This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/79de1a10-540a-49e4-92f2-b8e81488ffd1.roa
File:                     79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (raw, json)
Hash identifier:          083EbNIPLx/FZlgKIk8j1vrc55JmKY8yDiaMatQXzSw=
Subject key identifier:   96:6D:F0:14:42:76:3A:9E:45:5F:A1:58:E6:97:EC:BE:37:C5:AC:A2
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       073AD42D6120C0C576F0FCD2D1A0D1D0DB9FFEE8
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/79de1a10-540a-49e4-92f2-b8e81488ffd1.roa
Signing time:             Wed 19 Nov 2025 00:10:07 +0000
ROA not before:           Wed 19 Nov 2025 00:10:07 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2803:4ed0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 19:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3a:d4:2d:61:20:c0:c5:76:f0:fc:d2:d1:a0:d1:d0:db:9f:fe:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Nov 19 00:10:07 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=a27cb897df2cc5fe9b0dd4d84bc723ba6f41103562bbca4e9412448b3494b7e6, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:c7:43:14:4c:8d:14:9c:f1:8f:fb:de:59:
                    c7:9b:a6:fd:0d:7b:7d:aa:52:84:c9:71:f5:02:6e:
                    9b:2d:c0:eb:06:a6:01:73:10:ff:21:64:61:43:fe:
                    fc:84:2d:04:b6:9f:74:59:7a:e2:63:2c:e3:61:56:
                    c6:3f:7e:78:5c:31:9f:ff:a0:cc:1b:eb:d0:8f:a9:
                    a5:54:60:17:f4:9e:0d:a5:7e:1b:f8:f3:d8:f7:40:
                    97:a1:95:99:03:a6:00:25:dd:53:90:23:91:ae:6c:
                    e3:cb:d1:8f:91:b8:12:33:b3:e6:45:4e:dc:21:af:
                    b9:12:8b:fc:36:4f:47:d5:6f:57:93:a3:c0:ca:69:
                    30:e4:c0:20:ab:79:e5:3a:5a:f8:78:71:8a:70:07:
                    c0:a7:3a:de:b6:c0:f5:40:a9:7d:cf:7b:3d:5a:36:
                    b8:e4:89:7f:4d:5a:dc:9d:89:96:83:0c:c6:c4:e2:
                    aa:e0:b3:28:80:74:28:25:c1:16:04:bf:7d:22:7f:
                    4b:82:a9:3d:a7:85:79:4a:c1:e1:5c:d4:d8:cb:a7:
                    f2:74:9e:88:b9:f2:d0:08:99:db:e8:2b:cd:3a:4c:
                    ca:e0:50:be:f6:9f:56:bc:75:6d:65:8b:f5:50:32:
                    4f:8c:25:d3:f6:cb:36:df:7b:2e:ec:4b:56:42:d8:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6D:F0:14:42:76:3A:9E:45:5F:A1:58:E6:97:EC:BE:37:C5:AC:A2
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/79de1a10-540a-49e4-92f2-b8e81488ffd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:fe:9c:74:4a:ae:34:43:00:c9:61:db:13:f2:e9:82:7f:70:
         3a:23:00:21:9a:15:5d:bf:8d:87:53:f7:7d:c2:04:50:5c:aa:
         e1:22:b1:6a:25:8d:ad:7a:47:f3:e7:19:1b:71:9b:62:3f:17:
         c9:05:58:49:ba:fb:21:49:a8:7b:48:8b:cf:2b:10:0f:f2:f6:
         f9:41:f8:95:0a:a7:ff:2a:08:f3:25:f1:6e:4b:4b:79:67:d5:
         b4:6a:19:07:fe:f6:ca:54:45:6a:f8:31:38:fe:47:dc:c0:26:
         5b:42:5b:0c:f9:2c:7e:77:61:c1:da:93:34:77:e3:d7:7d:5b:
         18:cf:92:a5:d1:4f:76:88:ea:81:3c:bd:c5:24:a1:2e:a8:f2:
         af:49:36:a1:20:1a:da:86:49:05:f0:46:2f:86:b2:c9:3b:8d:
         26:a3:17:0d:61:55:2c:9f:b3:68:08:c3:bc:23:cf:bc:4f:90:
         82:96:ee:7a:06:58:62:f6:a1:9d:8c:33:50:92:e5:8c:3d:04:
         8e:96:f9:b5:45:b5:cb:12:92:d8:aa:4b:d5:87:a7:eb:11:0d:
         90:c6:74:d5:7d:0f:8f:77:3f:d1:d2:36:db:a7:18:f2:48:62:
         55:73:ed:d9:3b:4b:34:99:30:58:27:57:1c:0f:8a:26:ce:a4:
         2d:f3:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:59:41 2025 by rpki-client