This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa
File:                     eca36373-2c2b-4810-b0c5-c530f9afed33.roa (raw, json)
Hash identifier:          eIewDvjzhU77w9f5EWpaZ4SsEZsejBTE/+Uz9lV1AMg=
Subject key identifier:   C2:A8:28:A5:C3:D4:57:BC:2D:E9:8C:87:BE:3A:E4:FF:06:AA:3C:B1
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5A1045E954C9FD1AE5AF92F9060D383E25EEC893
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa
Signing time:             Wed 10 Dec 2025 04:01:03 +0000
ROA not before:           Wed 10 Dec 2025 04:01:03 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.177.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:45:e9:54:c9:fd:1a:e5:af:92:f9:06:0d:38:3e:25:ee:c8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 04:01:03 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=f0fb77c60b147af3c0ead47d264b395768c1bfc4f8b845dd5cfb870b21107e2f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:aa:7c:47:26:93:03:c0:3e:b6:91:19:08:
                    b8:c2:0e:4f:71:96:82:b3:1a:7e:51:2a:bf:f4:42:
                    29:f6:a1:c3:84:ca:47:59:24:22:59:54:5c:08:31:
                    dc:f1:d7:b9:ca:32:a2:b5:12:25:3b:01:63:a7:78:
                    fe:6d:11:4e:f5:1d:b7:a0:1c:42:1a:55:43:8e:00:
                    49:72:10:9c:bf:9f:5b:33:2b:35:42:74:4a:8f:4c:
                    b1:cb:b9:e2:fc:74:22:a0:89:43:71:5d:a4:e4:29:
                    61:20:92:de:03:e2:d0:6e:08:5e:52:f4:93:b4:49:
                    69:e0:c7:48:fa:ab:7c:8d:d2:80:5e:d8:a7:68:42:
                    e9:e1:f8:0b:3d:c8:5b:38:ae:6e:26:7a:1b:49:5c:
                    dd:55:3f:c8:92:4d:45:f3:1c:22:7d:55:50:28:2a:
                    2c:88:92:06:68:bd:55:84:e4:2f:05:9c:d5:84:97:
                    27:26:c4:d3:78:11:f9:1e:2c:79:8c:ee:87:3d:31:
                    ae:ec:59:92:c4:62:a9:56:67:5e:48:b8:2f:6b:57:
                    67:3d:fc:76:5b:48:dd:ac:d5:28:dd:e3:6b:e6:ac:
                    e0:52:c1:c3:de:da:56:80:37:74:ff:55:af:02:64:
                    7d:65:13:f3:92:33:11:e6:56:7a:51:29:db:95:d8:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:28:A5:C3:D4:57:BC:2D:E9:8C:87:BE:3A:E4:FF:06:AA:3C:B1
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:53:8a:6b:13:ae:cf:b2:3b:eb:99:75:e1:2d:62:7c:3b:1f:
         ac:93:74:a9:c2:2d:78:46:0b:27:7f:30:7d:fc:d6:51:1f:fa:
         4c:c2:e9:b2:a7:99:a8:8b:2a:1e:73:7d:e1:a2:7f:b2:5c:bc:
         08:dd:05:0d:25:1d:7b:69:29:b4:8f:f5:70:0a:dd:2f:cf:46:
         62:5d:3c:e3:83:cd:11:ab:b0:3f:0b:5e:0d:9b:63:1e:e5:c7:
         7d:12:a7:16:74:86:e0:18:32:50:46:19:01:d1:4f:51:eb:9c:
         5e:4c:fc:a8:b1:c4:74:ac:67:c2:e6:1f:aa:4e:71:c7:25:f5:
         8d:cb:30:2b:3c:f2:0e:40:a0:40:79:04:08:db:21:5f:b5:89:
         8a:96:e3:e9:31:8b:1c:4b:37:e2:e6:93:aa:c1:2a:fd:24:2e:
         ae:0c:4a:c4:a1:9c:62:47:76:05:b9:c3:aa:ff:98:2d:ee:48:
         c2:05:31:68:15:de:b3:55:aa:27:4c:e8:1f:b4:b8:8b:10:c5:
         30:57:05:d2:3d:77:eb:9f:39:77:e0:07:eb:b1:10:83:0c:a8:
         21:e2:1c:08:bc:aa:d7:fe:c2:5e:c4:58:5f:40:8f:c0:ee:1c:
         73:3c:04:a2:62:3e:b1:06:26:18:7b:29:f3:5b:04:8a:99:d8:
         73:a6:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:45:41 2025 by rpki-client