This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b33d4b8-5f91-4f3f-abd7-f15733c8e760.roa
File: 2b33d4b8-5f91-4f3f-abd7-f15733c8e760.roa (raw, json)
Hash identifier: 7TcUTEEwE3aE4rRT5E8JGUty2BOBJ/5kiC0VpaxEcRw=
Subject key identifier: 41:FE:9C:09:94:09:10:1E:F0:D3:4E:39:CE:D5:52:BC:64:5C:D9:2E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4F3F760C52981DDE0E409A082B62D9DEE2305BE9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b33d4b8-5f91-4f3f-abd7-f15733c8e760.roa
Signing time: Sat 20 Dec 2025 08:11:25 +0000
ROA not before: Sat 20 Dec 2025 08:11:25 +0000
ROA not after: Fri 20 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 20 Dec 2025 09:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3f:76:0c:52:98:1d:de:0e:40:9a:08:2b:62:d9:de:e2:30:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Dec 20 08:11:25 2025 GMT
Not After : Mar 20 23:59:59 2026 GMT
Subject: serialNumber=5296cdf73609432540e2630534b476069a960ad60374c0ff3cd8eb207b9b4534, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:3f:2e:16:15:77:c2:b6:97:47:44:9f:fa:
5c:d2:77:c8:cc:da:09:7c:69:70:c0:19:50:11:e1:
c2:6f:1b:0f:9a:9f:f4:2a:00:bd:10:f9:73:21:63:
2e:73:cc:01:a3:22:f8:0d:ff:4f:5f:48:66:e3:d1:
d6:66:dd:ce:06:69:c2:9f:d0:07:08:43:b0:05:e6:
db:09:49:6c:a4:5f:4c:c1:2a:c8:39:6a:7c:5f:30:
cd:84:fd:2b:dd:d5:a0:0a:5c:11:58:93:65:ee:8f:
f4:04:8d:27:6e:55:2b:68:fb:b7:fa:f0:9e:44:34:
3e:4e:ca:79:72:26:18:9e:d5:90:7d:a4:f9:c2:8a:
93:d0:bf:bf:fd:60:d2:3c:cc:75:42:1e:99:fb:11:
7b:eb:f0:08:ef:de:27:11:5c:4e:4f:c5:bc:31:92:
e0:a9:1b:38:72:7d:d2:05:b5:f4:9b:9a:bc:9f:df:
c8:f0:73:f9:d6:7b:fc:98:3b:4b:4f:66:1f:17:de:
a0:88:ab:22:46:94:b7:d2:69:6c:19:4c:19:7b:07:
7d:a5:16:a2:42:f9:c6:0d:4b:5a:24:66:30:21:6a:
fb:45:0a:81:c6:cd:ff:9b:80:c0:b7:00:4a:7c:32:
1c:8c:fc:88:95:21:01:32:47:24:41:05:74:0d:b9:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:9C:09:94:09:10:1E:F0:D3:4E:39:CE:D5:52:BC:64:5C:D9:2E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b33d4b8-5f91-4f3f-abd7-f15733c8e760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
6c:45:e1:61:f3:44:10:a0:b1:14:04:1b:8e:f5:cf:f2:42:b2:
41:c4:e5:80:0a:40:84:21:33:fd:3a:96:79:77:60:ba:fd:dc:
d0:99:1d:54:f5:03:38:71:e0:2c:c8:a6:7d:46:3c:c0:55:0d:
72:4c:f8:33:9f:99:5e:e0:a9:ee:02:20:c7:a2:a7:87:7d:0c:
da:38:25:61:7b:1f:8d:7e:22:5b:18:bd:a1:d0:57:dd:8e:72:
c0:e3:57:c4:d2:ef:1d:5b:0f:45:15:40:5c:aa:02:ea:04:25:
bb:16:4c:ae:78:39:14:f1:66:d3:38:80:59:6f:7c:1b:ea:0c:
d4:14:f1:b3:52:9f:c3:d1:77:77:49:10:bd:eb:1c:56:10:51:
12:b5:eb:b9:ff:aa:1f:bd:5a:83:e3:82:2c:10:5b:2b:7d:49:
cd:fb:7c:1e:65:89:37:fa:e4:d7:ac:2f:45:62:66:ee:00:81:
d1:fa:65:63:17:b4:44:67:7e:8f:8f:03:eb:3c:dc:c4:5b:82:
48:0b:cf:dc:c7:85:51:fe:56:8a:8c:22:87:ee:50:ec:60:73:
5c:73:e5:1b:f5:6b:b6:3c:99:96:4c:6c:3e:ee:09:9f:8c:0a:
3f:e6:8b:8b:16:29:20:9c:10:a7:6a:49:ba:3b:45:4d:70:bf:
30:f4:1a:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:59:27 2025 by rpki-client