This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d1bb655c-a8e7-45df-b68b-dee5e85234ac.roa
File:                     d1bb655c-a8e7-45df-b68b-dee5e85234ac.roa (raw, json)
Hash identifier:          ZqBIOsusSf/t+ysFJxHm6BmrbQS/0Gh/nJMuJ9zuOnk=
Subject key identifier:   D4:B6:20:3E:82:38:99:AB:86:04:BA:80:8E:A3:A7:7D:B5:AB:57:50
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4D01EBC04687B42DCD33ABA1ECCFCBD6ACA77175
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d1bb655c-a8e7-45df-b68b-dee5e85234ac.roa
Signing time:             Thu 25 Dec 2025 02:11:31 +0000
ROA not before:           Thu 25 Dec 2025 02:11:31 +0000
ROA not after:            Wed 25 Mar 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Thu 25 Dec 2025 03:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:01:eb:c0:46:87:b4:2d:cd:33:ab:a1:ec:cf:cb:d6:ac:a7:71:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Dec 25 02:11:31 2025 GMT
            Not After : Mar 25 23:59:59 2026 GMT
        Subject: serialNumber=c93bd1dd5d7a7c8e9cfdd7f2df6a391b964d06f8b388ac352f47b01ecdb2bf63, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:6e:fd:64:c3:3c:61:6c:e3:68:4d:31:d7:
                    a6:c6:9d:44:8c:d1:da:f6:f8:ce:22:81:16:5c:c5:
                    3a:96:e8:e1:ac:ea:cf:30:bb:56:fb:34:94:b1:f5:
                    6c:d9:aa:c9:bf:47:33:15:40:0d:9e:0e:56:f0:c1:
                    2d:04:bb:b5:98:44:41:46:43:9c:f4:a6:ff:78:fb:
                    cf:dd:b7:69:5d:c6:95:8d:9f:0b:bd:ed:ef:01:25:
                    85:f6:b0:7f:62:d6:5d:ce:66:ec:01:ef:f4:1e:af:
                    8c:f9:22:04:e0:51:ea:b0:ee:7a:a1:78:86:2d:8b:
                    ff:c9:45:d4:af:76:09:02:13:9d:89:3e:c7:1b:3c:
                    ab:03:a9:ac:13:05:81:fc:2f:7b:d9:67:3c:8d:4e:
                    e0:18:31:ca:c5:c8:bb:ea:78:ec:e1:f8:af:21:6c:
                    10:b2:1d:8c:aa:06:05:7e:a1:d3:3d:e5:fa:2e:d2:
                    6f:25:43:a6:6f:69:98:bb:60:a5:36:4b:c4:ae:2b:
                    04:d2:9a:8a:e6:6e:5e:06:34:6e:89:af:0e:55:09:
                    1b:c7:00:11:c0:e7:07:4b:05:94:c7:13:1d:b4:bf:
                    77:28:d7:26:03:05:2a:83:dd:99:c0:5a:5c:22:8e:
                    3c:0e:1b:e2:29:dd:6c:d4:f7:9d:ca:82:26:69:f9:
                    7f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:20:3E:82:38:99:AB:86:04:BA:80:8E:A3:A7:7D:B5:AB:57:50
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d1bb655c-a8e7-45df-b68b-dee5e85234ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:09:dd:eb:a4:78:f0:1d:5c:2b:3f:98:a8:c7:02:c0:95:61:
         af:61:e6:64:47:bd:cd:49:27:c1:a3:bf:b8:06:70:c5:80:6a:
         03:01:2f:d5:5e:25:80:a5:7e:31:78:e2:7b:5c:e2:f8:10:4a:
         90:ba:e4:e3:d2:e1:54:a1:83:56:b4:76:3d:b1:d4:42:9c:f1:
         5f:ae:c4:6c:e1:29:37:32:89:de:62:9a:15:71:cd:36:52:48:
         e9:10:00:6a:95:73:bc:8f:63:fe:c3:7d:d0:b6:69:3e:29:e9:
         60:e6:f0:31:2a:c0:1d:e6:a6:ca:57:93:c4:cb:2c:79:77:30:
         ff:67:7f:9f:de:33:dd:74:aa:f2:34:b8:ba:07:25:c6:de:ee:
         2b:ff:0b:f5:80:ee:3b:4a:6a:5a:30:73:e8:0e:93:e1:f1:5d:
         1c:bd:bd:f4:54:f8:fb:45:fa:fb:75:8f:89:04:9c:ed:8d:3b:
         e3:57:32:08:69:06:13:a6:83:92:85:aa:8d:e0:aa:f6:30:0b:
         a0:e7:f2:f7:63:93:82:4b:d0:4a:3f:58:38:90:dc:5c:3a:32:
         66:be:fd:0a:26:60:72:86:32:28:36:00:ce:7a:ae:7a:0f:bc:
         fe:8c:e1:0a:68:a1:d5:ba:37:b1:1d:12:17:f0:9d:63:78:a8:
         6f:e9:d5:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----