This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/173cc917-aed8-4840-82ba-3115e4e87910.roa
File:                     173cc917-aed8-4840-82ba-3115e4e87910.roa (raw, json)
Hash identifier:          VIZtGusJeoomUjE4IPWC3UrD17fNM42FUU8asu2ZvHg=
Subject key identifier:   E2:A8:74:8E:92:C6:75:D5:8E:4D:B9:3B:4F:BC:9D:C3:D3:68:5C:30
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       42D173E98F3098F7A534423FFE116F5E13E6834D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/173cc917-aed8-4840-82ba-3115e4e87910.roa
Signing time:             Wed 04 Feb 2026 23:51:38 +0000
ROA not before:           Wed 04 Feb 2026 23:51:38 +0000
ROA not after:            Tue 05 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2631:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d1:73:e9:8f:30:98:f7:a5:34:42:3f:fe:11:6f:5e:13:e6:83:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb  4 23:51:38 2026 GMT
            Not After : May  5 23:59:59 2026 GMT
        Subject: serialNumber=5b24425acc494c13ba409bec7726fa5ddd8bc9bea89d79318ad600d5d1717f31, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:f1:33:4a:36:ca:15:a5:cd:bf:17:b0:91:
                    47:00:c2:6c:78:48:d2:94:0f:15:4c:b2:70:be:24:
                    84:1b:d5:1f:28:62:1d:ff:0e:f0:9e:ab:a0:52:1c:
                    80:77:73:78:de:0e:b1:0a:1a:8f:d2:7b:31:f5:c7:
                    c7:15:60:58:a6:e3:16:7c:1f:d0:1f:f7:0b:71:4e:
                    8c:14:71:01:23:8c:21:37:b0:7a:c1:ff:f3:d4:37:
                    d8:b4:ae:c2:27:76:3d:87:4a:88:1a:c4:92:b0:bc:
                    5b:55:ea:8d:fa:96:e5:87:5f:3e:83:f7:62:ff:88:
                    60:80:36:a1:21:3b:d9:6b:97:a7:c7:3a:49:0a:fe:
                    90:a4:e9:6f:84:0a:36:51:7b:f1:ce:96:dc:44:72:
                    a9:db:37:db:1c:32:91:fb:7f:f4:4c:2b:66:79:cd:
                    73:18:36:35:8d:1b:1c:a2:a0:a3:be:c1:07:05:62:
                    af:84:4a:24:52:34:a3:05:ac:b6:9d:a0:b6:d1:d7:
                    2c:d0:55:f4:dc:65:a6:18:71:b6:1c:53:40:af:f3:
                    98:bf:45:3b:db:c3:7d:fa:f9:41:53:24:f6:bd:90:
                    07:94:4d:9e:cc:c8:b8:03:b7:a5:e1:4d:46:da:10:
                    e9:54:b4:ae:6c:1a:5e:b7:b7:8e:27:ea:1e:2a:16:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A8:74:8E:92:C6:75:D5:8E:4D:B9:3B:4F:BC:9D:C3:D3:68:5C:30
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/173cc917-aed8-4840-82ba-3115e4e87910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:49:e1:99:a2:54:f2:da:8b:c6:2c:b4:5b:7e:3a:72:08:
         ae:b1:93:26:e1:1b:c6:57:81:84:9e:2d:63:1f:27:3e:01:d0:
         38:77:c7:66:09:79:18:b0:9d:17:98:4a:a3:f1:51:8a:bc:b9:
         d0:48:56:d3:7e:09:8b:05:15:22:a5:34:94:ef:63:e4:e3:33:
         9b:0f:53:22:9c:39:10:c8:d1:4e:0e:c2:31:6e:8b:9f:a7:b0:
         64:06:01:56:02:c4:36:aa:b1:80:57:3a:b1:53:d2:c5:5c:01:
         a5:a1:ef:13:d4:61:24:79:fc:f8:65:b0:2f:87:d6:bb:56:fb:
         7f:78:bc:ee:79:68:29:68:ee:69:5e:9f:c1:b6:a9:29:49:0e:
         df:6e:fb:4a:19:e3:fc:a6:79:db:6f:f8:60:93:a6:8f:f2:ee:
         5c:ea:b3:8a:3b:92:2a:1e:bc:a8:75:76:67:f9:0d:a3:74:69:
         87:61:1d:21:56:91:d3:4d:ae:16:09:43:50:aa:2a:3c:a9:e1:
         b3:a3:96:bd:52:82:96:88:f0:f1:94:94:72:f8:1a:6b:e0:f3:
         92:b3:33:b4:e8:56:40:f1:1d:a3:49:16:e8:5c:9c:56:92:32:
         ff:68:2a:25:51:93:a8:6f:eb:1e:03:a7:5f:25:c5:61:31:00:
         99:18:49:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 16 06:37:06 2026 by rpki-client