This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa
File: ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa (raw, json)
Hash identifier: aQYixqXhuCP92IfLzaDg6xAnc3euh7Z+wazM7bkSM/k=
Subject key identifier: 4F:7B:2C:10:AB:5B:DD:86:D8:08:3E:BC:56:66:E2:6B:A4:71:19:06
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 213567624135333C75274C896869513A51FD709C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa
Signing time: Thu 13 Nov 2025 01:40:47 +0000
ROA not before: Thu 13 Nov 2025 01:40:47 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:35:67:62:41:35:33:3c:75:27:4c:89:68:69:51:3a:51:fd:70:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 13 01:40:47 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=d0e565d726206a5e94dab46bced08c7f2702593f18412b3a141283f7d07acb1b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:c7:44:19:90:bd:77:62:d6:67:05:2e:f2:
1e:7e:cd:8e:89:7b:14:51:2c:06:27:36:73:05:a8:
83:3b:0c:17:73:08:67:02:d9:65:34:fb:09:7f:36:
0d:cd:84:37:26:9e:60:fa:c4:ea:0f:e9:da:d2:ee:
6e:a4:2a:6e:41:33:70:78:42:94:06:67:a0:08:70:
f5:21:c4:2d:19:87:85:4b:e6:8e:09:f4:90:ba:26:
99:3c:94:6d:d6:8d:c4:65:3d:93:19:a4:97:e5:58:
a0:96:ad:2f:94:95:82:a4:81:3e:4e:18:fe:92:12:
65:3f:0f:e4:39:f3:26:b1:f0:4e:4a:7f:36:a0:79:
f3:94:ca:cc:dc:a6:48:85:ed:f6:45:61:c2:28:21:
08:ec:a0:83:de:33:50:89:0b:18:e6:ff:bc:fa:c4:
92:c0:2a:b3:7d:15:39:44:ec:01:10:0c:9b:72:41:
f0:a2:13:46:49:0c:ea:e2:97:41:94:3a:fd:07:80:
24:8f:49:14:ed:b8:26:06:c2:6e:13:a4:01:d0:33:
0e:d2:8c:b8:f4:77:1d:c9:48:39:0b:23:19:92:8c:
3e:89:9a:e0:f6:1c:ba:d7:a5:b1:be:75:5e:1f:1a:
2a:fe:36:cb:68:1b:21:0b:32:8a:10:be:f8:18:34:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:2C:10:AB:5B:DD:86:D8:08:3E:BC:56:66:E2:6B:A4:71:19:06
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:bd:9a:92:fe:14:4e:39:cb:71:8e:60:60:f8:cf:7c:96:c3:
66:7e:84:38:22:f1:84:48:40:49:7a:23:06:e2:f4:db:23:2c:
7f:e0:c8:a4:5b:7e:34:a7:ff:fb:f1:ef:87:e0:76:b6:00:99:
78:40:8f:fa:3d:96:91:b1:da:fa:4d:dd:7a:41:38:35:20:dc:
88:7a:d5:dd:ff:e8:90:bd:3a:77:56:ca:d7:2e:b2:6e:e0:4d:
9b:31:91:9b:a1:dc:9b:4a:48:05:97:b7:bb:44:4a:91:2a:49:
06:1f:68:f8:d1:74:77:35:e9:06:61:20:a9:ef:cb:6a:c8:2f:
c6:f4:f6:a1:06:56:17:b9:f0:6a:15:8f:79:1d:ca:eb:db:6c:
9f:9b:50:74:c4:d2:60:01:64:01:18:c0:27:ce:09:8a:d1:9f:
b2:70:b7:b1:36:02:61:82:6d:51:4f:2e:65:f0:74:05:0d:2f:
82:74:48:36:d8:d7:65:37:12:9c:b3:09:b8:43:7e:57:c1:44:
35:05:b0:b7:70:3e:ed:5f:7d:63:7b:af:7a:4c:81:9a:2d:5e:
83:24:3a:ee:fd:77:cf:e6:3f:2e:82:ee:c7:f7:cf:f6:39:ca:
d2:84:38:9c:f9:33:76:e0:58:b2:96:fa:09:cd:13:a8:bc:13:
ec:2e:5f:f6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUITVnYkE1Mzx1J0yJaGlROlH9cJwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTEzMDE0MDQ3WhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMGU1NjVkNzI2MjA2YTVlOTRkYWI0NmJjZWQwOGM3ZjI3
MDI1OTNmMTg0MTJiM2ExNDEyODNmN2QwN2FjYjFiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDM78dEGZC9d2LWZwUu8h5+zY6JexRRLAYnNnMFqIM7DBdz
CGcC2WU0+wl/Ng3NhDcmnmD6xOoP6drS7m6kKm5BM3B4QpQGZ6AIcPUhxC0Zh4VL
5o4J9JC6Jpk8lG3WjcRlPZMZpJflWKCWrS+UlYKkgT5OGP6SEmU/D+Q58yax8E5K
fzagefOUyszcpkiF7fZFYcIoIQjsoIPeM1CJCxjm/7z6xJLAKrN9FTlE7AEQDJty
QfCiE0ZJDOril0GUOv0HgCSPSRTtuCYGwm4TpAHQMw7SjLj0dx3JSDkLIxmSjD6J
muD2HLrXpbG+dV4fGir+NstoGyELMooQvvgYNHzrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUT3ssEKtb3YbYCD68Vmbia6RxGQYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2RkZjU3MThjLThjZWMtNGEzNS04ZjRhLWQ0ZGE1NmU5NTgwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASVTANBgkqhkiG9w0BAQsFAAOCAQEAgL2akv4UTjnLcY5gYPjPfJbDZn6E
OCLxhEhASXojBuL02yMsf+DIpFt+NKf/+/Hvh+B2tgCZeECP+j2WkbHa+k3dekE4
NSDciHrV3f/okL06d1bK1y6ybuBNmzGRm6Hcm0pIBZe3u0RKkSpJBh9o+NF0dzXp
BmEgqe/LasgvxvT2oQZWF7nwahWPeR3K69tsn5tQdMTSYAFkARjAJ84JitGfsnC3
sTYCYYJtUU8uZfB0BQ0vgnRINtjXZTcSnLMJuEN+V8FENQWwt3A+7V99Y3uvekyB
mi1egyQ67v13z+Y/LoLux/fP9jnK0oQ4nPkzduBYspb6Cc0TqLwT7C5f9g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:21:49 2025 by rpki-client