This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/de498a1d-80b4-453c-aa67-020204ad5b6b.roa
File:                     de498a1d-80b4-453c-aa67-020204ad5b6b.roa (raw, json)
Hash identifier:          frZyti79/3m9Z3TVE30u7uWFcS1sJf0IWNJxs04OJa4=
Subject key identifier:   0F:6B:57:69:99:53:92:52:34:0A:27:5F:0C:25:53:51:60:E3:8E:E7
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       2336541E90DCED7ABB4CECD1F8B6B025AD6ADD0B
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/de498a1d-80b4-453c-aa67-020204ad5b6b.roa
Signing time:             Wed 22 Oct 2025 00:20:07 +0000
ROA not before:           Wed 22 Oct 2025 00:20:07 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     7224
IP address blocks:        2001:3fc7:d000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:36:54:1e:90:dc:ed:7a:bb:4c:ec:d1:f8:b6:b0:25:ad:6a:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Oct 22 00:20:07 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=cda440c6e17511b640f0947565fe28fddde751153f0d5e4ea8aba67f1601a6e0, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:0b:0a:63:5a:fc:d8:0e:8f:c4:14:f2:1a:
                    5f:2c:90:ac:bd:ca:32:1c:3c:2b:e3:9d:4c:d1:2d:
                    e2:b6:a9:49:4b:02:90:ce:3e:04:c6:d4:4b:32:33:
                    85:de:cc:57:98:1e:63:7c:fa:b3:79:2a:2c:e3:a0:
                    30:64:88:bc:c9:35:6b:fe:a4:dd:e8:00:af:25:4e:
                    c8:84:7d:46:f4:a8:6b:16:d3:07:8c:ac:e6:6e:95:
                    9d:f3:ce:43:9c:10:f8:5d:71:0f:5c:83:0f:86:43:
                    f4:94:6b:c7:43:84:da:a3:8f:b0:a6:15:e4:c6:3d:
                    19:5c:b6:b5:f2:19:93:88:f0:8e:92:68:bf:da:f1:
                    ae:96:f7:21:ec:3b:7a:01:ac:46:24:6c:bd:7f:57:
                    c9:21:ce:35:60:71:4d:1d:53:3d:13:10:c0:48:5b:
                    2f:57:dc:29:f9:b1:8f:c8:c2:af:13:3a:80:3a:12:
                    b4:45:07:d8:a6:1e:c9:68:ea:9e:07:50:df:5d:92:
                    46:96:27:4a:c9:14:4d:b9:7d:2f:2f:d2:6f:7e:67:
                    f7:4d:0d:b5:57:51:e7:f8:1e:d5:e7:ed:f5:41:bb:
                    4f:05:ed:40:5f:1b:07:c5:7d:24:15:55:9e:c5:c9:
                    21:7a:04:c5:7a:21:80:c5:93:69:20:58:42:e5:d3:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6B:57:69:99:53:92:52:34:0A:27:5F:0C:25:53:51:60:E3:8E:E7
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/de498a1d-80b4-453c-aa67-020204ad5b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc7:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:43:13:53:01:e5:47:90:74:97:0b:6f:8a:91:ec:c8:7d:ab:
         4f:86:b3:9e:c4:ba:dd:6d:70:79:7e:98:b2:9c:7e:28:1a:27:
         ed:88:ef:71:a3:14:f5:6a:70:08:c9:02:66:7b:a7:28:cf:65:
         48:04:2b:e5:ef:81:8a:1b:aa:63:90:5e:2f:22:e9:71:1e:30:
         eb:e7:d0:aa:50:b6:2c:b3:8f:7e:56:52:a7:09:ef:e6:39:ed:
         3f:6d:4d:07:9d:09:36:da:90:a0:66:13:ed:de:ed:05:80:cd:
         de:52:1c:a8:ab:3b:cd:c5:f0:d6:6c:1f:e2:28:a5:7b:07:80:
         7f:0a:9b:5b:c6:f7:f7:eb:29:b8:69:fe:ab:11:db:9d:de:92:
         85:61:65:ca:4e:6e:66:36:c8:1c:26:aa:5d:b1:4e:89:e8:89:
         97:ad:c9:cc:db:bd:aa:54:1a:c2:59:85:a9:14:58:b6:7d:0c:
         a9:3e:03:18:84:74:53:0b:97:55:76:cc:27:51:bc:f5:94:35:
         74:8a:72:b7:ef:51:03:96:38:9e:5d:70:3c:2b:87:8d:55:5e:
         b9:3e:fd:52:93:71:ae:2c:1c:39:97:a4:88:58:e9:98:8f:8b:
         7e:ae:b8:ac:2d:58:72:c0:23:26:2d:f5:6b:ed:00:f6:62:7d:
         36:5f:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----