This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9195a704-de86-4692-95c9-30d458a106d5.roa
File:                     9195a704-de86-4692-95c9-30d458a106d5.roa (raw, json)
Hash identifier:          6HR+cxl5MbRfSfZ9nH9WY6pC9IOKWPeap3Pw+Oc1Utc=
Subject key identifier:   9E:6B:23:AF:34:4F:2C:DB:17:3C:32:86:C5:7F:50:57:69:34:5F:03
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       24C8E916AFA287972D289D76F2A5D4369DE37048
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9195a704-de86-4692-95c9-30d458a106d5.roa
Signing time:             Fri 24 Oct 2025 00:30:31 +0000
ROA not before:           Fri 24 Oct 2025 00:30:31 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc1:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c8:e9:16:af:a2:87:97:2d:28:9d:76:f2:a5:d4:36:9d:e3:70:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Oct 24 00:30:31 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=6a99810609ccb2b46c1b8e66967acc84da2a2f77b53fcb49af18262c32799fc1, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:04:b0:5c:f4:a6:ae:09:36:e7:a7:cf:56:
                    bf:2c:3e:bf:a3:cd:44:6a:17:a7:90:8d:03:d6:84:
                    61:34:11:f1:fd:2d:82:08:7c:62:13:fd:be:e3:a1:
                    1b:19:36:15:70:b7:7f:77:24:cc:10:90:62:4b:bc:
                    cb:6c:a1:91:ec:49:d7:ed:7f:bb:38:df:39:27:4e:
                    9a:df:9e:e6:d4:e8:35:70:39:d5:8e:c7:5c:f7:a4:
                    8e:7c:85:16:87:46:26:73:67:7a:60:d0:95:b3:aa:
                    18:e0:ca:ef:38:fe:68:b8:5f:d0:fc:d6:e5:1b:15:
                    43:04:0a:ab:b9:a1:dc:19:09:bf:81:94:ef:3a:8a:
                    e9:a3:c7:1d:73:2b:ca:c0:ed:05:7b:64:93:73:a9:
                    4b:37:89:b1:53:61:e1:aa:14:e8:47:96:fe:57:19:
                    d4:72:6e:42:65:d3:c5:d2:2a:af:22:45:88:03:8f:
                    8a:08:be:b9:a6:a0:7d:01:78:a9:1e:8a:34:b6:6e:
                    fd:5b:e1:55:f1:3e:26:68:f7:13:f2:21:47:e6:b5:
                    30:21:c4:b1:18:b3:a5:38:f5:9c:05:06:b4:68:86:
                    8b:98:d1:54:ce:2f:24:60:0d:a2:52:66:16:a9:cd:
                    d9:0a:51:bd:d4:f1:49:14:11:e4:e3:fa:35:17:92:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:23:AF:34:4F:2C:DB:17:3C:32:86:C5:7F:50:57:69:34:5F:03
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9195a704-de86-4692-95c9-30d458a106d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc1:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:df:e1:e5:2d:19:ac:bc:16:58:4e:bf:8a:a8:f8:e1:18:d2:
         fe:f2:57:dd:7e:76:e3:88:fa:4c:e8:f8:c5:69:4b:8b:d1:22:
         d3:2b:95:d1:3e:1d:9b:ce:41:c5:4a:4c:e8:27:dc:d9:22:3d:
         32:99:7b:d3:bc:cc:3c:c4:f3:17:1b:ec:39:d1:94:8c:5c:b4:
         42:03:78:9e:f4:b8:5e:20:5f:66:e7:18:10:d0:75:9a:71:9e:
         db:0c:ed:19:c1:fa:41:5b:37:17:72:ca:c5:55:60:48:f0:31:
         2a:da:81:1f:2b:59:9a:41:99:c0:1b:e9:84:6f:ad:a0:15:d0:
         59:aa:62:19:7f:91:b2:5b:7b:2e:a2:64:26:c6:41:ed:3f:22:
         c0:43:65:ac:21:b2:ea:0f:1b:32:31:c4:6b:de:9b:86:9b:35:
         93:f5:9b:52:87:b7:c2:ba:49:c4:3d:48:35:f2:37:96:10:46:
         dc:d3:eb:77:ab:cb:2d:7c:90:d1:9b:ed:47:14:03:cc:a5:77:
         c9:c4:6b:be:ed:e2:2b:52:f6:ce:3e:49:87:af:4a:54:97:4f:
         da:45:d0:08:ac:f4:cd:47:38:4a:50:37:1b:77:6a:3d:ea:00:
         bb:2e:36:ce:87:8d:1a:e5:bb:82:f3:08:64:c6:44:a2:fe:eb:
         64:b0:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----