:3e:2e:3a:ce:54:82:74:56:df:ff:91:95:0d:bc:
c1:7f:e1:b4:10:b5:b4:5f:70:26:15:42:3c:84:b6:ef:6b:f3:
7d:7f:19:55:1e:39:37:8c:85:cd:11:87:54:ea:7d:63:0f:d8:
6d:0d:8e:8f:9b:b3:3b:e4:19:13:9a:ac:d7:b0:5c:67:af:70:
e4:d7:96:9d:f7:0d:0a:26:fa:d3:7f:82:0e:a3:cb:4f:45:9f:
66:0d:b4:8d:90:05:f0:25:6f:c0:e2:d7:ec:8b:08:f0:c8:50:
df:c9:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:49 2025 by rpki-client