This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa
File:                     5496107b-eefe-4905-9cf9-59440b1209c9.roa (raw, json)
Hash identifier:          yTEAQU2CD+0CUm6ZiWAlM9CsDFvUbiefG7UXvXeRhK4=
Subject key identifier:   A5:0D:A9:38:3A:B1:E2:29:C1:9A:C4:03:D0:AB:3B:B9:0D:29:94:1F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       293F3F38683C1689D439216810AC883B8DFD2536
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa
Signing time:             Fri 06 Feb 2026 00:00:07 +0000
ROA not before:           Fri 06 Feb 2026 00:00:07 +0000
ROA not after:            Thu 07 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        43.216.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3f:3f:38:68:3c:16:89:d4:39:21:68:10:ac:88:3b:8d:fd:25:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Feb  6 00:00:07 2026 GMT
            Not After : May  7 23:59:59 2026 GMT
        Subject: serialNumber=1882fc697757f056dacd6d20b1063f265bf8c299088f3907e04cc1cafede3638, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:9c:c9:64:4a:c7:66:d2:c2:ca:4f:72:88:
                    6c:77:98:63:32:bc:af:ca:08:61:c7:21:c9:e9:87:
                    c4:f0:fb:6b:67:d3:b8:10:02:ca:e4:aa:07:21:fa:
                    fb:3f:b9:0f:b3:ce:e5:34:59:70:21:ae:2a:50:ab:
                    b2:e9:0c:a4:e2:52:36:5e:1c:60:05:29:8c:45:2a:
                    58:17:a2:48:d3:16:dc:2b:67:06:01:32:5d:ae:b6:
                    1e:86:93:e8:9e:0a:30:9a:93:3d:26:6d:73:49:1c:
                    17:4f:c7:88:4d:cc:48:de:96:d7:7d:1f:5c:1f:98:
                    08:ac:eb:99:f0:e6:61:eb:a3:b2:33:9c:4d:11:e0:
                    e0:a3:92:c4:da:21:af:19:9d:ec:cb:07:27:f2:45:
                    80:5f:b8:f5:88:85:5c:6c:48:74:35:4e:e5:2c:e6:
                    59:58:5d:c1:63:5d:f0:14:c7:d8:be:05:a6:92:07:
                    67:b6:ee:4d:93:d0:e5:92:d6:f1:c1:ca:d4:1b:73:
                    26:d2:46:53:11:32:6a:e8:36:a8:50:e5:b2:e7:69:
                    1c:e7:65:0d:7b:90:aa:e6:95:37:18:5e:16:c7:3b:
                    a8:09:81:ea:bd:2f:e9:9d:92:54:3d:8d:c3:73:70:
                    3b:ce:00:f9:54:15:5e:d4:14:e0:ef:f0:a0:eb:4d:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0D:A9:38:3A:B1:E2:29:C1:9A:C4:03:D0:AB:3B:B9:0D:29:94:1F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.216.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:cd:68:e4:2e:f8:6d:76:2a:4f:25:bb:b1:e0:94:cb:4e:02:
         5b:55:47:f8:c8:46:c5:2f:db:84:9a:d6:29:de:13:16:05:41:
         44:de:a7:aa:bc:82:8b:f1:67:a8:c9:5d:b0:89:ed:a7:8f:4f:
         63:a2:c5:26:c3:69:c0:99:c1:86:0c:8d:f9:16:f6:37:46:ed:
         2e:87:98:fe:fe:e7:80:01:1a:2e:af:4e:fe:cb:fe:ee:08:be:
         3d:52:65:37:a4:8c:90:9c:d4:b8:85:99:d0:8d:79:91:de:c8:
         35:d8:93:c1:33:c6:21:ce:94:2f:1d:21:29:ca:5f:0e:84:9f:
         30:10:75:b9:f7:88:8a:3e:60:16:fc:68:9f:e6:7a:47:52:6f:
         9a:89:d6:fb:d3:57:73:4b:73:96:4f:17:1f:47:1d:63:94:5b:
         d2:30:4f:f2:d2:c6:8c:8f:4f:ba:96:fa:df:c9:06:72:e9:88:
         22:b0:02:e4:1e:5e:d7:da:bb:4c:00:98:52:87:50:c1:8a:0a:
         78:65:cf:66:b9:1a:9b:d0:39:aa:9f:11:bd:9c:e8:91:38:fa:
         e1:26:ae:a9:f3:af:54:71:fe:9e:70:d7:83:67:e4:70:b4:e7:
         2b:23:ce:3c:f4:c0:8c:75:39:b5:c8:27:a3:e7:0a:71:67:71:
         fa:8c:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:41:25 2026 by rpki-client