This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9623dcba-6a97-4717-ac77-dd16d3c33f78.roa
File:                     9623dcba-6a97-4717-ac77-dd16d3c33f78.roa (raw, json)
Hash identifier:          nFX1Gn2kqmhIvZmscXe5mqs9g25sXXR0KMgmOGajOI4=
Subject key identifier:   72:AA:99:C7:0C:BB:09:DA:35:C6:38:68:20:1B:30:CB:59:8F:1E:AF
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       71D4E8ECD391A90967D9CA7BC7BEFE33D4A9B677
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9623dcba-6a97-4717-ac77-dd16d3c33f78.roa
Signing time:             Fri 24 Oct 2025 00:30:35 +0000
ROA not before:           Fri 24 Oct 2025 00:30:35 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc5::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d4:e8:ec:d3:91:a9:09:67:d9:ca:7b:c7:be:fe:33:d4:a9:b6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Oct 24 00:30:35 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=b92520372067b276210de3fcada792dd58d1bfb52ee063b0dfc278202d817d09, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:b7:46:24:61:96:b1:b6:aa:58:ce:93:35:
                    f6:34:a5:1b:0f:af:47:74:4d:7b:30:a7:e1:f8:22:
                    e8:97:e5:28:25:a3:b8:ee:a2:e7:c6:cf:60:eb:ae:
                    da:70:eb:00:a5:5d:05:44:fc:0d:42:fd:ce:02:db:
                    f1:a7:5a:ec:78:da:c7:b5:7e:3b:e4:73:54:ba:91:
                    1d:c1:82:57:81:a1:73:6b:89:21:34:ec:9c:f8:f1:
                    73:61:b5:e2:b4:fc:9f:ed:bc:c0:b7:df:59:02:fa:
                    70:45:1b:ff:c4:f1:63:a0:10:11:97:8b:18:5d:08:
                    da:e7:fc:14:07:c3:ad:97:16:8c:4d:60:74:6d:6d:
                    42:f8:52:d6:c5:b5:32:6c:38:a3:47:8a:f3:53:0e:
                    fd:16:f5:bf:f8:fc:b2:5a:55:27:96:17:04:72:10:
                    29:7a:00:11:d1:c8:89:e1:48:a6:61:e4:bb:da:f7:
                    f1:ca:17:9f:7a:b9:0a:fb:1a:02:0a:47:9a:87:c6:
                    01:b2:95:41:fd:c6:ea:1e:dc:9e:00:66:50:05:72:
                    1a:24:09:f5:59:33:f5:26:fd:ef:c1:5b:43:f6:ae:
                    99:b2:cc:ee:2a:fa:5e:22:db:89:68:a5:2a:3c:cb:
                    30:fc:93:25:5b:54:79:0a:66:e1:4f:db:fa:03:34:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:99:C7:0C:BB:09:DA:35:C6:38:68:20:1B:30:CB:59:8F:1E:AF
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/9623dcba-6a97-4717-ac77-dd16d3c33f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc5::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:02:c9:c2:83:39:07:69:f4:86:95:33:f7:48:ce:27:7b:d8:
         4c:94:cf:0f:e7:a0:2a:d2:ce:af:c6:b2:19:36:17:70:18:f8:
         3c:94:43:0b:33:1d:f3:d6:ca:c0:4b:08:0c:9c:d9:e8:09:da:
         0f:e5:85:e4:91:23:cd:96:1b:09:24:b3:fb:cb:50:51:76:54:
         37:03:4d:d8:3a:0c:5e:f8:03:db:30:63:9e:70:dd:d4:99:31:
         09:c0:b0:16:fb:e7:b0:91:e6:a1:9b:ea:7f:d6:da:1d:14:f5:
         ee:07:e1:f0:ca:e0:82:9f:a6:ba:f1:87:58:71:ee:3b:bb:c3:
         7a:e4:cf:cc:82:3a:c3:80:e1:44:cd:36:ed:c8:20:25:a8:38:
         ee:d4:7d:f7:27:7b:a9:50:d5:85:40:08:12:a3:60:70:c2:3a:
         d7:2d:0a:ab:84:c9:d0:9a:6e:10:34:09:b2:f9:cc:cd:24:3d:
         b2:6b:ae:74:89:e9:d7:e3:29:41:ec:09:03:70:68:6e:9c:06:
         4e:c5:40:b8:47:5a:66:d4:e2:01:1d:8e:01:34:9a:49:cf:62:
         78:50:1e:b7:2c:ca:36:35:67:64:9d:6b:85:ed:5c:60:ac:2c:
         7f:5b:ce:9f:70:d9:21:67:52:ff:1c:29:3c:de:1c:cb:63:e6:
         eb:7a:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----