This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa File: 2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa (raw, json) Hash identifier: G3l6fzDbe3ZIhMEXgeSlJzm5mpycDFzrZ+4dgE3/8YM= Subject key identifier: 13:78:A6:86:5C:C2:DB:F3:90:0D:4F:E6:53:15:3C:00:D8:E2:1D:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69962744BB1A43457DFA82AECA7922A455E06DF5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa Signing time: Fri 07 Nov 2025 00:30:46 +0000 ROA not before: Fri 07 Nov 2025 00:30:46 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:96:27:44:bb:1a:43:45:7d:fa:82:ae:ca:79:22:a4:55:e0:6d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:30:46 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=a4efb62b4435819213416344743485c1eca56186be008222ef59ad3258eefad1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9b:2f:e2:f8:eb:b2:8d:ef:82:f2:75:2a:1d: 31:0d:28:3d:2d:02:58:e3:f8:e6:e4:c2:82:fd:a2: c6:37:e6:59:28:c9:3a:03:f9:12:f5:36:68:3c:7b: f2:79:e5:b0:76:db:6c:b0:ab:7c:6d:9d:9d:e7:3e: d8:a9:ce:61:67:cf:9e:97:99:19:e8:49:89:d3:25: 2b:1c:97:21:ea:16:5b:7d:c8:ef:43:5a:87:89:d8: 7e:96:87:f8:78:5e:b5:57:f9:e6:a5:3c:af:da:d2: c5:53:60:11:6d:b2:b2:b3:1b:a2:43:d4:b0:12:a2: 2b:6b:37:f2:4d:75:96:7b:ca:ff:6d:4f:49:2d:70: 2d:f6:25:83:19:5d:89:34:a8:15:8f:61:d9:17:97: 51:0a:b1:92:4e:c9:27:e8:13:3e:34:03:ed:80:6a: 49:9b:08:4e:e6:e9:b6:05:61:c3:21:ed:f7:47:b1: 41:b9:43:77:a6:ad:d0:45:81:76:9d:b7:00:a0:70: 3d:e5:8d:8d:96:18:20:e8:3f:e5:4a:a9:9d:15:66: ce:13:8a:97:cd:ae:13:97:a9:ce:3f:d5:19:d3:1b: b9:7b:36:10:0c:40:45:a2:84:d0:11:f2:e9:79:18: 61:d4:2a:04:cd:db:9f:21:e5:f4:c8:3e:ac:2b:bf: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:A6:86:5C:C2:DB:F3:90:0D:4F:E6:53:15:3C:00:D8:E2:1D:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f5f7c96-cbf6-4cd7-a2da-6c86ff029673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c840::/48 Signature Algorithm: sha256WithRSAEncryption 58:4d:93:7e:b8:83:57:24:c1:e0:ce:a7:8a:43:ff:73:94:86: d4:7c:06:57:21:a4:90:03:96:6a:bb:c6:72:b8:bb:79:49:6a: 17:53:89:35:64:76:c7:09:13:00:ad:80:ea:f3:27:0f:1c:7a: ad:ae:dc:2f:a9:d4:13:72:5c:a3:5e:c1:ca:ef:08:4c:be:54: 98:a5:f5:fe:8f:1d:31:01:fd:c8:80:c4:cd:05:5b:13:36:c6: 73:e8:b6:c5:1e:93:d9:3f:15:40:7a:bd:b6:37:70:9b:2a:0f: 6f:30:f4:ff:72:ed:a5:d3:77:2f:79:96:b5:50:bb:2e:8a:bf: 63:2a:67:57:e7:47:24:fa:29:31:3f:b7:2a:3f:f9:47:7b:98: 39:14:08:56:b9:17:4b:03:8f:02:2d:04:d5:2a:d9:4b:e3:1d: 49:ba:14:6b:5c:9c:ca:ae:47:f2:c0:75:38:38:f3:9d:df:98: 7c:1e:a7:c1:16:4c:05:a5:ea:93:9f:5e:b5:fa:41:a3:83:aa: 6e:14:b4:d0:d9:7c:a8:68:c2:33:c8:2b:c6:2e:00:18:08:fc: e4:ea:00:0b:f7:a9:c4:cd:da:51:f7:c8:ee:03:df:a7:9b:03: 31:f0:64:8e:ed:51:2d:f1:ec:3d:53:83:55:40:94:53:c9:5d: 83:18:78:55 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaZYnRLsaQ0V9+oKuynkipFXgbfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMzA0NloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAYTRlZmI2MmI0NDM1ODE5MjEzNDE2 MzQ0NzQzNDg1YzFlY2E1NjE4NmJlMDA4MjIyZWY1OWFkMzI1OGVlZmFkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Jsv4vjrso3vgvJ1Kh0xDSg9LQJY 4/jm5MKC/aLGN+ZZKMk6A/kS9TZoPHvyeeWwdttssKt8bZ2d5z7Yqc5hZ8+el5kZ 6EmJ0yUrHJch6hZbfcjvQ1qHidh+lof4eF61V/nmpTyv2tLFU2ARbbKysxuiQ9Sw EqIrazfyTXWWe8r/bU9JLXAt9iWDGV2JNKgVj2HZF5dRCrGSTskn6BM+NAPtgGpJ mwhO5um2BWHDIe33R7FBuUN3pq3QRYF2nbcAoHA95Y2Nlhgg6D/lSqmdFWbOE4qX za4Tl6nOP9UZ0xu5ezYQDEBFooTQEfLpeRhh1CoEzdufIeX0yD6sK78IzwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBN4poZcwtvzkA1P5lMVPADY4h14MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNWY3Yzk2LWNiZjYtNGNkNy1hMmRhLTZjODZmZjAyOTY3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8hAMA0GCSqGSIb3DQEBCwUAA4IBAQBYTZN+uINXJMHgzqeK Q/9zlIbUfAZXIaSQA5Zqu8ZyuLt5SWoXU4k1ZHbHCRMArYDq8ycPHHqtrtwvqdQT clyjXsHK7whMvlSYpfX+jx0xAf3IgMTNBVsTNsZz6LbFHpPZPxVAer22N3CbKg9v MPT/cu2l03cveZa1ULsuir9jKmdX50ck+ikxP7cqP/lHe5g5FAhWuRdLA48CLQTV KtlL4x1JuhRrXJzKrkfywHU4OPOd35h8HqfBFkwFpeqTn161+kGjg6puFLTQ2Xyo aMIzyCvGLgAYCPzk6gAL96nEzdpR98juA9+nmwMx8GSO7VEt8ew9U4NVQJRTyV2D GHhV -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:57 2025 by rpki-client