This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa File: a7b6bcb6-8e89-4b81-804e-96889fd99885.roa (raw, json) Hash identifier: xfsFnZj0ffjdZEhTri+PmnwlAT1YrBxFvdZoTcFzS5w= Subject key identifier: FC:05:DE:5F:E0:89:AD:08:86:97:32:69:3A:94:37:07:26:78:4E:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0231703A38162BF3DC752BC1F576FAF695ADB9E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa Signing time: Sat 08 Nov 2025 01:10:06 +0000 ROA not before: Sat 08 Nov 2025 01:10:06 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:8000::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 02:31:70:3a:38:16:2b:f3:dc:75:2b:c1:f5:76:fa:f6:95:ad:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 01:10:06 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=2258a1179aaf5325bfb777fe983a85c686bd3991cb8daa25aafba73e24671152, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:22:54:a9:0c:a5:6d:65:6c:f3:9f:ea:84: b4:71:86:09:77:9f:08:98:51:7e:a9:03:0f:87:7d: cc:60:3e:3e:b7:a3:f2:81:e1:7b:02:c2:04:ba:a1: 40:d6:f4:30:76:3d:62:f6:3d:e2:58:bc:43:bf:5b: cb:00:d4:13:c1:f3:16:68:5b:b5:2b:7c:67:d7:99: 02:15:58:07:f8:7d:26:29:9b:f7:a9:d0:01:28:20: 3c:6e:15:88:77:35:c7:d2:b9:f0:1b:f7:7b:95:5c: bd:92:5b:71:03:33:cc:bc:7e:e3:18:13:68:26:08: 60:be:8c:04:38:77:f8:17:e5:53:ff:ea:c0:b7:2c: 11:22:ea:32:9f:bc:69:3d:e2:0e:a7:dc:19:97:ba: 6d:37:ad:2f:ad:f6:e1:f8:06:0f:1c:c7:55:38:5e: ec:78:66:6f:70:77:21:64:4d:f6:ea:ed:84:97:ba: da:9b:54:8a:4b:56:2e:d1:bd:72:34:e0:c1:27:d2: 4c:62:c9:0e:1e:8b:c5:32:5e:1f:d3:da:17:51:16: a0:f0:68:6d:b6:26:11:e1:a5:9f:29:b2:4b:37:75: c2:f7:37:55:67:ac:5c:d4:eb:4a:90:3c:7b:c7:18: d1:09:0e:00:4b:a0:cc:3c:8f:8a:c3:62:6c:5d:a3: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:05:DE:5F:E0:89:AD:08:86:97:32:69:3A:94:37:07:26:78:4E:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a7b6bcb6-8e89-4b81-804e-96889fd99885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:8000::/48 Signature Algorithm: sha256WithRSAEncryption 68:a4:cb:cc:9b:4f:c4:68:39:bf:e3:42:37:34:15:fd:f8:e5: 85:2a:76:87:17:48:d5:95:3c:4b:73:a3:bb:ca:a3:14:e2:cf: 2b:b7:33:5a:db:62:d6:0c:f5:6c:0c:64:2b:c7:60:4a:56:8e: 84:67:ac:6c:04:eb:14:87:af:95:71:75:2c:db:ce:7d:0e:c0: 4c:8d:96:e3:ca:28:93:0d:98:9e:09:5c:7a:26:e4:65:d8:a5: 58:13:f5:09:01:38:45:f2:6c:da:aa:b3:f1:1e:81:02:b6:25: fa:d3:4d:b7:8b:3d:0b:86:b1:c3:41:cf:29:e9:d3:0e:6f:8f: 2d:a1:d4:9c:e7:45:7d:64:91:4e:32:9a:7c:52:f7:a7:cb:32: 6f:6b:d9:55:32:12:40:b4:2e:ec:15:34:7c:46:0b:10:c5:6c: f8:d4:c4:b0:33:ac:21:e0:2b:d2:6a:07:ed:95:7d:4a:da:1b: 86:0a:5d:31:3f:03:4c:3e:09:55:57:b9:6e:55:b7:b8:f9:73: 06:52:13:fc:9a:63:9b:bc:ae:4c:3d:f1:2c:f1:03:0b:5a:49: 66:41:17:c9:6a:41:0f:36:2f:28:e4:90:35:39:37:5b:d5:4a: f0:f1:ed:b9:fc:8f:d1:d0:ad:04:8f:66:6d:34:83:e4:ee:96: 37:7c:ac:92 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAjFwOjgWK/PcdSvB9Xb69pWtueAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA4MDExMDA2WhcNMjUxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjU4YTExNzlhYWY1MzI1YmZiNzc3ZmU5ODNhODVjNjg2 YmQzOTkxY2I4ZGFhMjVhYWZiYTczZTI0NjcxMTUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqsCJUqQylbWVs85/qhLRxhgl3nwiYUX6pAw+HfcxgPj63 o/KB4XsCwgS6oUDW9DB2PWL2PeJYvEO/W8sA1BPB8xZoW7UrfGfXmQIVWAf4fSYp m/ep0AEoIDxuFYh3NcfSufAb93uVXL2SW3EDM8y8fuMYE2gmCGC+jAQ4d/gX5VP/ 6sC3LBEi6jKfvGk94g6n3BmXum03rS+t9uH4Bg8cx1U4Xux4Zm9wdyFkTfbq7YSX utqbVIpLVi7RvXI04MEn0kxiyQ4ei8UyXh/T2hdRFqDwaG22JhHhpZ8psks3dcL3 N1VnrFzU60qQPHvHGNEJDgBLoMw8j4rDYmxdoxW5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/AXeX+CJrQiGlzJpOpQ3ByZ4TkUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3YjZiY2I2LThlODktNGI4MS04MDRlLTk2ODg5ZmQ5OTg4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sgAAwDQYJKoZIhvcNAQELBQADggEBAGiky8ybT8RoOb/jQjc0Ff34 5YUqdocXSNWVPEtzo7vKoxTizyu3M1rbYtYM9WwMZCvHYEpWjoRnrGwE6xSHr5Vx dSzbzn0OwEyNluPKKJMNmJ4JXHom5GXYpVgT9QkBOEXybNqqs/EegQK2JfrTTbeL PQuGscNBzynp0w5vjy2h1JznRX1kkU4ymnxS96fLMm9r2VUyEkC0LuwVNHxGCxDF bPjUxLAzrCHgK9JqB+2VfUraG4YKXTE/A0w+CVVXuW5Vt7j5cwZSE/yaY5u8rkw9 8SzxAwtaSWZBF8lqQQ82LyjkkDU5N1vVSvDx7bn8j9HQrQSPZm00g+Tuljd8rJI= -----END CERTIFICATE-----Generated at Sat Nov 22 21:32:23 2025 by rpki-client