This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eda22bad-5a45-42b4-aea0-1d99a9413e75.roa
File:                     eda22bad-5a45-42b4-aea0-1d99a9413e75.roa (raw, json)
Hash identifier:          rUV6wDjLiwQmWMZca4g0v3aSZSYa/Hyr9fuyR9n52bo=
Subject key identifier:   77:F8:96:89:B8:81:85:49:48:07:76:EA:DD:8E:23:AF:6C:26:63:75
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       763CCF7579030ECC079750818734926DFA727F10
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eda22bad-5a45-42b4-aea0-1d99a9413e75.roa
Signing time:             Sun 15 Feb 2026 00:40:53 +0000
ROA not before:           Sun 15 Feb 2026 00:40:53 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        161.188.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3c:cf:75:79:03:0e:cc:07:97:50:81:87:34:92:6d:fa:72:7f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 15 00:40:53 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=8235c3eab2f1e2b1d26ac2822da5897731538ccffa0c4ef6c7d91391b0f4d420, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c5:1e:e8:ed:94:e9:7c:dc:b3:fc:cc:de:06:
                    28:f2:02:fe:9a:b4:c0:39:17:54:ac:c2:80:e9:00:
                    12:c9:83:9f:65:fe:64:20:16:f8:38:d1:c6:96:26:
                    8a:bc:38:2b:53:e7:15:ba:1b:09:d7:03:45:1f:df:
                    b5:ec:0d:1e:47:51:5a:b4:0c:69:e6:f7:3e:dc:8d:
                    8d:1d:a8:14:2d:40:bd:22:6a:04:68:06:0f:af:64:
                    fa:89:b4:0a:28:bc:95:61:0e:dd:5c:fe:76:3c:c4:
                    5e:3a:da:02:3f:89:e5:a1:2a:0a:04:af:f7:1b:23:
                    a8:aa:39:50:24:9a:ec:d1:e3:f4:26:6c:42:e4:f0:
                    44:86:91:20:db:d8:50:6f:f6:90:0c:a5:b4:9e:69:
                    3a:71:ff:09:95:b1:f6:dd:af:fb:29:2e:a0:11:1f:
                    f3:b5:d6:fb:31:c7:3f:61:f4:8d:9f:9a:62:d6:a3:
                    04:cd:b3:a4:b6:03:26:ac:22:a3:17:c5:52:04:f3:
                    0a:c6:80:ea:2c:1b:9d:f3:8c:3a:c5:9c:1f:9c:23:
                    d7:e9:ad:94:28:9e:11:77:5a:46:1c:43:47:60:c2:
                    86:fe:29:c0:31:0c:76:13:01:14:14:a8:e8:8b:82:
                    dc:30:86:2d:f0:94:55:dc:ab:83:8e:b9:74:d8:55:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F8:96:89:B8:81:85:49:48:07:76:EA:DD:8E:23:AF:6C:26:63:75
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eda22bad-5a45-42b4-aea0-1d99a9413e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:41:7f:2c:96:fc:b2:39:ed:4c:a2:73:73:05:ff:6e:02:05:
         76:81:dc:78:d5:95:d6:bc:18:a8:b7:5b:d2:2e:48:93:1c:0f:
         e0:5d:bc:9c:5f:57:c8:b6:24:a8:c0:1d:0c:c7:06:62:3c:40:
         9b:ed:13:00:95:b2:19:45:d1:2c:92:4c:ef:6b:ba:99:e6:58:
         6b:31:38:f7:f6:13:c9:07:9a:00:a1:e3:ed:42:c7:b2:32:8d:
         43:db:4c:f7:93:a7:4e:a9:9b:3d:94:75:4f:7e:fa:a9:41:e3:
         70:b3:6e:95:4d:91:3a:c8:a1:9a:b8:0c:7f:43:01:1a:fe:b7:
         02:1d:8c:9a:cf:9a:86:0d:46:84:46:04:73:b3:d9:76:72:08:
         a6:d9:67:6f:ee:4f:82:97:98:7e:19:3e:1f:f9:42:7c:76:1e:
         a2:22:1b:32:30:5a:48:58:22:f5:80:07:10:8c:48:60:30:b0:
         dc:78:57:c3:bd:14:8b:d2:03:c1:a1:df:10:9a:58:0e:da:18:
         c6:dd:c5:16:ec:b9:19:b3:6e:a5:22:3c:af:b7:5f:a2:bb:5a:
         f9:57:25:f1:d1:bc:60:64:e9:17:4e:47:bf:f4:22:bc:16:bb:
         1a:c3:ef:ca:5a:55:69:3f:83:c9:d2:11:79:f9:a6:1c:9c:7f:
         2a:4b:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:38:28 2026 by rpki-client