This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa File: c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa (raw, json) Hash identifier: nZPjANF7vB5EyKJ8vPWVrmFWsfthFSNecS104oa96Ag= Subject key identifier: A7:89:F2:24:FB:46:12:26:29:90:9D:3B:1E:23:56:64:41:9F:3A:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14F2ECA21203F4B1A6B8C7EFF3AFDBB2403747 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa Signing time: Sun 09 Nov 2025 00:50:04 +0000 ROA not before: Sun 09 Nov 2025 00:50:04 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f2:ec:a2:12:03:f4:b1:a6:b8:c7:ef:f3:af:db:b2:40:37:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:50:04 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=db4564766857601bc1445fa9201d55e8b8218904be4784e220ac8c8f10e3605a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:5a:24:03:05:5d:4a:9b:14:59:21:9c:03: d4:f0:92:84:6b:2d:64:bb:30:6a:4c:41:21:4a:56: b7:35:64:4a:23:d0:ca:ca:6b:e9:b0:8f:d5:6f:15: df:cb:4c:44:de:ad:89:87:19:00:eb:95:73:49:d0: 3b:fe:61:6f:3c:6c:fb:a2:33:c7:44:29:43:7a:36: 53:e8:ea:06:7c:5b:20:89:17:99:74:d1:0a:78:59: ad:c8:cf:93:db:a3:10:08:1f:9d:36:f2:6c:21:d1: a6:1a:c0:17:c2:f6:cc:a8:32:42:b2:3c:43:c6:90: 00:cf:10:2f:ef:6b:20:16:69:23:6e:25:79:51:67: 06:73:81:a2:2b:35:bf:3e:95:77:69:ca:b0:8c:52: 14:22:c7:12:1c:78:c9:20:d9:da:f7:94:e9:95:bd: 17:dd:7c:b4:03:92:42:16:fc:cc:15:44:c9:e8:98: 6b:91:41:11:4c:9b:2c:e1:5e:15:9d:98:c2:a7:3b: 2a:5d:cc:3e:8d:9d:82:8c:32:f7:20:7d:a9:28:10: 91:b7:0c:ed:99:d2:eb:ae:dc:f4:18:b7:96:9c:ca: 15:76:0f:4b:d6:65:a5:8e:03:f1:38:a1:c4:5c:7b: 45:d7:52:6e:d0:49:3e:09:c1:09:7b:cd:48:21:5c: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:89:F2:24:FB:46:12:26:29:90:9D:3B:1E:23:56:64:41:9F:3A:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c5a1a1a0-4f4f-473d-bfac-fd46ff826004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:8400::/38 Signature Algorithm: sha256WithRSAEncryption 37:4b:8c:fd:5a:5b:68:8d:2e:b1:e7:61:80:7c:e5:55:34:d4: b7:10:e1:32:ea:4e:70:4f:38:38:4b:b3:40:c8:c4:d6:22:f6: 4c:87:b0:44:6f:38:f4:d7:5e:6a:87:8c:b1:89:1c:57:f6:83: 3c:00:be:71:1b:81:cf:80:73:58:6f:d9:0d:c8:45:51:37:fb: 74:eb:52:ba:4c:c6:3e:4b:09:f9:89:e2:b7:ec:cd:f4:64:ac: 29:d9:ab:d0:66:c3:bc:c7:75:48:1b:fd:d4:72:2d:b4:23:76: b4:6a:16:7c:c0:91:04:65:60:83:7d:1a:44:f5:29:3a:aa:f3: 9a:7d:00:28:f0:56:ce:aa:37:a2:5b:ab:c3:11:49:b0:93:c6: e8:d9:b5:0e:b2:82:d0:ca:cc:e8:51:e9:c8:7a:10:3a:3d:c5: 3e:3b:4b:5c:ab:e5:8c:73:dc:21:6e:50:73:9a:30:a3:e8:38: ce:f0:9b:7f:e8:eb:ce:fa:35:33:bb:1a:5f:08:c0:6a:2f:96: 3b:bb:50:1b:4a:09:9b:81:45:cb:da:bc:d5:ba:c5:db:31:f2: 7b:57:77:de:08:19:51:7a:de:58:6f:e2:62:87:ca:f9:6f:8c: 6f:f6:0f:2d:29:6c:83:4c:50:01:75:a3:15:15:8f:08:67:43: 16:11:f6:16 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITFPLsohID9LGmuMfv86/bskA3RzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjUxMTA5MDA1MDA0WhcN MjUxMjE0MjM1OTU5WjB6MUkwRwYDVQQFE0BkYjQ1NjQ3NjY4NTc2MDFiYzE0NDVm YTkyMDFkNTVlOGI4MjE4OTA0YmU0Nzg0ZTIyMGFjOGM4ZjEwZTM2MDVhMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjh1okAwVdSpsUWSGcA9TwkoRrLWS7 MGpMQSFKVrc1ZEoj0MrKa+mwj9VvFd/LTETerYmHGQDrlXNJ0Dv+YW88bPuiM8dE KUN6NlPo6gZ8WyCJF5l00Qp4Wa3Iz5PboxAIH5028mwh0aYawBfC9syoMkKyPEPG kADPEC/vayAWaSNuJXlRZwZzgaIrNb8+lXdpyrCMUhQixxIceMkg2dr3lOmVvRfd fLQDkkIW/MwVRMnomGuRQRFMmyzhXhWdmMKnOypdzD6NnYKMMvcgfakoEJG3DO2Z 0uuu3PQYt5acyhV2D0vWZaWOA/E4ocRce0XXUm7QST4JwQl7zUghXOK9AgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUp4nyJPtGEiYpkJ07HiNWZEGfOl0wHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv YzVhMWExYTAtNGY0Zi00NzNkLWJmYWMtZmQ0NmZmODI2MDA0LnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgIkBtoShDANBgkqhkiG9w0BAQsFAAOCAQEAN0uM/VpbaI0usedhgHzl VTTUtxDhMupOcE84OEuzQMjE1iL2TIewRG849NdeaoeMsYkcV/aDPAC+cRuBz4Bz WG/ZDchFUTf7dOtSukzGPksJ+Ynit+zN9GSsKdmr0GbDvMd1SBv91HIttCN2tGoW fMCRBGVgg30aRPUpOqrzmn0AKPBWzqo3olurwxFJsJPG6Nm1DrKC0MrM6FHpyHoQ Oj3FPjtLXKvljHPcIW5Qc5owo+g4zvCbf+jrzvo1M7saXwjAai+WO7tQG0oJm4FF y9q81brF2zHye1d33ggZUXreWG/iYofK+W+Mb/YPLSlsg0xQAXWjFRWPCGdDFhH2 Fg== -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:42 2025 by rpki-client