This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d98c780-618d-45ef-8526-22afd4c5352b.roa
File:                     9d98c780-618d-45ef-8526-22afd4c5352b.roa (raw, json)
Hash identifier:          WC14PABFVQ7t7hTCTEom7aTGCizfiQhUSFI3XVJRBxE=
Subject key identifier:   85:6B:AF:90:7C:46:90:56:DE:B2:21:E4:3D:19:6E:C1:50:71:DD:B4
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3F968CC7B36FF182D1654395A985F084D3A2DD18
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d98c780-618d-45ef-8526-22afd4c5352b.roa
Signing time:             Fri 16 May 2025 00:30:18 +0000
ROA not before:           Fri 16 May 2025 00:30:18 +0000
ROA not after:            Fri 20 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:c880::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:96:8c:c7:b3:6f:f1:82:d1:65:43:95:a9:85:f0:84:d3:a2:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 16 00:30:18 2025 GMT
            Not After : Jun 20 23:59:59 2025 GMT
        Subject: serialNumber=4a46def5db1876e638be857efa1d9cd21d0eebe160d004e469288dfe9a603b98, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:1d:71:f4:34:87:0d:f0:52:37:3d:14:c8:
                    d0:da:e4:cb:68:e1:9d:53:1f:80:fb:da:3e:06:40:
                    5a:28:47:f8:96:13:ad:03:dd:42:c7:71:da:8e:92:
                    f6:37:2d:32:d9:c2:96:dd:0a:a8:0f:c5:46:f6:97:
                    e6:ed:f2:d4:1f:86:ee:26:d0:16:9a:f9:7b:d7:e6:
                    49:13:4e:ed:db:51:ca:53:79:39:5c:90:28:be:21:
                    81:eb:27:d4:7a:d5:14:0e:96:d7:48:c1:94:b4:ca:
                    62:77:80:fb:f7:0d:10:c5:23:08:77:5d:ea:fd:09:
                    53:d5:b3:11:b6:7f:e7:7f:cc:54:a6:e8:0c:1f:90:
                    e2:46:c2:ee:34:cf:ac:e8:c4:c0:4a:23:21:90:17:
                    5f:25:32:12:f0:f4:a2:02:c4:c0:c0:dd:c2:a3:2a:
                    5b:e8:fb:75:19:79:73:8a:62:64:08:6f:d3:e5:38:
                    93:53:16:aa:e5:cd:36:a0:f8:75:47:85:18:b0:1e:
                    df:1e:b2:07:c8:61:87:84:7c:19:9f:ba:07:b2:c4:
                    0d:38:e8:2e:c4:d1:25:67:fb:74:17:cf:c2:ce:78:
                    46:57:6b:84:d9:9f:01:25:74:fe:2f:28:56:70:17:
                    58:b3:fe:c7:28:e8:13:1a:5d:f2:f7:91:52:50:d8:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6B:AF:90:7C:46:90:56:DE:B2:21:E4:3D:19:6E:C1:50:71:DD:B4
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d98c780-618d-45ef-8526-22afd4c5352b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:c880::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:92:42:a1:a7:40:b3:de:71:23:1a:af:3a:49:39:eb:c4:
         0c:eb:bc:09:28:c2:f1:1d:89:e1:08:a6:26:7c:d7:23:2f:5f:
         74:7a:3e:67:21:86:1a:8b:ad:9e:dd:6b:fd:92:fd:88:6e:da:
         68:eb:a5:53:83:d3:b5:e6:42:6c:9c:d6:99:2f:86:97:4c:79:
         22:e1:73:f5:ac:5f:a1:af:2b:ce:aa:9c:1e:30:70:1a:81:69:
         29:fe:70:10:ab:2f:6e:d6:47:d9:32:36:bc:4e:d1:b3:5d:5f:
         51:d3:3e:29:8e:17:f2:cc:b1:5f:4d:bd:6e:5a:94:f4:9c:9b:
         e5:e6:d7:1e:5b:b3:6b:c4:d8:1d:ff:48:ae:85:9f:98:ef:a1:
         45:ee:42:bf:ac:4d:fa:8e:d5:8b:63:65:b3:da:da:be:0e:bb:
         6a:4e:68:ca:e9:38:1e:4b:17:d2:35:1b:2f:6e:b0:71:44:8f:
         18:3e:c1:9b:57:d8:fe:99:7c:08:59:9d:fa:3d:5b:d4:41:b7:
         2f:51:57:a6:0a:35:ce:ff:24:02:5e:ba:62:e9:bc:26:0a:5c:
         3d:8b:7b:9d:9b:e6:b2:4e:08:54:93:50:26:b6:68:3b:4a:7b:
         60:32:f6:f0:8c:8f:d1:4a:61:a5:57:da:52:c9:38:37:f1:8f:
         70:8d:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----