This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa
File:                     5104db5f-fd45-4603-92d6-05f0fd6e1def.roa (raw, json)
Hash identifier:          QOVqLHpMvu82WMDTa2ljZKWznBw5MmSUSP5yz+OYuF4=
Subject key identifier:   EE:7D:68:42:C4:78:AF:FB:C0:C7:70:A7:4A:3D:EB:8E:0A:17:8C:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1166912B4E3396BCCB9D7D8832BC93F415F9ECFA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa
Signing time:             Sun 07 Dec 2025 02:11:49 +0000
ROA not before:           Sun 07 Dec 2025 02:11:49 +0000
ROA not after:            Sat 07 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.125.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:66:91:2b:4e:33:96:bc:cb:9d:7d:88:32:bc:93:f4:15:f9:ec:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Dec  7 02:11:49 2025 GMT
            Not After : Mar  7 23:59:59 2026 GMT
        Subject: serialNumber=94cd19ad795b47c3a8e11b1115c519d9d55a171667e635facaeb2eb603fe7a0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:42:b2:ca:19:83:f0:94:6c:4d:05:6d:b7:
                    fb:da:25:f7:f9:d6:eb:fb:2a:e4:eb:cc:a8:9f:8f:
                    05:f2:e5:1d:b1:69:e0:27:7b:d0:36:3a:2d:d9:56:
                    51:78:d8:73:e6:60:49:fd:3e:db:b3:5f:e1:c5:22:
                    43:82:b6:d3:8e:fa:c3:d4:5d:ff:16:08:42:0c:31:
                    09:00:d4:01:bc:e4:66:6a:9b:e7:bc:ef:1a:31:11:
                    ef:ea:e7:3c:9b:2f:88:a2:0f:74:a4:2e:35:22:13:
                    12:13:f6:e4:80:50:ee:c0:c5:6b:26:88:b6:7b:ed:
                    a7:b7:b7:67:59:95:76:1c:bd:1a:5d:5d:98:24:a5:
                    6e:35:fe:92:7b:32:ea:94:c0:af:7a:64:2c:5b:0e:
                    3d:96:69:80:13:98:15:62:6c:2c:f8:93:ed:68:96:
                    50:38:49:09:11:62:06:ea:ea:a3:c3:90:88:f3:bf:
                    c3:71:05:9c:9e:6a:90:7d:c1:fc:b7:4c:05:fd:f7:
                    d0:72:6e:26:75:17:62:4d:a1:9e:9e:ba:06:b2:b1:
                    08:4e:c4:d5:92:14:3e:74:03:02:0b:ca:ac:a7:6a:
                    b4:57:e7:32:9b:e2:9f:27:29:9d:34:b7:60:76:43:
                    4c:ae:ab:77:8f:92:51:84:96:20:ad:53:54:f9:8b:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7D:68:42:C4:78:AF:FB:C0:C7:70:A7:4A:3D:EB:8E:0A:17:8C:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:b6:34:2b:d1:31:84:56:48:24:7c:92:20:21:38:1e:01:10:
         da:45:08:61:86:c3:f6:bd:39:07:15:c4:bb:03:33:1a:8c:41:
         f6:5a:54:e0:da:78:24:8c:49:6f:d0:80:bc:42:0a:cf:33:e1:
         99:8f:ae:bd:9c:92:f3:8a:95:6a:c8:07:9c:8d:05:c5:ef:98:
         d4:1b:da:0b:c6:d0:7c:a8:fd:cf:92:c7:17:22:d9:23:f1:de:
         97:be:56:f1:69:b5:23:a6:b7:b8:c6:ae:2c:c4:06:1a:ec:4c:
         a7:a2:b7:35:c2:12:34:db:ac:91:da:03:d2:60:b0:e1:55:90:
         68:8c:2a:8b:dc:9a:97:fa:01:1b:60:45:3a:95:67:16:ec:8f:
         23:d6:a6:c5:b9:96:04:cc:5e:4c:bb:e3:6d:55:5c:38:ff:ed:
         98:ac:b5:15:ca:93:b8:42:fe:53:e1:86:50:07:22:c5:e6:5e:
         65:ff:02:13:ba:fd:80:c5:5c:3e:b5:f0:52:da:b8:71:ad:ea:
         7c:d6:b1:e8:fe:d3:78:08:e1:9e:43:6f:3c:1c:e0:95:14:02:
         7c:75:80:93:c0:1d:83:d8:db:d7:42:f5:61:fa:71:27:08:cd:
         27:f0:d5:c1:55:44:1f:f7:4c:97:d0:d1:d8:96:39:af:72:4b:
         98:2f:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:19:19 2026 by rpki-client