This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
File: fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa (raw, json)
Hash identifier: 8Jx6oLFfFHc/4MEftosLfPzhwoLGSdIQMY+I3fQyksM=
Subject key identifier: 8A:6B:B8:46:75:F1:F0:FD:86:8A:F3:27:C7:53:90:F2:C4:D5:5D:E6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A5A9D9C98EF1BA677EEF3E744A0197B8E6A79E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
Signing time: Sun 07 Dec 2025 01:20:10 +0000
ROA not before: Sun 07 Dec 2025 01:20:10 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 208.86.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5a:9d:9c:98:ef:1b:a6:77:ee:f3:e7:44:a0:19:7b:8e:6a:79:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 01:20:10 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=9a21aa85a567f3eaf5dff20b0d9d112094ea89e1b11256ee544f676b0c18301a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:b8:73:08:2f:bd:2e:16:9c:f0:8c:03:a1:
12:5e:2c:2b:3e:f5:1c:12:29:8a:fe:d9:2b:03:b9:
86:cd:26:fc:27:63:77:7f:1d:83:0f:de:88:e2:e4:
20:bb:11:8f:42:a5:a3:5d:ee:cf:43:ab:34:a4:bc:
2f:4e:eb:5c:78:77:74:ed:57:6e:52:d8:ee:23:15:
f4:7b:58:10:d9:64:d5:e9:4e:07:82:e5:99:ef:38:
45:7a:d4:ff:fe:4d:b5:e8:69:7f:ee:26:13:e8:46:
a9:42:e6:e7:87:18:cd:cd:a9:f0:a5:b7:1a:d4:fb:
82:90:57:84:bf:32:70:a2:d4:64:9f:23:d2:24:08:
78:a3:de:f8:42:61:98:f7:d7:12:0a:67:6e:c1:d5:
b0:67:0e:03:2a:bc:73:4a:a7:64:a4:40:da:77:df:
18:57:0f:c3:06:91:b3:7a:65:d4:99:fa:66:33:79:
be:f3:2e:b9:96:2e:8d:b8:90:71:db:8b:40:cf:65:
17:56:25:40:54:ac:da:79:31:28:eb:52:be:a6:02:
67:1e:a9:89:15:7a:32:ad:3b:6c:e7:35:5d:6f:4c:
08:43:2a:c3:0c:d6:86:4d:ee:43:fb:24:d8:e5:2d:
c3:97:bc:3b:8f:77:5c:a2:44:ae:6d:a4:3f:0e:e2:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:B8:46:75:F1:F0:FD:86:8A:F3:27:C7:53:90:F2:C4:D5:5D:E6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:d4:e3:4e:d7:4c:d3:1a:e6:76:ab:05:d2:08:52:d8:ab:0e:
4f:35:bf:42:cf:1a:9e:9a:0c:1e:73:3a:3d:aa:18:a2:b0:56:
93:ef:37:4c:5d:56:61:ff:3d:38:74:f1:70:69:e5:a6:d3:9f:
81:47:33:34:70:d8:92:fd:0a:60:3e:b5:e5:d3:3d:90:2c:7b:
e2:f9:2f:25:f8:2b:a7:b7:98:b6:d4:53:4d:a7:b9:81:1c:57:
72:9f:b6:fb:49:27:e3:7b:a0:9e:61:9d:f6:66:97:be:d2:6b:
27:2e:7c:f6:a2:8e:74:6d:f9:a3:55:0f:2e:03:69:46:a8:9b:
2c:1c:07:87:52:e1:a7:70:3b:6d:9a:36:b3:54:6d:ca:2e:4a:
5b:46:b8:57:66:9f:55:e7:3f:c4:f5:e3:12:9b:1f:92:68:55:
29:12:e6:39:fc:ee:be:fe:9e:b0:de:f4:2c:5c:46:e6:25:7b:
79:af:41:fd:83:cc:1e:49:4f:60:82:9e:cf:97:55:ae:8c:3d:
15:a6:d6:95:5d:2f:19:3c:62:4a:14:7c:7b:f1:50:b6:ba:cb:
01:af:b5:69:3a:9f:b5:2b:d9:b8:e9:79:18:35:5d:ea:13:ab:
20:9a:1c:b3:c8:82:d5:bb:11:a6:be:91:20:40:a1:50:6c:08:
2f:c6:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:46:22 2026 by rpki-client