diff --git a/requirements.bazel.txt b/requirements.bazel.txt
index d103d3004c5..0e2ecbe0907 100644
--- a/requirements.bazel.txt
+++ b/requirements.bazel.txt
@@ -14,5 +14,5 @@ chardet==3.0.4
 certifi==2017.4.17
 idna==2.7
 googleapis-common-protos==1.5.5
-# rsa 4.0 is the last version support Python 2
-rsa==4.0
+# rsa 4.3 is the last version support Python 2
+rsa==4.3
diff --git a/requirements.txt b/requirements.txt
index 2218991c3f3..773e2c7c79b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,5 +5,5 @@ enum34>=1.0.4
 protobuf>=3.5.0.post1
 six>=1.10
 wheel>=0.29
-# rsa 4.0 is the last version support Python 2
-rsa==4.0
+# rsa 4.3 is the last version support Python 2
+rsa==4.3
diff --git a/tools/run_tests/helper_scripts/build_python.sh b/tools/run_tests/helper_scripts/build_python.sh
index 47e96fdb19f..0b0cf380a1e 100755
--- a/tools/run_tests/helper_scripts/build_python.sh
+++ b/tools/run_tests/helper_scripts/build_python.sh
@@ -222,6 +222,9 @@ pip_install_dir "$ROOT/src/python/grpcio_status"
 # Install testing
 pip_install_dir "$ROOT/src/python/grpcio_testing"
 
+# rsa 4.3 is the latest version support Python 2
+pip_install ras==4.3
+
 # Build/install tests
 pip_install coverage==4.4 oauth2client==4.1.0 \
             google-auth==1.17.1 requests==2.14.2 \