This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ff893aad-9ed8-41c3-9b48-507fa414885d.roa
File:                     ff893aad-9ed8-41c3-9b48-507fa414885d.roa (raw, json)
Hash identifier:          Q5FZz+cw+7ChY1tgLzsZ+j0/XJVXnv3LqYcm5ioeLFY=
Subject key identifier:   88:A1:D2:5C:13:A2:CC:80:5C:C7:B3:17:C1:D0:6A:81:3F:94:F2:42
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       4DDD18944ECF219207F5D75A7BCC7086C8FF73BA
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ff893aad-9ed8-41c3-9b48-507fa414885d.roa
Signing time:             Tue 25 Nov 2025 19:40:45 +0000
ROA not before:           Tue 25 Nov 2025 19:40:45 +0000
ROA not after:            Mon 23 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dd:18:94:4e:cf:21:92:07:f5:d7:5a:7b:cc:70:86:c8:ff:73:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Nov 25 19:40:45 2025 GMT
            Not After : Feb 23 23:59:59 2026 GMT
        Subject: serialNumber=9fadcd3b253e5ad10f9be47fdcb122c8c850e64ee74766983131011d61bd7d4c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:5f:7c:86:db:fe:02:79:22:81:c8:87:ea:
                    ec:d7:70:05:91:83:a1:f2:76:db:fc:7d:19:f8:25:
                    2a:be:45:24:86:93:fb:b6:78:80:3e:f6:f0:eb:82:
                    7e:c5:46:ea:95:7c:18:5a:a7:89:36:bc:1d:6e:6b:
                    7f:6c:1a:dc:27:86:c6:44:73:bc:ea:a0:99:cf:24:
                    25:0a:e2:75:60:35:d1:51:c2:25:ae:72:76:9f:d0:
                    2e:08:2b:61:7b:50:a7:80:e5:ec:1f:3b:da:15:14:
                    14:25:68:10:0c:7f:94:f8:7f:38:01:20:95:e0:bd:
                    48:78:9c:2b:ec:f4:66:be:bc:6b:ae:c0:96:ab:da:
                    3d:ff:35:b5:71:ff:f1:ad:ba:5f:f5:7c:65:cd:41:
                    86:a3:e9:ac:2f:b2:28:28:3d:7c:4e:db:2f:e5:80:
                    9e:39:d0:de:66:e5:5d:a8:fe:64:bd:5f:ed:e9:57:
                    3a:aa:e9:45:8f:fe:83:6e:82:84:2a:93:9f:f2:76:
                    e6:8b:ed:66:f6:2c:68:9b:86:07:1f:99:9a:44:9a:
                    dd:a9:0b:a5:bd:61:6d:b5:7f:2e:e3:3e:48:a1:43:
                    4e:d3:4c:03:3c:c8:4e:bc:a3:ba:e5:a7:10:25:8f:
                    55:c2:c2:5e:36:fa:b3:fd:20:e1:53:a4:49:46:ea:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A1:D2:5C:13:A2:CC:80:5C:C7:B3:17:C1:D0:6A:81:3F:94:F2:42
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ff893aad-9ed8-41c3-9b48-507fa414885d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:59:23:1d:6c:6a:a5:86:77:b3:7d:7f:b7:a4:72:2b:71:9a:
         c3:f4:c2:bf:1a:00:49:15:83:0f:4f:fa:55:ee:39:74:44:ae:
         4e:a7:c2:d9:9c:d0:f9:bd:8f:33:a6:50:19:d4:db:98:ce:b3:
         f2:6b:35:7e:03:7f:fc:7f:dc:30:5a:d0:fc:68:89:e3:38:be:
         f2:81:6c:69:f6:18:89:e1:cb:bc:93:4e:19:c4:09:1e:f3:c4:
         cd:68:e2:71:c6:2d:06:b4:74:7e:74:24:d5:2c:4e:61:b6:c8:
         fa:41:dd:6b:3e:cd:a8:85:1e:b6:2c:27:53:c4:d6:31:95:cd:
         b3:d8:c9:e9:aa:51:f6:c8:ee:8e:0f:25:33:fe:8c:6e:37:e2:
         a5:c3:fb:3b:f4:ab:07:fc:fc:51:ff:bb:c9:49:09:68:b5:c7:
         15:56:16:cc:97:cd:95:95:3d:3b:ae:1a:b3:a2:a7:e3:4c:a1:
         75:14:5d:36:34:bd:d7:5d:7c:01:48:43:03:6e:ee:fa:77:87:
         96:66:56:35:01:6e:b9:2e:27:ab:a7:05:36:bb:bd:65:a0:2d:
         72:f7:1a:73:5f:47:88:bc:44:9a:c0:38:39:92:7b:3d:e1:2a:
         df:56:95:83:4c:d1:e1:54:b7:99:b9:15:43:05:d9:0f:91:72:
         b1:5a:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:31:33 2025 by rpki-client