This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50f59e85-50ab-4b5a-9119-096ba93f86f2.roa
File:                     50f59e85-50ab-4b5a-9119-096ba93f86f2.roa (raw, json)
Hash identifier:          ruygK9nBstskZbnSbU7zPrnzsn0VoTVUijMirxtK3/A=
Subject key identifier:   D5:46:AA:72:7D:0A:D5:32:D1:22:98:01:A1:60:97:2F:9F:2F:91:21
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       31D2B4B15A5FC5E27D02A1FDD2A124A6BF5102FB
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50f59e85-50ab-4b5a-9119-096ba93f86f2.roa
Signing time:             Fri 24 Oct 2025 00:31:04 +0000
ROA not before:           Fri 24 Oct 2025 00:31:04 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc3:1000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d2:b4:b1:5a:5f:c5:e2:7d:02:a1:fd:d2:a1:24:a6:bf:51:02:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Oct 24 00:31:04 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=0ded3afe51572abc646734699bee2389b3594170ea0a38c87145ce26d3b60106, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:b3:6e:b2:59:df:3e:6e:1e:ca:d0:aa:1b:
                    7b:e4:cb:34:ac:25:46:0f:d9:bc:e1:6d:54:ef:8d:
                    a7:1d:c4:68:91:79:e3:78:8c:7b:bb:63:fb:e9:58:
                    05:c2:91:85:74:23:f9:45:75:a8:38:08:b7:a0:8a:
                    b1:bd:b7:2b:1e:9d:c2:eb:9a:1a:d9:03:e5:4b:fc:
                    9a:f8:d3:8b:2d:7c:55:c9:be:c0:07:55:3a:2f:89:
                    55:cb:79:e5:cf:ac:ae:e7:13:ee:6d:ba:2f:c5:47:
                    9b:16:a6:b5:54:1c:32:7c:34:74:6f:ca:8e:15:ab:
                    03:5d:4f:53:6f:0e:d7:bf:00:c5:72:84:e8:65:71:
                    de:50:01:21:eb:1d:32:3a:ac:66:70:2b:0a:1d:58:
                    25:c8:c4:12:fe:0d:ce:00:3d:6b:a1:62:73:ef:f4:
                    db:fe:5b:cf:e7:d9:7f:a2:64:72:d7:fe:19:37:1a:
                    e0:86:79:58:cf:91:a4:7c:e8:70:8c:65:5e:32:9b:
                    db:62:04:5e:d0:27:f1:f4:1e:ea:3f:4c:bf:a8:41:
                    cd:f2:a7:f4:64:f2:cb:86:e7:55:a3:d5:77:d5:92:
                    26:78:31:f1:5e:be:60:9d:82:ab:76:8f:13:6c:83:
                    1b:d8:97:e6:51:81:06:70:75:58:42:86:2c:97:25:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:AA:72:7D:0A:D5:32:D1:22:98:01:A1:60:97:2F:9F:2F:91:21
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/50f59e85-50ab-4b5a-9119-096ba93f86f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc3:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:1c:50:9c:2a:52:62:a2:05:03:8a:77:73:c4:d8:72:07:
         31:5a:a0:e3:92:b6:6c:35:b3:d1:a7:0c:11:8c:d7:82:53:11:
         fc:89:9f:7f:47:98:45:b6:79:f9:ec:cd:d4:b7:ff:36:0f:ac:
         83:e8:62:07:7d:38:6c:99:33:6b:a8:cd:88:b9:4a:ca:fa:48:
         40:97:c8:8c:82:a6:f4:2f:28:89:d6:05:e4:86:b2:14:f2:75:
         3f:7a:bc:2b:6e:e5:40:09:86:41:b0:57:36:40:54:38:be:25:
         fc:e1:a7:eb:16:f1:a0:2d:11:89:4a:f5:f5:65:dd:6a:de:6b:
         49:a3:c7:7b:c9:9c:a1:a5:52:ba:54:14:b1:97:d1:51:54:da:
         7a:28:32:3a:8c:14:bd:70:17:de:28:7e:9c:17:5d:6f:8c:31:
         46:de:5e:ea:b1:34:c3:39:7f:8a:4d:82:89:7d:a4:cb:f3:bb:
         ee:42:df:25:02:1f:b2:7a:9c:fb:a3:90:45:d8:4f:eb:a4:ea:
         4b:c8:4f:47:9c:9c:bc:51:02:55:4d:eb:30:b7:22:51:00:4b:
         ca:11:a7:5b:4a:4e:41:e3:4e:5e:ea:1e:cd:14:e3:00:6c:37:
         2e:92:ba:00:92:32:00:5b:66:a5:90:da:65:8f:16:c9:f2:02:
         12:be:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----