This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/390a5b6d-7c87-49c0-b0f0-f00ab5e18a42.roa
File:                     390a5b6d-7c87-49c0-b0f0-f00ab5e18a42.roa (raw, json)
Hash identifier:          gYs8DHj69N6bvJrzEQHh9QJwHDWIwvrmVHG0CH0tYSY=
Subject key identifier:   8E:6D:DC:28:B8:60:08:94:FF:EB:18:7B:5B:6E:59:A0:01:C1:B1:97
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       227EB6E802EE96CD1206B776B7FB4BAF3D58C9B1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/390a5b6d-7c87-49c0-b0f0-f00ab5e18a42.roa
Signing time:             Mon 16 Feb 2026 08:10:36 +0000
ROA not before:           Mon 16 Feb 2026 08:10:36 +0000
ROA not after:            Sun 17 May 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Mon 16 Feb 2026 09:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7e:b6:e8:02:ee:96:cd:12:06:b7:76:b7:fb:4b:af:3d:58:c9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 16 08:10:36 2026 GMT
            Not After : May 17 23:59:59 2026 GMT
        Subject: serialNumber=8129bfd2b4b61f3888714e4fe00134c211e91be43b95a7c7149b764b109abc81, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:9e:86:80:2e:55:d9:fb:4f:52:77:0f:a6:
                    fe:11:86:9f:c7:b4:df:dd:7b:99:58:2f:a8:37:a8:
                    cb:ee:8a:84:28:47:3c:b3:43:04:b1:ff:a0:23:7c:
                    f2:d8:7b:32:f0:d6:38:67:86:21:c3:1c:29:c8:87:
                    f4:b7:79:9f:6f:13:fb:62:9b:b7:68:82:c5:1f:36:
                    b0:40:2e:8c:d7:84:25:57:a1:67:2f:af:2f:19:39:
                    94:1a:76:71:43:59:f4:19:52:a5:21:3d:fc:9e:7c:
                    f9:8a:79:76:80:a3:d5:6b:38:f7:ef:a8:44:91:63:
                    54:3e:67:31:8a:8e:0b:7a:96:53:14:49:eb:a7:38:
                    9c:d8:2e:22:c8:70:5b:8a:14:fa:53:d5:b5:53:6a:
                    36:5c:bd:74:38:30:9e:e7:4f:d5:9a:49:b3:70:21:
                    79:24:4a:c4:e9:59:bb:59:84:67:a4:92:37:8a:eb:
                    a7:2e:09:7f:4a:ea:5b:c7:e6:c7:61:81:c5:da:8e:
                    6b:69:ef:cf:3e:7c:5c:62:22:cb:0b:5c:3e:99:70:
                    3a:4a:5b:dd:e2:41:1e:a8:93:d8:97:7f:6e:4a:66:
                    e9:02:ba:43:ea:a3:17:d0:02:07:12:49:db:18:64:
                    fd:c2:a6:e1:1f:f4:eb:77:21:c3:0d:fb:6d:12:17:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6D:DC:28:B8:60:08:94:FF:EB:18:7B:5B:6E:59:A0:01:C1:B1:97
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/390a5b6d-7c87-49c0-b0f0-f00ab5e18a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:42:a1:c5:cf:2d:79:89:56:8d:a6:0f:90:7e:fe:e4:4d:3a:
         60:5a:e7:c9:91:04:98:ed:69:a1:9c:c9:84:fe:24:15:ad:7d:
         f9:5c:18:62:1c:f5:c4:52:b3:d4:86:66:2f:28:47:c6:e3:71:
         c5:27:fc:25:b6:e7:e6:e9:19:da:77:51:7c:fe:b7:dd:d6:fc:
         0e:f3:93:57:a8:82:ee:65:2e:be:f9:69:e7:3f:b4:a1:96:2f:
         f3:cf:c0:24:4d:8d:70:91:d5:04:cf:21:c0:47:cd:91:e2:10:
         3e:27:81:bb:87:ab:a3:4e:f4:b6:78:28:90:53:14:47:9e:c6:
         8b:cd:2f:dd:8b:b7:fc:e6:f2:69:95:c7:f8:6b:c8:cd:01:79:
         f2:e7:0e:bb:0a:41:68:59:50:e0:c6:4a:c7:ea:e0:7f:82:18:
         b1:34:72:90:6e:c1:8e:c7:90:ea:71:a4:eb:8b:85:67:48:72:
         b0:3a:66:ee:69:a2:43:1e:66:f1:7b:9d:b8:6b:1e:cd:e2:40:
         6f:e7:59:d3:12:89:6d:ac:98:8f:6f:72:e2:64:2a:88:e1:78:
         38:64:ad:e5:28:b3:64:36:d9:3b:9d:a3:d5:6d:ac:f8:c7:ad:
         db:43:0a:38:5f:ea:aa:f0:a4:e2:e6:20:3d:87:e1:f3:08:fc:
         69:82:ed:a3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUIn626ALuls0SBrd2t/tLrz1YybEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjE2MDgxMDM2WhcNMjYwNTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MTI5YmZkMmI0YjYxZjM4ODg3MTRlNGZlMDAxMzRjMjEx
ZTkxYmU0M2I5NWE3YzcxNDliNzY0YjEwOWFiYzgxMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDA956GgC5V2ftPUncPpv4Rhp/HtN/de5lYL6g3qMvuioQo
RzyzQwSx/6AjfPLYezLw1jhnhiHDHCnIh/S3eZ9vE/tim7dogsUfNrBALozXhCVX
oWcvry8ZOZQadnFDWfQZUqUhPfyefPmKeXaAo9VrOPfvqESRY1Q+ZzGKjgt6llMU
SeunOJzYLiLIcFuKFPpT1bVTajZcvXQ4MJ7nT9WaSbNwIXkkSsTpWbtZhGekkjeK
66cuCX9K6lvH5sdhgcXajmtp788+fFxiIssLXD6ZcDpKW93iQR6ok9iXf25KZukC
ukPqoxfQAgcSSdsYZP3CpuEf9Ot3IcMN+20SF5YXAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUjm3cKLhgCJT/6xh7W25ZoAHBsZcwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzM5MGE1YjZkLTdjODctNDljMC1iMGYwLWYwMGFiNWUxOGE0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEApUKhxc8teYlWjaYPkH7+5E06
YFrnyZEEmO1poZzJhP4kFa19+VwYYhz1xFKz1IZmLyhHxuNxxSf8Jbbn5ukZ2ndR
fP633db8DvOTV6iC7mUuvvlp5z+0oZYv88/AJE2NcJHVBM8hwEfNkeIQPieBu4er
o070tngokFMUR57Gi80v3Yu3/ObyaZXH+GvIzQF58ucOuwpBaFlQ4MZKx+rgf4IY
sTRykG7BjseQ6nGk64uFZ0hysDpm7mmiQx5m8XuduGsezeJAb+dZ0xKJbayYj29y
4mQqiOF4OGSt5SizZDbZO52j1W2s+Met20MKOF/qqvCk4uYgPYfh8wj8aYLtow==
-----END CERTIFICATE-----