This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
File: 0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa (raw, json)
Hash identifier: dtA6N9TlGBJHoHhNpPi2hOA4gY5TmK9Kjjqxw0Tsps0=
Subject key identifier: 9E:C5:30:AB:22:77:AB:02:FE:A9:50:9D:25:D1:96:D1:89:5D:04:A2
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5EBE390D333D42164ABF7314EFA098CB0C1E3C9E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
Signing time: Wed 10 Dec 2025 04:50:08 +0000
ROA not before: Wed 10 Dec 2025 04:50:08 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:be:39:0d:33:3d:42:16:4a:bf:73:14:ef:a0:98:cb:0c:1e:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 10 04:50:08 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=e8e25526c53d395ee41e085d96bee1e620dc5e179f53cf35c0ce31e974aab583, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:ab:2c:15:3b:e1:12:eb:34:72:9f:29:ea:
50:ef:a0:a9:68:71:9e:29:22:73:46:4e:56:2e:ce:
08:ec:c0:51:a1:93:89:0e:55:d7:d5:44:5f:5b:44:
b3:8b:98:d8:81:3b:e6:54:60:b8:90:07:5a:f4:b6:
59:d9:61:f7:0e:d1:41:3c:b6:a9:bd:79:57:a4:5b:
16:19:db:7d:7e:23:2e:23:da:bc:33:f5:02:04:92:
42:56:3d:66:d0:0a:94:68:9f:0e:70:1b:23:1f:82:
8c:85:00:be:a0:2f:aa:87:41:4f:d8:2b:b4:d4:98:
82:4d:27:4d:64:4c:69:2e:b5:9e:8e:c3:a0:0b:87:
f0:c7:f1:3e:f6:6d:47:a1:c3:ad:5c:36:2a:76:74:
55:1a:cd:13:59:02:46:ea:f8:c4:38:27:d7:e6:2b:
25:98:1f:23:55:3c:b7:ef:d5:76:46:e7:a1:fb:0e:
7c:38:eb:6e:1c:eb:9e:64:ec:ee:ad:9a:ff:87:e7:
2c:16:85:0e:c3:41:15:81:1c:7b:e2:b1:83:3e:36:
fa:cb:4e:36:ef:8f:93:c6:13:53:19:78:73:5c:0d:
fe:79:5c:86:68:be:b4:d5:a7:9c:bf:16:2c:32:91:
63:c1:f9:e7:0c:63:df:83:d6:8a:55:9d:6c:e5:09:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:30:AB:22:77:AB:02:FE:A9:50:9D:25:D1:96:D1:89:5D:04:A2
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:96:35:22:1e:81:8a:40:1a:2e:6d:8d:06:17:5b:63:d9:74:
6b:0a:16:cc:31:b1:b9:e5:74:1a:01:61:86:22:2a:fb:4f:83:
5a:d7:5c:9a:ab:82:4b:9e:99:64:69:bc:6c:ac:75:ae:d5:46:
39:05:9a:a2:60:22:33:d0:ce:80:a8:e0:f7:98:d3:bd:a5:5f:
ed:d1:e8:0c:11:c7:76:08:db:0d:32:07:da:07:d4:8d:6d:53:
ad:5c:82:4e:e0:8b:ad:59:90:e0:4f:e2:62:4a:e1:04:a1:fd:
b3:a9:1d:5b:15:aa:ac:b8:b5:01:62:33:45:6f:44:63:d7:24:
cb:a3:2b:b7:f0:d8:fe:5b:a0:ef:c2:8a:59:19:30:cb:6c:ac:
7c:88:13:db:9f:5e:df:0b:bb:32:3c:22:b5:bd:b8:79:cd:cd:
1e:fa:50:bf:5b:63:12:fe:d9:b2:bf:db:83:e3:b0:1b:b3:99:
62:71:6f:7f:03:d9:ca:6f:a1:3e:4f:88:25:06:0c:0a:de:f2:
ad:29:8d:d0:a8:70:5c:1a:13:23:76:aa:4c:e0:e5:5f:cb:dd:
c0:45:1c:ea:60:76:d3:bf:10:66:ed:40:30:df:e2:7d:8e:be:
ef:d4:78:88:d4:6e:76:cc:6e:d0:47:6d:10:aa:1f:f9:62:5a:
d8:27:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:13:05 2025 by rpki-client