This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa
File: dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa (raw, json)
Hash identifier: FlwCgTGKQvzgb7eKHK/m4qwYSIH54VxV6O+ROl/IsJ8=
Subject key identifier: BB:DE:B8:A3:42:B0:4D:C0:57:AB:DD:C7:5B:AC:BE:D2:1C:CC:4B:B8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2B0C4D6BD7BE4EA42B626FC6C3B739718DD9B107
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa
Signing time: Mon 08 Dec 2025 01:10:57 +0000
ROA not before: Mon 08 Dec 2025 01:10:57 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.192.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0c:4d:6b:d7:be:4e:a4:2b:62:6f:c6:c3:b7:39:71:8d:d9:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 8 01:10:57 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=9b164a30d4e93c6ee59becad11611a36cdef6cedea1690b175a4ea52343c6b5f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:2c:f7:fe:13:c8:84:9b:4b:0c:b6:d6:74:
55:4f:3e:61:96:1a:e8:e5:9b:c8:98:2e:79:bb:23:
be:fb:7e:93:17:8d:b1:69:61:b9:e5:f1:36:99:03:
d8:c6:f2:57:37:0b:83:b3:c1:18:aa:96:bb:13:6f:
d3:72:a7:1d:65:95:aa:31:59:7a:ef:33:f7:27:33:
2a:a2:76:0f:c5:2d:2a:99:c4:f2:8c:31:6e:81:b9:
ce:a6:80:d2:54:ac:ed:3a:f8:b0:b8:4b:fc:03:e8:
c0:88:05:f9:f9:ce:00:dc:32:b3:f8:dc:6d:31:8f:
4d:ab:5c:96:87:92:30:b0:55:4c:8a:eb:af:95:52:
76:6d:a2:df:8f:61:bc:9b:11:1f:9f:c9:c9:0e:3e:
d2:4b:3b:83:2b:75:e9:03:ef:46:85:b7:4e:08:c1:
09:28:5e:c8:04:70:e1:ac:b4:89:7e:5a:a4:a1:a4:
1a:15:e0:ea:3e:30:1f:3f:f0:e0:04:34:5a:4f:e9:
ed:d4:af:91:df:87:1e:8e:34:ac:ac:d1:33:35:9f:
8b:7c:2e:c3:32:eb:70:4b:b5:98:78:cd:c8:39:dc:
1c:f4:98:ed:a9:2f:95:7a:ab:2c:17:8d:9f:6e:bc:
c8:9a:21:44:b5:9b:ef:81:e0:49:27:05:2a:a6:79:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:B8:A3:42:B0:4D:C0:57:AB:DD:C7:5B:AC:BE:D2:1C:CC:4B:B8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd9a682c-6d0a-41ad-ab6d-2320df8122ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:99:5e:99:d1:c4:8d:68:00:fa:2b:8f:af:be:ee:18:e4:e9:
c7:fd:44:ac:64:3b:54:02:0c:d7:10:e4:bf:23:bd:75:16:a5:
02:7a:2e:90:3b:75:ca:75:f1:b4:07:51:57:26:ee:7a:db:c3:
3b:bc:ce:4c:03:77:ed:80:0c:01:cc:93:a1:fe:23:08:f8:66:
34:15:ff:5e:0e:03:40:42:ec:9b:46:12:37:2f:b9:f6:ca:06:
1c:cf:c4:d2:12:ab:a6:9d:72:06:72:ed:c1:cb:ef:c5:39:12:
2c:c5:f7:dd:6c:e1:54:82:75:d1:54:58:a7:71:d9:b8:05:06:
99:b4:49:8e:49:7d:0e:2d:f3:88:8f:2d:96:ec:7c:15:55:75:
9a:07:12:13:3d:16:3a:81:46:0f:6d:0f:a2:ce:60:f1:86:16:
07:7d:50:eb:6b:79:ac:0f:34:1f:f2:a8:1f:98:cd:de:3f:bf:
68:a1:90:b8:31:af:86:46:e4:15:12:70:0c:d9:8b:92:ac:cd:
21:9a:8c:3f:55:c7:ae:26:b0:57:c5:5b:ba:39:b6:f6:82:a6:
10:9a:42:84:a3:39:03:67:83:4f:ee:ff:39:1c:5a:44:c7:f5:
15:b7:ff:dc:0a:0b:5b:42:54:34:5c:92:e3:7c:1c:27:e4:8f:
68:47:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:48:04 2025 by rpki-client