This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa File: b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa (raw, json) Hash identifier: FYjqdr17VWHO00jMO6LO/J3nVcboPj+IBBZVTxPTKt0= Subject key identifier: BF:D0:4D:EB:49:DF:AE:08:B1:5B:2B:5B:E9:D1:A7:FF:38:48:DB:E6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 034C8354A0528C3E6FD4E6EA31D5B4BD9555DE4C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa Signing time: Fri 07 Nov 2025 00:40:46 +0000 ROA not before: Fri 07 Nov 2025 00:40:46 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4c:83:54:a0:52:8c:3e:6f:d4:e6:ea:31:d5:b4:bd:95:55:de:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:40:46 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=5dfef9f2fb2fdc24f1c8079c52b8f04e02b034ebec67f487bd9986e02a53bc25, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:15:70:b6:30:ef:b7:bb:9c:60:67:4a:63:c3: 59:07:68:a9:f3:7d:36:c1:25:9b:c2:58:ec:2d:fc: 57:ec:25:79:a3:46:a3:c7:5d:40:dd:20:c5:8a:9f: 02:98:06:83:31:73:ef:49:84:7c:da:98:47:01:02: cd:2e:92:4b:15:4b:d0:f1:50:5b:e5:ac:1c:b1:4d: 01:e6:7a:65:c0:21:db:dd:d6:c6:65:36:52:bf:37: 22:cc:ac:80:40:52:74:af:78:59:97:09:a8:bc:da: 1d:15:75:74:15:5c:bf:4a:3c:b4:c6:0a:93:43:8b: 6d:51:e3:1f:61:ff:11:9b:eb:80:59:14:6a:76:1f: 6a:40:45:09:58:35:04:e8:59:92:71:c4:9f:71:48: 25:e8:78:90:2c:4d:e1:5a:2d:bb:3f:e1:93:e4:d6: be:e2:fd:66:b7:02:42:f7:e3:f8:07:df:ed:c4:7b: f8:48:7c:ca:1e:86:67:79:ef:2a:26:b3:9a:6f:9c: 9b:04:b9:b5:8c:3e:cd:bb:06:55:0f:89:48:c2:98: 49:a6:66:62:5b:4b:84:f1:6c:16:7a:9f:f6:48:63: 97:f6:11:45:fc:f7:bf:6b:f9:44:e6:1d:19:7c:dd: 31:c5:88:86:16:f6:9e:c9:4d:8f:80:7a:81:17:50: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:4D:EB:49:DF:AE:08:B1:5B:2B:5B:E9:D1:A7:FF:38:48:DB:E6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3efb515-ba78-4d38-a2d5-bc14f4911d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:1080::/48 Signature Algorithm: sha256WithRSAEncryption bd:3f:f5:6d:80:8a:c1:bc:52:8b:8a:6b:5f:45:13:40:93:b1: 77:a0:79:55:7d:9c:9e:91:c2:70:ed:89:a1:90:50:8a:a3:9f: 05:ba:4d:b9:8c:22:81:ba:68:8d:b0:7a:04:fe:0b:aa:17:f3: f1:3f:2c:de:d4:84:e7:2f:2b:2b:3a:6a:c9:94:8e:d8:07:78: 02:e5:f5:89:4e:a6:e6:01:3e:7a:92:7a:a1:cd:cd:4b:28:e7: 9e:74:a8:92:8f:1d:53:c8:86:04:14:c5:38:92:e2:82:f3:97: 70:22:80:6c:b2:09:ef:57:82:6a:e3:23:91:d5:a5:5e:8d:c9: ff:a9:e5:e7:ca:8c:91:ee:43:93:8a:b1:45:9f:45:9b:2e:64: 4c:37:09:3c:c6:97:ae:7c:3c:ea:5c:2a:2b:af:93:fe:f5:3c: 43:79:28:d7:8b:98:ec:25:79:cd:f1:dc:fb:33:4a:24:29:63: e8:17:bc:0e:f0:eb:09:6d:da:5f:3b:ae:ca:5e:32:d3:80:87: ff:b9:b2:b5:0e:c1:e1:6f:4f:ca:6b:b3:98:95:99:7a:76:05: fe:43:3f:57:f0:b1:11:9f:53:c7:ba:6c:af:74:49:e3:43:0c: 61:a1:42:79:ec:72:56:51:5a:5d:c6:8a:52:6a:63:3b:a9:46: 9f:28:03:f0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUA0yDVKBSjD5v1ObqMdW0vZVV3kwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNDA0NloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANWRmZWY5ZjJmYjJmZGMyNGYxYzgw NzljNTJiOGYwNGUwMmIwMzRlYmVjNjdmNDg3YmQ5OTg2ZTAyYTUzYmMyNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hVwtjDvt7ucYGdKY8NZB2ip8302 wSWbwljsLfxX7CV5o0ajx11A3SDFip8CmAaDMXPvSYR82phHAQLNLpJLFUvQ8VBb 5awcsU0B5nplwCHb3dbGZTZSvzcizKyAQFJ0r3hZlwmovNodFXV0FVy/Sjy0xgqT Q4ttUeMfYf8Rm+uAWRRqdh9qQEUJWDUE6FmSccSfcUgl6HiQLE3hWi27P+GT5Na+ 4v1mtwJC9+P4B9/txHv4SHzKHoZnee8qJrOab5ybBLm1jD7NuwZVD4lIwphJpmZi W0uE8WwWep/2SGOX9hFF/Pe/a/lE5h0ZfN0xxYiGFvaeyU2PgHqBF1BlTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL/QTetJ364IsVsrW+nRp/84SNvmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzZWZiNTE1LWJhNzgtNGQzOC1hMmQ1LWJjMTRmNDkxMWQ2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYRCAMA0GCSqGSIb3DQEBCwUAA4IBAQC9P/VtgIrBvFKLimtf RRNAk7F3oHlVfZyekcJw7YmhkFCKo58Fuk25jCKBumiNsHoE/guqF/PxPyze1ITn LysrOmrJlI7YB3gC5fWJTqbmAT56knqhzc1LKOeedKiSjx1TyIYEFMU4kuKC85dw IoBssgnvV4Jq4yOR1aVejcn/qeXnyoyR7kOTirFFn0WbLmRMNwk8xpeufDzqXCor r5P+9TxDeSjXi5jsJXnN8dz7M0okKWPoF7wO8OsJbdpfO67KXjLTgIf/ubK1DsHh b0/Ka7OYlZl6dgX+Qz9X8LERn1PHumyvdEnjQwxhoUJ57HJWUVpdxopSamM7qUaf KAPw -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:54 2025 by rpki-client