This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e781105a-ae32-4758-8a74-1bd76214d9fa.roa
File:                     e781105a-ae32-4758-8a74-1bd76214d9fa.roa (raw, json)
Hash identifier:          8+j35iFH1A08KzvHN0f5bJp807YaJZMKU7UALGigl8E=
Subject key identifier:   96:C6:E0:77:12:35:23:3A:6E:3D:F7:3C:0A:2B:D5:4A:AF:C2:92:63
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       27C2ECDA94D2F125564A7483CF7505FFDB0879BD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e781105a-ae32-4758-8a74-1bd76214d9fa.roa
Signing time:             Tue 13 Jan 2026 20:10:37 +0000
ROA not before:           Tue 13 Jan 2026 20:10:37 +0000
ROA not after:            Mon 13 Apr 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daeb:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 20:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c2:ec:da:94:d2:f1:25:56:4a:74:83:cf:75:05:ff:db:08:79:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 20:10:37 2026 GMT
            Not After : Apr 13 23:59:59 2026 GMT
        Subject: serialNumber=df8a40b4246308861ca6557a28d573825cb851080ae1359e8dfd16401b3caa2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:89:27:43:e6:fa:e8:93:2d:cd:7b:4a:f2:
                    e7:fb:26:8e:33:6e:89:e2:c9:22:4e:3f:cb:2f:b2:
                    a1:69:f6:8d:2e:53:30:56:e8:f3:ff:2a:f8:70:f6:
                    53:05:b6:f7:d8:d8:dc:93:3a:e2:28:5d:20:40:08:
                    c1:a3:7f:2d:4e:4c:cc:b0:54:e7:15:f8:e5:c3:55:
                    6d:e4:d7:ca:26:6c:af:02:61:e1:6e:0a:42:19:c7:
                    a7:81:96:ce:d1:98:e4:20:7f:f4:62:57:8b:b3:53:
                    73:e2:fd:b0:3b:60:84:6a:22:2e:dd:f3:ac:9e:46:
                    49:62:60:2d:6b:bc:dc:a0:09:01:f3:e4:0d:99:07:
                    b9:13:49:2c:cb:cd:e3:74:34:eb:8b:d1:1e:0d:76:
                    89:fc:0a:04:a0:f6:e9:d9:e5:b3:a1:5b:e0:ac:8f:
                    4f:a4:bf:60:85:eb:51:3e:c4:a5:c3:dc:5a:c2:b8:
                    7e:2a:46:c1:f4:37:d6:35:88:eb:97:12:e0:c1:aa:
                    3c:e4:0f:b2:d7:8f:9b:b8:92:7e:00:3a:7c:52:20:
                    1a:73:50:4c:d4:7f:65:7d:1c:c3:e9:c2:42:37:0e:
                    1e:be:8c:5d:5c:66:9d:ea:91:0a:5f:5f:19:44:26:
                    70:9f:11:8c:ea:b2:eb:5a:63:d5:88:41:4c:69:78:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:E0:77:12:35:23:3A:6E:3D:F7:3C:0A:2B:D5:4A:AF:C2:92:63
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e781105a-ae32-4758-8a74-1bd76214d9fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daeb:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:8e:cf:94:ed:a6:73:4e:93:98:66:c9:e9:34:15:fd:2f:d9:
         fc:c6:50:a6:85:bc:33:25:7d:a7:4b:3b:27:80:ce:2b:8a:e6:
         8b:5b:86:96:47:66:4d:24:82:39:1f:46:37:76:1e:40:cd:4a:
         19:05:c7:a1:f9:c7:a3:a2:bc:ba:02:7b:ae:c9:e6:9d:83:ca:
         f4:11:e0:b6:71:04:53:bc:33:ce:bc:94:9f:a7:0b:b4:7d:68:
         36:2f:ad:32:c2:57:41:6e:55:24:3b:55:cd:55:83:89:40:05:
         99:68:89:ef:c5:3b:88:b9:65:8e:8d:a1:17:0e:9d:ba:19:24:
         c1:56:ad:d4:51:eb:63:72:f4:27:13:aa:b2:92:3c:ec:1a:52:
         c6:40:04:95:a9:86:0a:bb:4c:d9:dd:ec:01:b3:01:f4:41:bc:
         6b:24:64:b5:0b:bc:30:1e:5e:c5:96:ce:54:09:17:ff:67:fb:
         f6:a8:f4:ba:07:6c:3a:ee:cc:1f:4b:ce:74:ef:dd:69:bf:13:
         dd:05:1a:7b:13:48:bd:ca:80:c9:60:cf:77:09:75:fc:08:7d:
         c9:8f:00:db:d5:fe:73:94:f0:15:95:06:a4:bf:6a:27:75:68:
         09:99:cb:c6:ef:63:f3:7a:46:e9:94:3e:c2:46:d6:8a:03:02:
         49:5b:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:44:10 2026 by rpki-client