This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa
File:                     d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa (raw, json)
Hash identifier:          PJwGWiWJMggJmLL5ghF0rGrXtgRIY1Vz7qteM4QNvQE=
Subject key identifier:   E1:6D:2A:46:35:DB:DE:B3:72:C1:67:F8:E7:52:64:3E:B4:A6:2E:26
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       0E1A12E851C6AC78B52B58E244FF34C550B9414D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa
Signing time:             Sat 27 Sep 2025 00:52:13 +0000
ROA not before:           Sat 27 Sep 2025 00:52:13 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.18.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1a:12:e8:51:c6:ac:78:b5:2b:58:e2:44:ff:34:c5:50:b9:41:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Sep 27 00:52:13 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=ae5bce3d31859e419922b39278265794d91107b165891099415634d650193839, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:11:5e:80:3e:2a:b0:bb:be:cd:e2:8f:cf:
                    1e:ad:27:4f:fd:ae:d6:4d:22:0c:74:87:6a:ed:0b:
                    4c:70:cc:cc:72:4f:39:b4:fd:5c:1d:8c:0e:97:2e:
                    b7:7a:e8:b9:be:26:4c:c4:51:b1:dd:c3:93:64:57:
                    9f:fc:ac:3d:da:dc:c2:b3:05:79:77:2e:87:98:1e:
                    5a:ef:e3:ec:68:b4:2e:88:ed:07:05:05:b0:43:cf:
                    aa:6f:aa:0d:e8:c6:ed:75:d9:b6:20:ff:ea:81:e4:
                    fc:71:65:00:65:b9:ff:92:1f:c1:25:e6:ce:f3:b7:
                    90:48:8e:d0:7f:d3:1b:b2:a5:c0:50:fd:dd:20:f1:
                    c9:94:37:2c:9a:4b:c5:28:1b:33:e6:fa:a3:0e:60:
                    14:44:bd:5c:35:f0:1e:de:f3:5e:da:65:8d:b1:89:
                    12:7a:d6:34:6d:a6:36:4e:3c:5f:71:54:1e:27:f4:
                    24:0b:b8:d6:04:12:6f:82:86:fd:cf:48:c0:fa:f9:
                    3f:c1:8f:51:5b:f7:12:f3:1b:c4:de:96:a0:fe:ac:
                    26:f7:0f:d5:ac:e2:9f:92:bf:af:6c:53:96:82:75:
                    e6:22:87:38:b1:2e:e3:8b:31:bc:5f:35:04:64:54:
                    db:fd:89:ea:f5:26:2e:e2:8d:bf:2e:b8:41:24:6a:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6D:2A:46:35:DB:DE:B3:72:C1:67:F8:E7:52:64:3E:B4:A6:2E:26
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:10:bf:38:e6:9d:e3:97:b6:58:a1:97:c9:15:94:7f:10:
         6e:a9:78:a1:78:4f:5c:16:f1:1b:42:8d:c8:97:49:91:8e:d9:
         87:1e:3b:26:c6:8e:cd:43:88:b3:f4:11:d1:83:e6:54:b4:dc:
         88:6e:1a:3b:7e:43:4f:30:14:3d:03:33:b4:de:16:74:5f:5e:
         36:bd:79:cc:99:31:f3:8e:15:6c:40:ac:5a:05:72:7a:d3:94:
         70:01:1f:5f:46:f5:02:13:da:cb:83:0d:d9:1b:83:ef:c0:4a:
         d5:17:a6:df:58:e5:1d:72:1d:2b:f5:24:5b:90:17:ca:21:36:
         7c:f0:da:58:17:3d:19:90:c8:58:e9:77:62:ad:f5:ae:ae:5c:
         a7:52:9a:28:e8:f8:2c:61:fa:10:3c:97:fe:9c:b6:88:a6:07:
         8c:f3:04:4f:62:b6:5c:57:08:f5:74:cb:7d:44:4a:77:cc:c9:
         da:aa:98:92:b9:34:b5:30:2f:a2:20:4a:7a:93:b5:a9:c2:a6:
         f8:cd:e3:59:cb:c9:11:04:f4:b1:41:b1:d6:93:3a:a2:ba:f9:
         62:7e:6d:bd:c1:b4:ae:da:ca:ab:cd:a9:ae:66:72:96:2b:4b:
         db:b2:23:b8:94:bf:b5:2e:b7:90:da:4b:c7:b8:24:47:ee:5c:
         12:30:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----