This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa File: bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa (raw, json) Hash identifier: 5WpWayVOeD8F4lfok7Je1UlglPYlsRS5ukG5AGisPAY= Subject key identifier: 95:5A:4C:15:BF:B7:A0:43:FB:71:4E:5E:CC:59:66:54:68:F5:93:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DE11B0AD10609911013E5B5169F564CC34EB5C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa Signing time: Sat 08 Nov 2025 00:00:09 +0000 ROA not before: Sat 08 Nov 2025 00:00:09 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e1:1b:0a:d1:06:09:91:10:13:e5:b5:16:9f:56:4c:c3:4e:b5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:00:09 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=a841e0e8cecd706ad1c424ef4a85320cd4538579fff6f3b01505d2566f880741, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:5f:83:f7:9c:f7:cd:4b:fb:9b:4c:1d:ef: 24:4f:53:66:fa:1a:4b:84:0b:ec:31:e1:b4:bd:ed: 4a:ab:97:73:f5:02:c7:73:ed:4a:5e:f9:a7:8b:96: ea:42:7f:7e:a4:20:06:63:88:9b:cf:cc:47:bc:fd: ad:a7:18:42:b5:7a:fb:8f:9f:7e:a4:6d:54:0d:11: 74:81:66:2c:a5:1e:39:a5:6f:2e:73:b1:0f:17:1b: d3:e2:9f:27:a8:4f:af:b2:dd:8f:fe:8d:b7:52:66: 79:42:c5:3c:8b:b3:ac:7b:d6:f6:6d:64:8d:33:62: 39:f9:2b:ae:f0:38:d0:81:86:2a:78:cb:97:90:e9: a6:63:59:0b:d3:71:de:90:39:cc:9c:60:f1:0d:41: bc:bd:1d:3b:6e:d7:6f:23:b5:40:f2:66:ab:47:f2: 70:d5:62:36:dd:4f:16:13:c8:29:6c:d8:39:21:40: be:e4:ca:87:68:2d:f5:7b:f0:e3:6f:9c:cd:26:99: 38:43:e5:8f:06:1d:51:24:e6:95:32:fb:58:ad:9d: a5:75:fd:43:51:40:ae:02:47:7a:94:d5:06:b0:6d: 1e:f0:b6:97:88:cc:c8:1d:1d:99:df:f3:15:5c:4a: 7d:5c:b9:72:d2:de:d7:c1:2b:bf:49:cc:07:9c:98: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5A:4C:15:BF:B7:A0:43:FB:71:4E:5E:CC:59:66:54:68:F5:93:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bb33c6e9-83b9-43c3-b458-53adf7b3e53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:7000::/40 Signature Algorithm: sha256WithRSAEncryption 78:79:40:71:f6:24:0e:5c:45:8f:a3:5c:b2:20:a7:2a:fa:e1: 59:bf:69:82:76:88:4e:a8:f7:be:11:2a:7c:41:05:7f:1a:29: 5d:94:71:17:64:95:46:e0:3a:43:a8:97:21:69:58:4b:23:a9: 30:24:b4:77:19:79:bf:16:c8:5f:7a:be:90:f9:e8:93:e4:df: 4c:07:f4:52:b2:a4:c8:34:f8:87:eb:69:8d:36:b2:e5:c2:13: 1b:60:39:ff:c4:5b:f5:4c:4b:c8:57:8f:03:a3:fa:18:fd:43: 2d:64:6d:8c:d5:ba:a7:1a:c1:62:53:4d:cf:d7:24:7f:67:93: f0:d3:5a:bb:ce:28:67:2c:c4:37:b0:8b:8d:e4:7a:5c:7e:d5: 3b:17:46:4d:94:fe:56:cd:8f:cb:a1:74:5d:4b:0f:83:f3:a4: f4:bb:73:78:45:0f:d1:0c:6e:ff:6e:1e:c9:94:dd:e9:de:d1: c6:7e:cd:69:08:18:20:5c:24:dc:3e:4c:ef:ed:41:d0:85:a0: c9:09:52:0a:50:0d:0e:3b:a0:d9:82:22:e8:38:28:11:53:ed: 48:fd:d8:92:fa:91:da:ec:e9:02:74:f0:39:58:1e:84:6a:5e: 1d:9a:99:bf:ac:82:88:97:1b:f9:25:eb:8f:f5:ab:d2:da:52: 91:1c:b5:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPeEbCtEGCZEQE+W1Fp9WTMNOtckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDAwOVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAYTg0MWUwZThjZWNkNzA2YWQxYzQy NGVmNGE4NTMyMGNkNDUzODU3OWZmZjZmM2IwMTUwNWQyNTY2Zjg4MDc0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu5fg/ec981L+5tMHe8kT1Nm+hpL hAvsMeG0ve1Kq5dz9QLHc+1KXvmni5bqQn9+pCAGY4ibz8xHvP2tpxhCtXr7j59+ pG1UDRF0gWYspR45pW8uc7EPFxvT4p8nqE+vst2P/o23UmZ5QsU8i7Ose9b2bWSN M2I5+Suu8DjQgYYqeMuXkOmmY1kL03HekDnMnGDxDUG8vR07btdvI7VA8marR/Jw 1WI23U8WE8gpbNg5IUC+5MqHaC31e/Djb5zNJpk4Q+WPBh1RJOaVMvtYrZ2ldf1D UUCuAkd6lNUGsG0e8LaXiMzIHR2Z3/MVXEp9XLly0t7XwSu/ScwHnJj7JwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJVaTBW/t6BD+3FOXsxZZlRo9ZN5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JiMzNjNmU5LTgzYjktNDNjMy1iNDU4LTUzYWRmN2IzZTUzZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAHAwDQYJKoZIhvcNAQELBQADggEBAHh5QHH2JA5cRY+jXLIg pyr64Vm/aYJ2iE6o974RKnxBBX8aKV2UcRdklUbgOkOolyFpWEsjqTAktHcZeb8W yF96vpD56JPk30wH9FKypMg0+IfraY02suXCExtgOf/EW/VMS8hXjwOj+hj9Qy1k bYzVuqcawWJTTc/XJH9nk/DTWrvOKGcsxDewi43kelx+1TsXRk2U/lbNj8uhdF1L D4PzpPS7c3hFD9EMbv9uHsmU3ene0cZ+zWkIGCBcJNw+TO/tQdCFoMkJUgpQDQ47 oNmCIug4KBFT7Uj92JL6kdrs6QJ08DlYHoRqXh2amb+sgoiXG/kl64/1q9LaUpEc tW0= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:44 2025 by rpki-client