This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126de986-01c8-490c-bf22-c5770a1efd7c.roa
File: 126de986-01c8-490c-bf22-c5770a1efd7c.roa (raw, json)
Hash identifier: ryQO4k1wwwb1UJZerW+mus7z6lQFzro5ad7aDxMbBtY=
Subject key identifier: 28:B6:83:DE:75:33:F4:AB:13:14:2E:0B:1C:AE:21:B4:F4:60:71:7F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 18FD68B898E5E580A0182A345B298FC6BE548E5B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126de986-01c8-490c-bf22-c5770a1efd7c.roa
Signing time: Fri 05 Dec 2025 00:50:11 +0000
ROA not before: Fri 05 Dec 2025 00:50:11 +0000
ROA not after: Thu 05 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.196.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fd:68:b8:98:e5:e5:80:a0:18:2a:34:5b:29:8f:c6:be:54:8e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 5 00:50:11 2025 GMT
Not After : Mar 5 23:59:59 2026 GMT
Subject: serialNumber=4023a0a0e93be93b3aef6d037cf1ce3bc4a94c76cf4abfa4337f0e9d892f2ac3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:79:6a:a5:68:62:3b:b0:18:ef:d9:5a:1e:
e6:d1:7a:ba:4e:5e:74:93:f7:ae:a9:2d:e6:7f:f1:
91:09:a4:a5:42:ed:1b:f2:7d:ef:ce:47:85:89:31:
a6:5e:4a:2d:70:50:a0:77:d5:67:80:fa:2a:34:bb:
29:34:7e:37:75:73:8b:19:8b:2b:2b:3d:46:30:53:
e7:21:ce:a7:50:a1:85:62:e4:4e:a8:16:88:9b:e1:
7d:d6:71:b5:65:67:de:7e:8d:df:2b:9a:24:56:d4:
9e:3f:e8:74:bc:b6:43:72:95:48:22:5c:97:94:68:
fd:80:d1:a6:c0:68:e4:f7:5a:bf:cf:25:02:b7:70:
1a:af:e4:a8:9b:eb:f7:aa:eb:4d:ec:da:6c:73:37:
a9:9f:49:82:34:ea:cb:6c:52:4c:e5:83:12:8e:36:
03:fe:96:c3:d4:ac:ad:7d:24:2c:19:04:01:b4:1e:
27:26:9c:69:4e:3f:6d:c4:60:3d:a0:71:db:54:b2:
40:e4:51:a1:e6:d0:fc:08:9c:5f:33:13:42:ce:58:
23:60:27:2a:8e:47:ac:36:f0:67:8e:32:da:01:2a:
46:69:9b:ff:80:de:49:df:b1:15:bd:cb:45:54:e9:
15:95:8b:d7:0d:83:9b:ab:70:f6:cd:80:1d:c5:38:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:83:DE:75:33:F4:AB:13:14:2E:0B:1C:AE:21:B4:F4:60:71:7F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126de986-01c8-490c-bf22-c5770a1efd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.196.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1f:55:73:7f:11:2d:ba:63:25:36:f5:96:39:27:57:85:33:5d:
8e:ab:b8:88:68:5f:85:9a:d1:ec:d2:cb:bf:aa:24:ea:7c:8d:
03:5c:d6:90:0e:c3:4b:9d:e4:97:0d:ee:9e:d3:07:dd:8f:f3:
34:91:da:e9:2c:5e:78:59:ea:e6:cb:ba:ea:de:f5:66:fc:6e:
d8:87:25:51:47:1a:2e:ae:78:76:57:df:77:41:17:8b:b2:38:
f9:7b:49:91:cc:7e:ea:bf:29:a1:f8:b7:12:0c:a5:ef:14:7b:
90:76:f4:bc:43:b9:e8:92:00:51:6d:17:6e:c6:da:be:4f:66:
2b:1c:d5:6c:ae:a5:0c:32:71:fa:18:26:64:76:95:50:a0:24:
bd:06:ab:32:d5:bc:09:46:c9:d2:f3:9e:b6:e6:ea:21:78:b5:
5c:a9:f0:e1:79:72:cb:c6:2f:01:05:9f:b7:c5:64:6c:ee:fd:
b7:18:d5:d4:ff:42:8e:93:6e:e4:9d:d1:80:33:36:96:4a:6f:
92:b9:c0:76:5a:f4:04:bf:16:f7:0d:90:ca:36:d0:3b:f6:25:
91:9b:9f:0e:df:34:07:5b:5e:14:9a:30:5b:d4:2e:1c:cf:6e:
c4:4e:84:eb:0f:c7:17:9e:8d:f9:b1:b5:1b:51:88:47:1d:6a:
c3:7f:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:47:12 2025 by rpki-client