This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/048ebe10-506f-4a5f-8154-fba2b41754e1.roa File: 048ebe10-506f-4a5f-8154-fba2b41754e1.roa (raw, json) Hash identifier: JZMOe67J6gN7n+P9KqaivgrzH/MZDB0BFMTxUQ63/Vs= Subject key identifier: 61:AC:9C:68:2A:E3:46:1C:08:F5:56:7C:1F:C6:1B:C2:F7:F0:4F:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3EE2B1158930C4DE823915C9FC836317C7DB7732 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/048ebe10-506f-4a5f-8154-fba2b41754e1.roa Signing time: Tue 13 Jan 2026 20:08:38 +0000 ROA not before: Tue 13 Jan 2026 20:08:38 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e2:b1:15:89:30:c4:de:82:39:15:c9:fc:83:63:17:c7:db:77:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jan 13 20:08:38 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=38ea3d9525eb512feb21bf29d22d231547b7f018d4b7cc0ec2871dbe08962c38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:9d:8b:00:6c:69:d2:34:12:0f:3b:f4:b5: 4c:39:1c:f4:62:a9:5e:25:ad:a7:9b:99:68:6e:5d: 10:14:1a:8b:23:09:7a:c0:40:81:78:47:b6:af:3a: 93:ff:94:f5:81:55:91:01:63:58:d3:0f:27:2f:46: ea:1d:77:c6:1f:6a:4b:bf:30:a9:07:76:c1:af:2c: 15:84:f3:5a:86:94:26:bb:76:08:3f:f2:51:9b:fc: 23:e4:89:0a:b0:0a:5b:b5:2e:a9:34:0c:d5:82:98: 47:a5:9d:d6:5d:64:c2:33:52:ef:fe:ad:fc:7c:26: d6:a2:ff:92:df:f7:12:b8:64:55:37:65:5e:b8:70: cd:9d:4e:c6:ff:a8:b7:48:6b:e6:c8:7f:23:38:8d: 81:cb:32:ec:c1:88:bd:ac:ff:08:37:46:d0:dc:08: 09:92:ac:39:17:e9:a4:87:2f:61:cc:e4:93:a6:3c: ae:64:fb:b7:87:3a:19:64:29:87:77:cb:b0:bb:e1: 1e:5a:6f:33:b8:81:5e:fc:2d:58:4f:ba:ba:5d:bb: 97:8a:01:b4:ab:42:6d:86:f1:b9:ca:98:e1:bd:d5: cc:60:8c:47:a8:9a:7b:e9:40:56:71:70:3b:78:d5: 1f:f5:3c:5c:43:71:07:7d:2c:e7:1a:65:a0:f6:61: d5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AC:9C:68:2A:E3:46:1C:08:F5:56:7C:1F:C6:1B:C2:F7:F0:4F:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/048ebe10-506f-4a5f-8154-fba2b41754e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:06:2d:73:8f:4e:08:cd:34:fc:1e:58:e8:82:20:c5:09:06: 09:79:00:d6:00:23:52:1e:6d:63:72:4d:50:4f:e5:54:24:36: b2:fa:1f:e0:45:8d:3d:9b:f7:3d:c8:39:52:d5:f2:bc:30:5c: ea:01:c7:da:9e:bd:27:4e:21:a2:76:7a:71:ca:b3:d3:a3:39: 97:ce:a8:b2:76:e6:65:b2:91:e2:75:12:84:41:70:1f:b3:fa: a3:b5:4a:b7:3b:b9:92:e8:b6:38:26:9e:60:a8:84:d4:e0:5d: 9c:76:43:20:f0:2b:45:a6:17:36:8f:9a:a7:e2:90:a7:da:58: 88:0c:ca:53:07:ea:27:e8:a7:7a:d6:71:6e:cd:80:a3:0e:cf: d9:c3:7a:8f:eb:21:03:02:07:39:40:98:91:f7:05:80:7c:92: ee:05:92:1f:cf:0d:04:6d:40:f8:98:a6:41:57:c7:92:30:0a: 1a:86:74:0b:bd:42:f4:63:ee:8f:ac:0a:57:ed:64:b1:28:c0: 2f:b0:de:90:18:b8:33:ab:da:c0:ba:83:cf:bc:c0:21:1c:3f: 50:86:3d:4d:4d:c3:35:70:09:07:8a:c1:8f:de:bf:1d:2f:94: ee:47:e8:75:68:3b:53:67:5e:39:7a:6c:70:3c:4f:4b:a4:2b: c8:80:74:85 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPuKxFYkwxN6CORXJ/INjF8fbdzIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDExMzIwMDgzOFoX DTI2MDQxMzIzNTk1OVowejFJMEcGA1UEBRNAMzhlYTNkOTUyNWViNTEyZmViMjFi ZjI5ZDIyZDIzMTU0N2I3ZjAxOGQ0YjdjYzBlYzI4NzFkYmUwODk2MmMzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43WdiwBsadI0Eg879LVMORz0Yqle Ja2nm5lobl0QFBqLIwl6wECBeEe2rzqT/5T1gVWRAWNY0w8nL0bqHXfGH2pLvzCp B3bBrywVhPNahpQmu3YIP/JRm/wj5IkKsApbtS6pNAzVgphHpZ3WXWTCM1Lv/q38 fCbWov+S3/cSuGRVN2VeuHDNnU7G/6i3SGvmyH8jOI2ByzLswYi9rP8IN0bQ3AgJ kqw5F+mkhy9hzOSTpjyuZPu3hzoZZCmHd8uwu+EeWm8zuIFe/C1YT7q6XbuXigG0 q0JthvG5ypjhvdXMYIxHqJp76UBWcXA7eNUf9TxcQ3EHfSznGmWg9mHVBwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGGsnGgq40YcCPVWfB/GG8L38E9tMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0OGViZTEwLTUwNmYtNGE1Zi04MTU0LWZiYTJiNDE3NTRlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6yjAMA0GCSqGSIb3DQEBCwUAA4IBAQBuBi1zj04IzTT8Hljo giDFCQYJeQDWACNSHm1jck1QT+VUJDay+h/gRY09m/c9yDlS1fK8MFzqAcfanr0n TiGidnpxyrPTozmXzqiyduZlspHidRKEQXAfs/qjtUq3O7mS6LY4Jp5gqITU4F2c dkMg8CtFphc2j5qn4pCn2liIDMpTB+on6Kd61nFuzYCjDs/Zw3qP6yEDAgc5QJiR 9wWAfJLuBZIfzw0EbUD4mKZBV8eSMAoahnQLvUL0Y+6PrApX7WSxKMAvsN6QGLgz q9rAuoPPvMAhHD9Qhj1NTcM1cAkHisGP3r8dL5TuR+h1aDtTZ145emxwPE9LpCvI gHSF -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:35 2026 by rpki-client