This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1ae9d8b2-218c-4376-936d-185032ce890b.roa
File:                     1ae9d8b2-218c-4376-936d-185032ce890b.roa (raw, json)
Hash identifier:          Qdssu6GFAMvZ0i7RAiQR9roqxCX5zd7jIV3acMzZ6SE=
Subject key identifier:   0D:86:7D:E6:99:E5:93:6A:6A:DA:21:92:D3:B4:7A:67:D3:9B:9A:8D
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       06265B9F90B0E68939A3D5E85369998EF69091AF
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1ae9d8b2-218c-4376-936d-185032ce890b.roa
Signing time:             Fri 24 Oct 2025 00:31:06 +0000
ROA not before:           Fri 24 Oct 2025 00:31:06 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc7:f840::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:5b:9f:90:b0:e6:89:39:a3:d5:e8:53:69:99:8e:f6:90:91:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Oct 24 00:31:06 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=5b5584c7beff3966b66f1b073a985590a72a98dd7a024298627f997b0ef7c2fb, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:e8:96:67:00:cd:d6:d7:de:75:29:28:5e:
                    dd:9c:78:a4:4d:2a:2e:dc:00:20:40:6d:11:d2:cf:
                    ae:13:0e:0b:ae:5d:2f:5e:57:9a:14:69:a8:59:55:
                    e6:06:e2:d0:8c:b1:15:8a:80:f1:8e:12:46:93:e6:
                    34:b6:11:ff:1f:a5:a6:cd:22:c8:6d:0f:a8:9f:35:
                    b4:7c:b4:d7:8b:3f:f5:be:07:14:48:85:a4:e8:1a:
                    30:5f:c8:ef:6c:bc:cc:b7:f1:ed:2b:4c:5f:63:69:
                    2f:62:97:b1:e6:17:51:ef:82:4a:36:79:34:0c:43:
                    bb:3d:df:61:5e:8f:17:d7:32:76:80:2b:e2:c7:2f:
                    36:09:7e:e1:cc:ab:0d:51:b8:54:86:57:c6:cf:b1:
                    04:15:7e:9b:15:7b:84:77:77:e2:f2:11:c8:0b:2e:
                    cf:42:de:a8:ae:06:f7:af:c4:97:db:62:1d:de:f5:
                    0a:9b:93:aa:fc:74:f8:71:61:16:78:67:ce:24:bc:
                    55:14:18:ff:91:80:6c:8f:81:e6:25:9f:8a:55:6f:
                    54:6f:e1:ed:55:1b:35:d3:ab:82:8b:47:ab:d6:5d:
                    76:69:52:15:eb:6e:cb:40:d3:83:2e:82:1a:44:7d:
                    01:a8:32:85:3c:fd:67:0b:da:14:2b:d4:2b:77:9e:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:7D:E6:99:E5:93:6A:6A:DA:21:92:D3:B4:7A:67:D3:9B:9A:8D
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1ae9d8b2-218c-4376-936d-185032ce890b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc7:f840::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:62:cc:60:fa:28:71:50:98:48:cd:60:d2:f4:05:fd:e4:
         3e:9c:f1:0e:42:7c:3e:b6:3e:be:c2:c6:ef:3d:5f:25:0f:8a:
         a5:f9:4d:ac:18:ae:a1:9f:7c:39:c5:40:90:98:83:7f:76:83:
         53:e4:15:5a:04:17:84:fd:61:25:88:92:29:df:17:03:4f:28:
         10:a5:af:bd:c1:6f:40:df:93:68:ca:fc:02:65:cd:c7:32:05:
         62:d8:c0:4d:32:34:65:87:a3:f1:7c:1b:0e:73:d1:46:4d:f6:
         67:5b:e2:fb:68:ee:66:3f:db:e8:d1:e7:c8:6e:a8:5c:04:71:
         eb:73:68:0b:3c:6b:34:ff:c7:0c:b1:2e:82:e6:be:a0:08:a5:
         07:31:f9:d4:03:9b:83:ea:cc:d7:72:07:cb:35:b4:0c:11:6c:
         b1:d2:33:f0:33:79:cf:91:b5:11:e0:a2:e9:e1:ab:f1:77:49:
         81:eb:1e:cd:ed:a7:a5:85:4d:c2:dd:5b:84:36:57:9c:6d:70:
         dc:b8:91:ce:bb:3c:c3:b1:cf:c5:8e:4b:6d:0b:65:c8:aa:f5:
         05:6b:6b:cb:25:64:31:50:46:83:47:e2:f1:e8:23:1e:4d:1a:
         7c:aa:3c:39:c5:0f:f6:f9:ea:0f:70:03:f2:bd:11:ac:6d:80:
         c1:28:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----