This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15c3811b-84bd-4035-bb5d-4cf7f705100a.roa
File:                     15c3811b-84bd-4035-bb5d-4cf7f705100a.roa (raw, json)
Hash identifier:          BmWMaDDztwTyEMlYwTJGgSX3wga0AcP0qMUPvsE2BCk=
Subject key identifier:   CC:77:74:8E:F8:57:4B:3D:B4:8F:31:7A:4E:B9:95:8A:FD:48:09:43
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       617F46447D1038A5F78D8618BA52D22A5E63245F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15c3811b-84bd-4035-bb5d-4cf7f705100a.roa
Signing time:             Wed 14 May 2025 00:40:16 +0000
ROA not before:           Wed 14 May 2025 00:40:16 +0000
ROA not after:            Wed 18 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:90c0::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7f:46:44:7d:10:38:a5:f7:8d:86:18:ba:52:d2:2a:5e:63:24:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 14 00:40:16 2025 GMT
            Not After : Jun 18 23:59:59 2025 GMT
        Subject: serialNumber=ced073244c445c19c9aa67f6305f36b233e98d69dd14fb9ce4933ccb4e054ba2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:1b:10:07:30:e2:6e:a4:fd:c5:f5:28:e9:
                    ac:31:2f:ae:c8:ce:6d:ee:90:dd:5e:0f:1a:62:c7:
                    f6:b3:d4:c3:c7:04:72:b9:cc:96:a0:a1:17:3a:ad:
                    24:e9:55:c1:58:88:cd:46:7d:a3:23:20:a6:74:4b:
                    ce:ba:22:23:5e:0c:f8:45:42:94:cb:ec:b1:10:07:
                    f6:c5:c9:86:79:5f:b9:a7:38:3f:a0:20:af:86:23:
                    59:04:91:4d:90:1c:93:fd:ab:01:90:3c:2e:8a:50:
                    04:10:75:b0:66:5a:96:91:4f:40:36:5e:0b:da:78:
                    71:db:b7:1d:05:e1:da:77:fd:98:ef:5f:c3:c1:31:
                    ad:f6:aa:c8:4a:4a:40:e9:75:98:ee:c9:6c:58:15:
                    37:6b:57:7f:cf:7d:d2:6a:4e:9c:df:cf:9a:0a:70:
                    f9:8d:92:e0:17:88:dc:bd:56:6a:a8:91:d6:1c:51:
                    1d:09:88:04:2c:5d:3f:dd:59:6c:8d:ec:21:77:e1:
                    c1:d3:67:2d:43:9e:c8:55:e0:d2:a4:51:75:c8:c8:
                    b6:ec:5b:e6:cd:51:f9:ec:3b:4d:27:9a:69:78:93:
                    71:2e:0c:5e:31:86:80:00:dc:bb:73:31:06:2c:0f:
                    47:7e:4b:a7:de:9e:2c:df:0c:d7:76:88:7a:c9:b3:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:77:74:8E:F8:57:4B:3D:B4:8F:31:7A:4E:B9:95:8A:FD:48:09:43
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15c3811b-84bd-4035-bb5d-4cf7f705100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:90c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:00:95:56:e6:fc:01:ed:87:31:88:08:26:74:00:7c:40:
         0a:f0:ad:de:a0:a0:a5:7b:ef:85:54:72:2d:bb:77:4f:d0:17:
         b6:3a:bc:eb:9f:1c:25:b3:02:b0:1b:f4:1a:8d:03:b7:f0:82:
         c8:7c:90:2f:ee:37:f5:c1:6e:94:39:86:07:ed:3a:5c:c4:33:
         80:f9:74:38:06:99:5a:24:58:e1:2f:10:db:ca:5f:65:4a:46:
         09:81:52:ea:4f:d0:bd:f7:5e:07:74:ee:54:d3:5c:3d:79:e8:
         48:19:cf:b1:ac:18:77:86:b4:f9:be:e6:82:d7:1e:63:7c:e1:
         96:cc:06:e8:a3:87:5e:a1:e9:fa:18:a7:bd:c2:5b:bc:50:70:
         8e:98:bf:06:4d:74:eb:38:77:f5:ce:94:25:3d:1c:83:d3:17:
         d2:28:0f:69:ec:da:47:14:50:65:45:e4:a0:2c:ee:19:85:d1:
         4c:9e:46:23:7f:41:0c:b1:20:f0:d4:13:68:7a:4b:9f:bc:82:
         09:ba:c2:9c:09:81:4f:56:1a:e0:56:06:12:82:86:07:b1:b2:
         22:ee:30:8b:64:1d:97:7d:20:b5:fc:53:37:2e:49:a6:e4:e9:
         92:70:3e:6e:1e:d8:44:92:9e:10:24:8d:d8:da:92:d0:f4:7f:
         e6:4e:bc:6e
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUYX9GRH0QOKX3jYYYulLSKl5jJF8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDAxNloX
DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAY2VkMDczMjQ0YzQ0NWMxOWM5YWE2
N2Y2MzA1ZjM2YjIzM2U5OGQ2OWRkMTRmYjljZTQ5MzNjY2I0ZTA1NGJhMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TMbEAcw4m6k/cX1KOmsMS+uyM5t
7pDdXg8aYsf2s9TDxwRyucyWoKEXOq0k6VXBWIjNRn2jIyCmdEvOuiIjXgz4RUKU
y+yxEAf2xcmGeV+5pzg/oCCvhiNZBJFNkByT/asBkDwuilAEEHWwZlqWkU9ANl4L
2nhx27cdBeHad/2Y71/DwTGt9qrISkpA6XWY7slsWBU3a1d/z33Sak6c38+aCnD5
jZLgF4jcvVZqqJHWHFEdCYgELF0/3Vlsjewhd+HB02ctQ57IVeDSpFF1yMi27Fvm
zVH57DtNJ5ppeJNxLgxeMYaAANy7czEGLA9Hfkun3p4s3wzXdoh6ybNY8wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFMx3dI74V0s9tI8xek65lYr9SAlDMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzE1YzM4MTFiLTg0YmQtNDAzNS1iYjVkLTRjZjdmNzA1MTAwYS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9JDAMA0GCSqGSIb3DQEBCwUAA4IBAQBn1gCVVub8Ae2HMYgI
JnQAfEAK8K3eoKCle++FVHItu3dP0Be2OrzrnxwlswKwG/QajQO38ILIfJAv7jf1
wW6UOYYH7TpcxDOA+XQ4BplaJFjhLxDbyl9lSkYJgVLqT9C9914HdO5U01w9eehI
Gc+xrBh3hrT5vuaC1x5jfOGWzAboo4deoen6GKe9wlu8UHCOmL8GTXTrOHf1zpQl
PRyD0xfSKA9p7NpHFFBlReSgLO4ZhdFMnkYjf0EMsSDw1BNoekufvIIJusKcCYFP
VhrgVgYSgoYHsbIi7jCLZB2XfSC1/FM3Lkmm5OmScD5uHthEkp4QJI3Y2pLQ9H/m
Trxu
-----END CERTIFICATE-----