This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c9fc58bf-3415-4839-940e-603e1b7d42f6.roa
File:                     c9fc58bf-3415-4839-940e-603e1b7d42f6.roa (raw, json)
Hash identifier:          C1Hw7wyZEvl/o60pWjw91zJaWY/P2Gut/CYRbYJr7t0=
Subject key identifier:   3F:68:44:8F:10:41:95:5A:99:8A:57:93:2D:F4:16:4C:94:C0:A3:3B
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       50748C23025292F4BD8B9A1258D487D56E61E738
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c9fc58bf-3415-4839-940e-603e1b7d42f6.roa
Signing time:             Fri 24 Oct 2025 00:30:15 +0000
ROA not before:           Fri 24 Oct 2025 00:30:15 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc7:e000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:8c:23:02:52:92:f4:bd:8b:9a:12:58:d4:87:d5:6e:61:e7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Oct 24 00:30:15 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=0a51cc61cad05f8d2482b49ef0612555b226c02cbd127fa6bc45974801fc17e7, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:3a:0a:a6:90:9d:9c:b1:07:5d:42:18:1e:
                    0e:39:fa:65:e5:90:92:f7:4c:89:36:ff:cf:e6:84:
                    9b:81:22:3e:85:e8:78:01:88:76:74:61:56:56:e1:
                    40:9d:03:08:45:37:b4:f2:15:9e:e3:35:5b:b1:0f:
                    0b:96:64:1b:24:fd:aa:09:ab:f6:82:ce:d1:df:93:
                    05:be:b6:b9:9e:ab:d3:f3:6c:f3:d5:3d:2a:77:96:
                    83:2c:a8:d4:46:78:ef:ec:29:be:e8:86:a7:35:3a:
                    89:06:4f:9f:23:d1:8d:9a:17:34:4a:5e:59:59:83:
                    db:49:68:1f:b8:9f:5f:8b:bd:eb:4a:ad:f8:91:84:
                    4b:18:f7:ab:4c:22:57:46:2e:3e:e4:0f:bd:7a:2a:
                    7e:7e:12:80:c1:d2:eb:72:ca:90:be:35:07:50:c2:
                    71:07:55:75:ab:fa:4c:8a:49:e8:f8:23:c4:67:f0:
                    32:80:0d:46:74:b9:72:73:60:cc:af:30:a8:58:f2:
                    00:f1:e1:0a:64:c3:13:eb:b3:44:3c:7c:c1:fc:8b:
                    67:ce:bf:90:6d:de:b7:b9:5f:80:66:90:88:6b:34:
                    5a:71:37:9d:b4:77:19:f8:09:8f:ec:65:31:c3:9e:
                    1b:f0:c2:60:62:84:50:22:36:42:b6:86:2b:73:3c:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:68:44:8F:10:41:95:5A:99:8A:57:93:2D:F4:16:4C:94:C0:A3:3B
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/c9fc58bf-3415-4839-940e-603e1b7d42f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc7:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:b3:8d:27:dd:49:b5:2e:c9:c5:ae:2a:bd:45:84:63:1a:
         df:f0:a1:34:7e:6c:98:cd:7d:59:ac:70:9d:a1:62:97:f6:09:
         bc:04:74:a2:1a:ae:c8:a8:d2:ea:e5:81:00:11:57:4d:c5:ba:
         42:5b:db:f8:a5:e7:3a:b9:f4:8d:c4:29:99:61:83:af:e1:b0:
         c7:29:49:2d:4b:26:8b:d6:d7:b3:0c:07:22:59:40:02:ab:45:
         76:a4:bc:25:1a:11:f9:33:8d:57:d9:21:bb:95:64:10:62:e3:
         a3:a7:8b:ed:35:ec:94:67:99:63:72:03:84:29:69:ad:48:97:
         95:b9:46:bf:1a:cd:73:56:67:c9:4f:64:4c:f6:3a:b1:a2:ca:
         4a:df:c6:82:42:6c:15:55:43:2b:1e:16:63:30:36:3c:4f:d4:
         4d:1f:94:2b:ac:1f:64:dd:58:c5:3d:84:3f:4b:bb:c2:7c:77:
         89:1f:8f:05:87:24:f0:82:25:d9:13:7c:34:55:b7:60:82:3b:
         49:45:c4:80:bc:a3:e4:76:36:0c:42:bc:f5:af:f8:65:b8:19:
         1f:6b:86:0e:56:5c:86:f9:07:e4:c0:9b:f2:ab:ab:f9:89:86:
         7a:eb:bf:3a:12:c5:9d:f3:a2:9f:d6:65:8f:3d:9f:61:53:43:
         c0:09:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----