This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baf7dd77-a5c3-427e-a0b3-8e29c32e1c1f.roa File: baf7dd77-a5c3-427e-a0b3-8e29c32e1c1f.roa (raw, json) Hash identifier: HQ3dRIlH1W3pZpUhbWP+1sDrzjwdWiq5zx7Hjkp2Idk= Subject key identifier: 8A:57:77:E9:3B:95:B4:A8:46:B9:5D:38:37:01:E8:9C:83:31:E6:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01C7DA355C64D1F5DFB423A11C47DD414C07D78F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baf7dd77-a5c3-427e-a0b3-8e29c32e1c1f.roa Signing time: Sat 08 Nov 2025 00:01:06 +0000 ROA not before: Sat 08 Nov 2025 00:01:06 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c7:da:35:5c:64:d1:f5:df:b4:23:a1:1c:47:dd:41:4c:07:d7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:01:06 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=4977e2407f89b875353e611941defe9e2ec10dd84678ef46ff69023d16fd7543, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:7e:fd:ba:79:24:04:5d:6f:c3:83:a1:ab: 05:12:11:3a:1e:a9:2f:1c:87:1e:e0:23:b3:97:2d: 7c:73:7e:bc:eb:f8:61:a3:34:c5:0c:c9:fd:2c:32: 1b:fb:39:c5:04:62:26:ec:f3:ea:14:fe:87:72:28: a6:5b:04:cb:9f:a7:e8:aa:c2:65:67:36:a0:e7:89: 8f:6c:70:d0:ab:44:94:ac:55:68:89:fe:da:e2:b9: e7:fc:f7:86:39:db:7c:d3:70:1a:15:6d:23:ad:cd: 73:24:81:3d:2a:2a:e2:2e:ae:20:b0:b0:f1:32:dc: fe:20:46:78:41:d1:87:47:36:cd:1c:ad:ba:40:ad: 71:a9:8e:95:0f:85:1e:2d:51:c6:b2:e3:b9:f4:23: a9:57:b0:e0:26:8f:27:ea:8f:86:4c:b4:e4:5a:88: 91:4d:ad:b4:1d:f0:b9:24:96:05:d2:64:af:91:db: 58:73:30:ee:52:09:b1:71:bb:79:7f:7a:db:86:b4: f5:93:50:e1:c8:d6:ae:c6:53:aa:01:15:04:57:11: 4a:ba:b4:ab:ab:c6:b7:fe:ac:fc:3c:e9:5c:a3:de: 5a:bd:c8:09:41:d8:81:de:3b:c3:b0:91:67:f0:9d: 8c:ed:7b:47:c3:bd:61:d7:1d:67:bf:cb:b2:17:9d: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:77:E9:3B:95:B4:A8:46:B9:5D:38:37:01:E8:9C:83:31:E6:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baf7dd77-a5c3-427e-a0b3-8e29c32e1c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:b000::/48 Signature Algorithm: sha256WithRSAEncryption 64:f7:f9:3e:d9:21:e5:7c:e3:84:72:89:89:55:4d:42:4b:bb: 06:54:b7:85:5d:97:2e:49:b6:95:d6:f1:73:82:fd:f1:08:91: ed:e8:cd:6d:55:96:56:dd:d9:0f:22:2e:77:c3:78:30:96:50: 1d:e5:fd:c5:86:63:97:49:b9:3a:ac:c4:5c:a4:b2:b5:4c:c4: f4:30:ba:46:42:eb:e4:f9:69:b3:00:9a:5a:0a:9a:85:1b:a0: 9f:e8:a7:fb:16:b5:7b:af:2c:0e:03:1c:28:ea:04:56:ff:f5: f2:46:73:78:c8:e1:ea:99:cf:49:90:4a:29:1c:37:08:6d:74: 6b:5d:69:5b:81:d1:b2:02:de:b8:7e:3f:24:7d:43:b2:37:4f: 29:61:d1:24:9a:12:9b:9a:df:af:04:b3:c9:99:97:79:9b:63: e6:32:50:74:3b:8f:d4:91:99:0c:bb:04:1f:f0:3e:9e:89:15: 08:b3:5e:ba:0c:32:dd:8f:d3:44:90:3e:37:f9:be:61:5f:eb: 0b:bb:b4:6b:68:ef:cc:e6:b7:b6:2b:d3:70:83:a9:6d:94:c3: b2:59:d5:70:f4:dd:a9:5e:de:43:32:36:86:55:19:43:b0:a7: b9:09:1f:0c:79:35:d9:15:c5:95:5c:d9:43:0a:66:27:f9:ca: fc:99:10:d8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAcfaNVxk0fXftCOhHEfdQUwH148wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDEwNloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNANDk3N2UyNDA3Zjg5Yjg3NTM1M2U2 MTE5NDFkZWZlOWUyZWMxMGRkODQ2NzhlZjQ2ZmY2OTAyM2QxNmZkNzU0MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRB+/bp5JARdb8ODoasFEhE6Hqkv HIce4COzly18c3686/hhozTFDMn9LDIb+znFBGIm7PPqFP6HciimWwTLn6foqsJl Zzag54mPbHDQq0SUrFVoif7a4rnn/PeGOdt803AaFW0jrc1zJIE9KiriLq4gsLDx Mtz+IEZ4QdGHRzbNHK26QK1xqY6VD4UeLVHGsuO59COpV7DgJo8n6o+GTLTkWoiR Ta20HfC5JJYF0mSvkdtYczDuUgmxcbt5f3rbhrT1k1DhyNauxlOqARUEVxFKurSr q8a3/qz8POlco95avcgJQdiB3jvDsJFn8J2M7XtHw71h1x1nv8uyF50cUQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIpXd+k7lbSoRrldODcB6JyDMeZBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhZjdkZDc3LWE1YzMtNDI3ZS1hMGIzLThlMjljMzJlMWMxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7LAAMA0GCSqGSIb3DQEBCwUAA4IBAQBk9/k+2SHlfOOEcomJ VU1CS7sGVLeFXZcuSbaV1vFzgv3xCJHt6M1tVZZW3dkPIi53w3gwllAd5f3FhmOX Sbk6rMRcpLK1TMT0MLpGQuvk+WmzAJpaCpqFG6Cf6Kf7FrV7rywOAxwo6gRW//Xy RnN4yOHqmc9JkEopHDcIbXRrXWlbgdGyAt64fj8kfUOyN08pYdEkmhKbmt+vBLPJ mZd5m2PmMlB0O4/UkZkMuwQf8D6eiRUIs166DDLdj9NEkD43+b5hX+sLu7RraO/M 5re2K9Nwg6ltlMOyWdVw9N2pXt5DMjaGVRlDsKe5CR8MeTXZFcWVXNlDCmYn+cr8 mRDY -----END CERTIFICATE-----Generated at Tue Nov 18 14:47:16 2025 by rpki-client