This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8091f507-30cd-45c2-84c0-4a15fac75888.roa
File:                     8091f507-30cd-45c2-84c0-4a15fac75888.roa (raw, json)
Hash identifier:          aMbasNbzgOnaAz0+gc/tSeGIu7sEpvG3O1yaaklL7c8=
Subject key identifier:   33:0E:D0:09:A5:BA:AA:86:E6:47:D5:51:F6:FD:63:A3:50:DA:A3:62
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       7CDF031612B7C3F38C062E02035B112B2475E109
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8091f507-30cd-45c2-84c0-4a15fac75888.roa
Signing time:             Fri 13 Feb 2026 14:21:09 +0000
ROA not before:           Fri 13 Feb 2026 14:21:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        15.197.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:df:03:16:12:b7:c3:f3:8c:06:2e:02:03:5b:11:2b:24:75:e1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 13 14:21:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=053dd7556c0d8471c70ea86a1fe24cdf21e4236e7de5069771067430e353a204, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:45:5d:54:6b:d8:c0:24:87:c8:24:06:ac:
                    65:50:10:27:8b:fb:72:cf:b2:58:64:5f:5c:c8:63:
                    3e:fb:ee:01:ef:11:c1:46:6f:42:c8:b2:2f:d8:2b:
                    50:ca:33:1f:39:25:58:ba:e9:f9:0c:2a:b1:21:78:
                    1e:28:4d:d0:e5:a5:e6:3c:e9:5b:17:af:dc:b6:8c:
                    59:b8:c2:65:f2:80:a4:39:52:90:00:2f:ef:8a:fd:
                    d7:20:60:ae:54:b5:28:0e:2e:cc:e1:79:fa:19:2a:
                    47:04:e0:1d:11:fa:35:98:7a:aa:33:82:f4:8a:9e:
                    5d:5b:8c:38:a3:34:82:83:46:9e:99:a4:30:05:d6:
                    08:01:1e:15:c0:3c:b4:a5:81:e6:fb:ff:1d:46:58:
                    62:ba:70:ee:c2:cf:b1:ec:fc:04:6a:4f:7b:1e:db:
                    be:d8:4e:99:49:b5:d9:1c:a7:a8:5f:0a:39:10:7a:
                    45:4c:1b:5a:84:a4:c3:16:42:e8:fa:fe:c0:88:bb:
                    1f:ec:51:5f:f5:f2:94:23:d1:ba:ff:eb:cf:c7:ff:
                    7a:bc:77:36:31:2e:a6:1d:4b:0f:d3:27:f2:39:9a:
                    25:07:00:d8:62:4c:d9:33:85:79:53:fc:49:76:37:
                    88:f4:43:a4:cd:f6:40:64:08:41:72:77:42:8f:d1:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:D0:09:A5:BA:AA:86:E6:47:D5:51:F6:FD:63:A3:50:DA:A3:62
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8091f507-30cd-45c2-84c0-4a15fac75888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:93:b8:bb:68:75:26:ad:55:b3:c2:4a:eb:93:e1:25:d8:87:
         1f:d2:80:ed:3a:4d:92:a7:85:c0:10:15:02:3f:fb:d9:f1:fb:
         c4:f1:8b:ec:24:c5:71:59:17:cc:c1:bf:b8:93:ce:a1:70:c5:
         d5:7c:5b:e2:9c:59:54:35:5a:f7:6b:b3:e4:3a:4d:85:1e:4c:
         26:ac:eb:07:ac:c8:df:de:aa:a4:97:60:7b:d0:eb:67:da:f2:
         69:f4:98:bd:0e:20:1e:64:d2:69:91:d1:0c:f1:51:b2:d5:6b:
         19:3a:a5:e3:a3:91:d9:a3:37:5f:b5:3e:66:ce:9f:dd:5e:ea:
         89:50:07:2e:c4:aa:9b:a3:82:2b:16:7d:2b:23:aa:6a:10:7e:
         c3:ad:25:e9:45:f2:39:04:e8:5d:2d:12:3e:46:55:e5:97:7e:
         0a:0f:52:62:bd:49:86:7f:6e:a8:3a:37:2f:93:a5:a8:50:8b:
         cd:a3:9c:18:91:82:71:0c:e9:03:b0:62:a4:36:e7:1d:ba:53:
         2c:4d:22:b7:f7:db:48:d2:06:6c:6e:cc:7b:80:ac:d3:e4:b7:
         c4:a1:59:92:53:07:52:4d:cb:b4:8b:a5:c0:8a:69:f0:b5:42:
         0c:70:ae:54:bc:15:89:60:a4:f7:e9:bd:9e:35:1b:35:3b:2d:
         97:6c:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:06:27 2026 by rpki-client