This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa
File:                     6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa (raw, json)
Hash identifier:          inpEzBsp4zHmvNdjc9GanQVhM5/Pea1/r20ehctdbW8=
Subject key identifier:   9F:92:76:DA:7D:96:52:86:9E:5E:05:FD:93:82:2A:94:5C:75:8D:CF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7EC4A0E4F27D1446C6C0549E47471B67FDD40EBA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa
Signing time:             Tue 13 Jan 2026 20:08:35 +0000
ROA not before:           Tue 13 Jan 2026 20:08:35 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daeb:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 20:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:a0:e4:f2:7d:14:46:c6:c0:54:9e:47:47:1b:67:fd:d4:0e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 20:08:35 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=8c93eefed02929104e85bc2c481da41dd4002ac3fcf4dbe852c8913f8e08ffb5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:a0:f7:58:ad:2c:a3:90:63:8f:cf:c2:ad:
                    e0:0a:c3:99:8f:80:35:69:78:db:bd:45:ea:79:1a:
                    57:10:3a:4d:f6:c7:32:12:4b:18:17:09:75:44:cf:
                    13:86:9c:3e:11:a3:2f:86:3d:12:90:fb:34:4e:58:
                    e0:b2:af:90:30:ba:a7:47:09:89:55:34:33:1e:df:
                    13:d5:1c:f6:c0:6c:dc:dd:e2:15:ec:a8:0c:d5:e9:
                    ed:9d:f0:de:bd:80:e1:20:79:83:10:a9:c4:5f:4f:
                    16:3a:c7:2f:b1:2b:d4:cd:b7:be:cb:29:ab:87:11:
                    1d:e0:9f:ae:4b:3f:79:59:97:bb:4a:5d:89:38:00:
                    9a:e7:38:00:94:0a:65:86:e5:98:5c:41:e0:70:e7:
                    fb:20:f3:d9:17:44:76:bb:e7:91:d7:0d:56:89:31:
                    0d:f9:ce:a6:32:69:ae:91:8e:d7:eb:b0:45:53:73:
                    2c:8c:9c:d2:70:f7:04:01:66:46:ec:ee:58:89:64:
                    ef:2b:97:5e:24:4b:34:58:83:d1:d0:d0:65:a6:85:
                    6d:69:e1:65:64:f9:d8:79:76:f6:b7:6a:84:df:fb:
                    97:36:7d:0b:55:38:ea:5a:74:3b:01:30:b6:08:1d:
                    ff:fc:87:9d:e9:99:60:ef:be:f4:ab:4f:88:17:60:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:92:76:DA:7D:96:52:86:9E:5E:05:FD:93:82:2A:94:5C:75:8D:CF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b917cdc-cbf7-4fc0-8407-db80743f3e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daeb:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:79:9e:9e:33:38:c4:05:e8:4a:e2:9a:6b:41:eb:4e:05:95:
         28:1c:5d:5f:94:8a:dd:34:75:31:89:7b:20:e0:3a:27:a6:a8:
         74:a3:a7:cf:f5:1c:b3:ab:f2:83:48:c9:29:de:44:4e:4d:b4:
         2e:9c:81:14:ce:f8:72:24:50:9a:36:b4:cf:28:f7:5c:85:b6:
         f6:20:8e:18:9a:38:55:ba:df:70:77:ec:08:64:7d:24:04:bc:
         ff:86:f3:2d:d9:f3:97:59:e3:4d:08:98:8f:cc:4d:bf:33:b9:
         21:86:fe:e5:9c:3a:66:0a:f3:03:55:84:c2:cb:60:7a:a4:85:
         8b:2a:e1:fa:03:2b:27:c9:61:e1:80:2f:07:ac:84:ef:5b:bd:
         dd:e2:d5:73:4c:af:dd:5a:29:4d:a6:b8:02:b8:a3:25:08:31:
         44:18:f1:59:8a:e4:1a:57:64:82:4a:58:2f:51:34:a9:8c:4d:
         17:2b:d9:8f:23:d1:20:89:d1:66:a4:91:de:8b:ec:9b:00:8c:
         a2:70:0c:c1:45:d2:e3:bc:d2:52:25:64:c0:36:9d:51:3e:62:
         77:e8:95:05:80:5e:7e:12:5d:24:c6:28:8c:be:9f:d2:90:57:
         b3:4a:7b:d4:4a:8a:8e:4c:24:06:b1:cd:25:0a:34:ae:7e:a4:
         35:d7:91:ce
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUfsSg5PJ9FEbGwFSeR0cbZ/3UDrowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDExMzIwMDgzNVoX
DTI2MDQxMzIzNTk1OVowejFJMEcGA1UEBRNAOGM5M2VlZmVkMDI5MjkxMDRlODVi
YzJjNDgxZGE0MWRkNDAwMmFjM2ZjZjRkYmU4NTJjODkxM2Y4ZTA4ZmZiNTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaag91itLKOQY4/Pwq3gCsOZj4A1
aXjbvUXqeRpXEDpN9scyEksYFwl1RM8Thpw+EaMvhj0SkPs0Tljgsq+QMLqnRwmJ
VTQzHt8T1Rz2wGzc3eIV7KgM1entnfDevYDhIHmDEKnEX08WOscvsSvUzbe+yymr
hxEd4J+uSz95WZe7Sl2JOACa5zgAlAplhuWYXEHgcOf7IPPZF0R2u+eR1w1WiTEN
+c6mMmmukY7X67BFU3MsjJzScPcEAWZG7O5YiWTvK5deJEs0WIPR0NBlpoVtaeFl
ZPnYeXb2t2qE3/uXNn0LVTjqWnQ7ATC2CB3//Ied6Zlg7770q0+IF2BwlwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFJ+Sdtp9llKGnl4F/ZOCKpRcdY3PMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzZiOTE3Y2RjLWNiZjctNGZjMC04NDA3LWRiODA3NDNmM2UzOC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba6xCAMA0GCSqGSIb3DQEBCwUAA4IBAQCheZ6eMzjEBehK4ppr
QetOBZUoHF1flIrdNHUxiXsg4Donpqh0o6fP9Ryzq/KDSMkp3kROTbQunIEUzvhy
JFCaNrTPKPdchbb2II4YmjhVut9wd+wIZH0kBLz/hvMt2fOXWeNNCJiPzE2/M7kh
hv7lnDpmCvMDVYTCy2B6pIWLKuH6AysnyWHhgC8HrITvW73d4tVzTK/dWilNprgC
uKMlCDFEGPFZiuQaV2SCSlgvUTSpjE0XK9mPI9EgidFmpJHei+ybAIyicAzBRdLj
vNJSJWTANp1RPmJ36JUFgF5+El0kxiiMvp/SkFezSnvUSoqOTCQGsc0lCjSufqQ1
15HO
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:17 2026 by rpki-client