This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa
File:                     c18b0845-fc95-41d6-b476-af4e1e466849.roa (raw, json)
Hash identifier:          ntuPLViiaJGatIFvogVdq5Wl8TdNZ2/N5+5/fg06tSQ=
Subject key identifier:   24:33:FE:9A:A5:D3:BE:DE:73:52:3E:EB:EC:13:BB:F9:C2:11:BF:DD
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       50FE80CF7723E98C5A028B599E9DD888BF67CA26
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa
Signing time:             Wed 11 Feb 2026 00:10:28 +0000
ROA not before:           Wed 11 Feb 2026 00:10:28 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        159.248.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Feb 2026 20:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fe:80:cf:77:23:e9:8c:5a:02:8b:59:9e:9d:d8:88:bf:67:ca:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: Feb 11 00:10:28 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=f820540489868461e2e80625f23926aa08f2f0f55a02927c07c1658a5b0df6a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:6a:44:37:f1:2e:de:64:6c:c7:85:f4:1e:
                    6c:81:fc:87:34:18:cb:a0:fd:33:de:04:3c:94:f7:
                    19:c7:c1:cd:2f:86:5f:1d:67:d3:7d:ba:82:79:96:
                    07:8b:8d:07:87:83:bb:34:08:83:64:5e:d5:67:8c:
                    63:4d:a9:9a:47:ae:1e:c9:b0:c7:96:0f:ea:ac:04:
                    55:50:ed:10:16:90:df:47:d3:14:b4:54:cd:81:11:
                    f1:47:67:2b:32:16:ad:06:0b:1d:d6:1c:a6:e8:d6:
                    ad:1d:52:16:93:22:90:ea:68:42:f9:41:0f:11:44:
                    8e:08:db:5e:7f:57:37:3c:cf:ae:a6:50:c2:8c:dd:
                    d4:83:1b:1f:72:64:5d:ca:06:a9:fa:86:c2:9a:54:
                    a1:eb:5e:70:94:4b:04:a8:35:02:08:60:6f:f3:44:
                    03:0b:d5:56:77:ea:bc:c7:3a:19:21:34:61:90:99:
                    90:87:16:e5:c8:7d:49:46:66:6a:ee:2d:98:6e:1f:
                    0f:cc:7a:f2:f8:2e:76:92:70:6a:15:e1:a6:32:75:
                    b7:31:d1:ba:e3:97:f9:c5:22:90:2c:13:ac:d6:e0:
                    e5:e1:fb:4d:23:75:90:5f:3a:aa:e6:7a:99:82:22:
                    58:ab:1d:a3:85:5c:4f:a9:20:23:dd:6e:3e:ba:31:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:33:FE:9A:A5:D3:BE:DE:73:52:3E:EB:EC:13:BB:F9:C2:11:BF:DD
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.248.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:51:31:68:ed:da:03:fa:ca:14:32:6b:8b:a0:a3:a1:21:66:
         c9:12:c9:3f:59:f3:81:ea:60:ff:70:b1:a0:84:b2:16:53:fb:
         80:ee:e0:da:56:1a:21:9c:2c:d8:09:7f:e3:78:e5:9d:07:57:
         7a:01:d6:40:72:a3:74:09:bc:2d:ee:b4:b1:0e:0c:01:69:05:
         9f:42:71:7c:88:c3:ac:70:66:22:14:0f:72:18:12:3e:33:a5:
         7e:29:76:38:62:fa:1d:11:31:19:c7:5b:4d:60:c9:b9:42:2a:
         93:c9:b4:ee:3c:c7:15:0b:b0:0b:7b:f9:d9:e1:b8:46:2a:57:
         12:d9:0d:0a:8e:6a:3a:e5:18:9d:c2:11:c3:cd:78:cc:05:98:
         74:d4:40:a8:62:78:84:3a:d6:23:ed:6a:ae:e7:5a:c1:c9:98:
         22:a1:a1:da:6e:1c:8d:c8:cd:8a:ec:02:3b:bb:af:24:80:01:
         41:30:ad:a3:48:80:17:44:47:34:5b:fe:d6:97:16:ec:a7:3f:
         27:02:71:e0:8f:a6:2f:14:af:59:0b:f7:27:a5:39:ea:36:6d:
         95:b2:b2:3f:86:72:16:b7:a2:c7:09:4d:c2:04:67:fb:44:34:
         52:b9:17:b1:c1:2d:56:69:ae:1d:dd:8a:88:99:84:72:c8:2d:
         f3:f9:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:41:13 2026 by rpki-client