This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e3df936-84bf-45b3-be48-5b4b85107581.roa
File:                     8e3df936-84bf-45b3-be48-5b4b85107581.roa (raw, json)
Hash identifier:          4gK+uJ9uuiwysVRzgdq+BWkozxb5XQnPhpX2i7vKxJs=
Subject key identifier:   21:2C:C0:79:9A:5A:BA:67:C7:15:04:A4:DA:12:37:B0:F3:63:80:2F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       43CA37AE1E69E7704E03C24B867B4E9A423C021C
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e3df936-84bf-45b3-be48-5b4b85107581.roa
Signing time:             Thu 13 Nov 2025 01:50:10 +0000
ROA not before:           Thu 13 Nov 2025 01:50:10 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ca:37:ae:1e:69:e7:70:4e:03:c2:4b:86:7b:4e:9a:42:3c:02:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 13 01:50:10 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=dcf6f29acd00e8801a9f809401691b410772660b5a00dc8658327abde1adc77d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:61:89:d4:26:fe:ed:3e:e6:74:de:19:5e:
                    98:b8:b0:b8:8d:dd:3a:5e:8a:a5:a0:f2:5f:e3:48:
                    4b:83:70:92:75:d7:37:f8:bc:d4:7a:df:de:da:ad:
                    9a:21:58:70:1f:e6:11:c8:42:e6:b7:9f:dd:c9:5d:
                    2b:7f:8d:db:b0:0e:9a:b2:e2:ae:66:86:78:cb:45:
                    c9:05:f2:4e:45:c8:59:66:31:91:49:f9:8c:41:c0:
                    94:8d:43:a4:02:32:ea:a2:81:ff:af:ad:c7:7e:97:
                    cb:7a:f4:48:5e:b1:a0:44:94:cf:d2:30:20:3e:ae:
                    68:de:a7:15:6f:7e:a7:ba:49:be:66:86:5c:12:84:
                    d7:90:73:c1:ac:a9:b7:9c:b6:20:41:dc:58:64:a1:
                    b3:05:80:55:72:30:d7:cb:d5:95:23:51:77:75:2f:
                    1b:94:e5:c1:9d:97:d4:62:e9:02:1e:a9:bf:f0:15:
                    07:90:58:03:c8:38:c9:8e:10:63:71:f1:55:2f:69:
                    7b:2b:41:cc:43:f9:bd:63:8a:83:e2:40:1c:2a:e8:
                    bc:c2:b6:e4:c4:58:bd:db:7a:d9:e1:c3:75:86:1a:
                    b2:23:ad:ee:49:56:03:fc:c4:e2:f1:f5:59:80:de:
                    04:60:42:82:dd:96:ed:97:3d:dc:52:d7:67:02:1a:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2C:C0:79:9A:5A:BA:67:C7:15:04:A4:DA:12:37:B0:F3:63:80:2F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e3df936-84bf-45b3-be48-5b4b85107581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:34:be:aa:d7:a2:c2:01:e3:53:40:c3:f3:c9:c1:3d:f2:
         11:91:1c:27:dd:93:39:9c:12:bb:ca:73:7b:4e:24:49:d1:ca:
         f6:a1:b4:e6:d6:e6:89:2b:5b:a9:9c:80:36:e0:f5:76:03:de:
         ac:93:11:c7:86:3c:b7:9a:59:1c:dd:53:e2:18:5b:3f:44:b9:
         d6:0a:3e:c8:0e:83:ca:fc:df:4c:45:64:88:e8:07:11:07:c5:
         07:4d:38:08:b2:ca:81:1b:fd:e8:88:ea:b6:94:b4:e5:d4:19:
         71:a4:31:57:8f:0c:08:42:6f:e8:ea:7b:e5:c5:50:dd:45:c3:
         fe:c2:e8:8c:f6:a9:f4:10:d8:b7:7d:c5:34:c7:bc:78:bc:bb:
         0c:ac:45:80:63:1a:6b:c2:e5:84:3d:ed:0d:e6:72:ca:cf:ee:
         07:31:c2:35:59:52:1d:fe:52:84:a0:bc:49:64:e0:c6:a7:87:
         f7:d0:89:ef:9e:8c:22:26:a8:48:87:96:ba:27:70:76:a6:d2:
         52:55:a5:a8:d0:39:59:15:0d:bc:80:47:00:24:b8:04:7b:cd:
         e8:0e:d2:cd:2c:64:27:3a:fb:ae:ed:27:14:bc:b2:58:bc:44:
         76:32:23:6d:72:0f:11:4e:9b:27:10:91:b1:95:06:79:74:bd:
         9c:23:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:47:15 2025 by rpki-client