This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9c247be-8610-4216-baed-e325e21467df.roa
File: c9c247be-8610-4216-baed-e325e21467df.roa (raw, json)
Hash identifier: Mx0HNGUISpESXbbWTlVYCbnxgpIFh7BpyqRdgfnZqLk=
Subject key identifier: C7:53:93:CC:3A:4A:D3:55:23:50:23:D0:89:E2:0C:2E:FB:97:CA:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06C4EA338790EAF42BAD779D745820B4C036819E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9c247be-8610-4216-baed-e325e21467df.roa
Signing time: Tue 11 Nov 2025 02:20:12 +0000
ROA not before: Tue 11 Nov 2025 02:20:12 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f00:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c4:ea:33:87:90:ea:f4:2b:ad:77:9d:74:58:20:b4:c0:36:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 02:20:12 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=e5ee6ee5766894dcdeb286d63bbd85319875761d4f5e4421b06328d5cb8faa91, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:10:83:c1:3a:85:04:41:00:00:62:d8:06:
e7:67:bf:b9:b9:08:7c:70:00:4c:7d:ba:78:b0:5e:
42:d3:37:aa:23:ea:69:30:db:23:aa:36:c7:d5:3a:
fb:2f:1d:46:0e:50:71:69:67:fb:91:98:0f:3c:e8:
47:18:72:9e:68:8d:9f:d4:72:18:82:4b:56:c5:6c:
7b:a6:00:ae:2f:63:d4:d5:f9:bc:2a:ce:4c:44:d9:
f7:1c:e4:05:eb:ad:a5:d8:14:62:67:81:ab:0d:30:
a3:20:8c:60:93:40:f3:88:99:db:4b:65:d4:9d:15:
22:ad:dc:01:8b:6b:ee:a3:d0:c2:39:bf:56:1b:8e:
0b:37:48:6e:75:2a:f7:b6:6f:1e:4e:27:f5:0b:6a:
4a:8e:29:4c:66:80:3e:b5:49:1f:2e:2e:b4:27:a5:
f7:4c:41:55:01:11:7b:1f:a4:21:d1:a1:61:b5:c0:
47:da:1d:23:54:21:57:2f:b5:cf:0f:33:c4:0d:f3:
39:86:48:97:d9:e3:4e:30:c7:40:07:52:cc:7e:7e:
7e:84:b4:48:81:4b:8c:27:ae:19:eb:54:e9:05:f0:
b1:94:43:fe:7d:e0:39:ed:e0:c3:bc:5e:19:4b:19:
3b:d8:81:dd:ab:2d:dd:d6:5f:e2:a8:39:71:1a:f3:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:93:CC:3A:4A:D3:55:23:50:23:D0:89:E2:0C:2E:FB:97:CA:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9c247be-8610-4216-baed-e325e21467df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:8040::/48
Signature Algorithm: sha256WithRSAEncryption
92:d2:54:54:d5:e8:9d:fb:c1:0f:db:aa:af:1d:29:ff:06:0a:
a4:03:1b:dc:3e:6e:99:63:a6:eb:64:65:44:f2:ba:b4:29:13:
95:f3:df:1e:1e:6f:88:9e:48:b5:c2:e9:67:0c:4c:10:b5:0a:
cc:24:88:22:f9:4a:ef:4a:e7:95:5b:6b:c5:4e:58:1b:35:b0:
0c:bb:c7:0d:0c:b7:89:ba:37:8f:f9:51:9a:fd:5f:5b:38:1e:
96:37:81:8b:17:67:91:e1:10:72:40:28:65:c8:84:7a:0c:44:
c3:59:00:51:8d:1b:04:f7:97:84:c2:d0:67:47:e9:6c:bb:74:
27:55:9a:34:16:4b:1b:52:c5:5a:ac:54:a6:de:f5:48:81:8f:
9e:d3:23:78:d2:51:32:a2:ac:fb:c8:84:6a:30:a2:27:b1:79:
ca:44:5b:90:80:2c:62:44:0a:d3:dc:e6:8c:2f:cd:81:26:0e:
ff:2d:09:31:47:c4:fe:d9:d8:ea:2b:cd:87:15:6e:46:e3:f8:
de:1e:58:ec:f3:d1:fd:c5:c7:cb:e9:a5:95:12:ec:c4:be:3b:
93:f4:82:b8:6a:5d:02:65:46:c6:90:00:d5:95:9f:a8:4d:dd:
c4:7a:de:28:a9:6c:46:63:41:7d:e4:ec:1d:98:e8:dd:88:80:
3e:83:b1:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:34:38 2025 by rpki-client