This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50b0c8f5-9b03-4d00-b7bc-30a253b83be3.roa
File:                     50b0c8f5-9b03-4d00-b7bc-30a253b83be3.roa (raw, json)
Hash identifier:          U7t47IqtoUKQ3x4AUG7iEalBZcqBxQbK+Qv3MFfJNNY=
Subject key identifier:   48:57:91:EE:CE:70:56:48:39:59:77:B0:54:29:BA:36:01:FD:4D:B2
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       4879A75DD65F80346FD59E79966A9FF02DE316AD
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50b0c8f5-9b03-4d00-b7bc-30a253b83be3.roa
Signing time:             Fri 24 Oct 2025 00:30:54 +0000
ROA not before:           Fri 24 Oct 2025 00:30:54 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc7:c000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:79:a7:5d:d6:5f:80:34:6f:d5:9e:79:96:6a:9f:f0:2d:e3:16:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Oct 24 00:30:54 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=c7717a76373064a93324145e2a7b3496874eaa150c775864a6d8f0f6c8f6a86b, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:51:64:3b:e9:0f:c0:e0:d9:11:18:6d:ee:
                    a3:35:c3:e2:d7:58:d6:23:fd:ed:bd:aa:16:da:b5:
                    70:64:9c:80:ac:3f:cc:26:e9:49:19:e9:2c:37:4a:
                    78:f6:a5:f2:86:9a:09:18:c6:64:5e:01:f5:db:9c:
                    35:79:ad:10:61:51:97:be:d9:44:37:aa:be:71:ef:
                    17:e6:fb:40:26:15:df:4c:ce:7e:a6:a3:3c:a8:1c:
                    ee:bc:be:1f:b7:ab:dd:ea:67:2d:74:bd:cc:d5:a5:
                    27:2c:dc:16:8c:84:7f:dd:46:49:98:46:e6:0c:bf:
                    f2:3f:9f:26:94:c0:46:95:4d:20:cd:22:05:d8:12:
                    aa:5f:65:14:63:29:94:d5:c5:55:98:cd:a1:9e:14:
                    58:94:92:d0:bf:28:03:56:a6:2c:16:0b:22:3f:53:
                    0a:33:93:0f:f1:7c:83:a1:82:f6:50:a0:2d:4d:4f:
                    9e:3e:d5:ee:4c:cb:ed:9d:8d:31:9b:75:dd:41:83:
                    8f:5d:62:5f:bb:87:c4:6b:d9:57:6d:73:0f:47:a6:
                    20:6b:16:36:65:bb:ac:b7:87:76:a4:74:1d:20:2f:
                    5c:3b:e4:de:f8:16:31:74:79:4f:94:65:ef:e4:b5:
                    b9:17:7c:11:02:34:18:25:57:e9:c9:05:cb:af:db:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:57:91:EE:CE:70:56:48:39:59:77:B0:54:29:BA:36:01:FD:4D:B2
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50b0c8f5-9b03-4d00-b7bc-30a253b83be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc7:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:8b:81:11:ec:22:50:0a:5c:d4:c7:d3:89:f0:d3:de:2e:
         a0:b4:d4:ee:18:b6:06:0f:23:69:9a:de:74:b6:45:73:3f:5c:
         71:d3:8c:6f:03:8d:44:02:69:d2:3f:ef:e5:f3:2c:da:2c:df:
         ff:30:41:1a:5c:00:b9:6a:10:2c:bc:e2:a0:88:d6:c5:df:b2:
         d4:3a:c6:ed:9a:b4:bc:6a:94:a1:ac:50:6f:b5:6b:1e:de:74:
         8a:47:52:95:27:82:d8:24:d4:a3:30:b5:6d:4f:9e:ef:8f:f0:
         2e:1d:8a:7f:f2:83:85:ef:88:d9:3e:a0:f2:91:64:07:27:29:
         26:74:8c:e9:f1:f0:4a:42:22:f4:e8:b7:c7:a6:25:c0:8a:8e:
         a2:35:2b:fa:44:a8:24:d1:93:d4:95:8f:4d:95:66:f0:85:0c:
         4e:5c:c2:cc:00:bb:34:47:c2:20:4c:6f:87:b3:c8:d1:45:cf:
         9b:d0:b7:37:09:5e:34:6f:f7:cd:3f:b9:64:59:51:69:21:e8:
         92:73:ab:e3:a3:5b:84:e9:d3:9c:a4:70:62:c9:81:52:b2:85:
         79:de:40:c0:e5:ae:1e:a1:94:3c:1b:bc:7d:0b:6b:ef:33:9a:
         c3:a2:28:db:e8:62:aa:f5:3a:60:dd:54:58:45:e0:98:f0:6f:
         e1:6d:4c:e5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSHmnXdZfgDRv1Z55lmqf8C3jFq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTEwMjQwMDMwNTRaFw0yNTExMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGM3NzE3YTc2MzczMDY0YTkzMzI0MTQ1ZTJhN2IzNDk2ODc0ZWFhMTUwYzc3
NTg2NGE2ZDhmMGY2YzhmNmE4NmIxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN0VUWQ76Q/A4NkRGG3uozXD4tdY1iP97b2qFtq1cGScgKw/zCbpSRnpLDdK
ePal8oaaCRjGZF4B9ducNXmtEGFRl77ZRDeqvnHvF+b7QCYV30zOfqajPKgc7ry+
H7er3epnLXS9zNWlJyzcFoyEf91GSZhG5gy/8j+fJpTARpVNIM0iBdgSql9lFGMp
lNXFVZjNoZ4UWJSS0L8oA1amLBYLIj9TCjOTD/F8g6GC9lCgLU1Pnj7V7kzL7Z2N
MZt13UGDj11iX7uHxGvZV21zD0emIGsWNmW7rLeHdqR0HSAvXDvk3vgWMXR5T5Rl
7+S1uRd8EQI0GCVX6ckFy6/b5FkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRIV5Hu
znBWSDlZd7BUKbo2Af1NsjAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
NTBiMGM4ZjUtOWIwMy00ZDAwLWI3YmMtMzBhMjUzYjgzYmUzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8fA
MA0GCSqGSIb3DQEBCwUAA4IBAQCKZ4uBEewiUApc1MfTifDT3i6gtNTuGLYGDyNp
mt50tkVzP1xx04xvA41EAmnSP+/l8yzaLN//MEEaXAC5ahAsvOKgiNbF37LUOsbt
mrS8apShrFBvtWse3nSKR1KVJ4LYJNSjMLVtT57vj/AuHYp/8oOF74jZPqDykWQH
JykmdIzp8fBKQiL06LfHpiXAio6iNSv6RKgk0ZPUlY9NlWbwhQxOXMLMALs0R8Ig
TG+Hs8jRRc+b0Lc3CV40b/fNP7lkWVFpIeiSc6vjo1uE6dOcpHBiyYFSsoV53kDA
5a4eoZQ8G7x9C2vvM5rDoijb6GKq9Tpg3VRYReCY8G/hbUzl
-----END CERTIFICATE-----