This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59282ae-6903-45f8-98c4-8d23be381568.roa
File: d59282ae-6903-45f8-98c4-8d23be381568.roa (raw, json)
Hash identifier: T68TmHkhXGbSR/FinEuyKrgj4266C6xwtiZsore3sgw=
Subject key identifier: 0D:01:36:36:D1:C1:82:B0:1D:00:0F:4A:67:6B:90:25:67:8C:05:24
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 76F9137B8F12EE382B79ED764887479716BFFDEA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59282ae-6903-45f8-98c4-8d23be381568.roa
Signing time: Tue 13 Jan 2026 20:08:43 +0000
ROA not before: Tue 13 Jan 2026 20:08:43 +0000
ROA not after: Mon 13 Apr 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daeb:7040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Jan 2026 20:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f9:13:7b:8f:12:ee:38:2b:79:ed:76:48:87:47:97:16:bf:fd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Jan 13 20:08:43 2026 GMT
Not After : Apr 13 23:59:59 2026 GMT
Subject: serialNumber=962bcec5fdd365d3658e816fb8b7ae960dcca4285c30b83af0eae6eab51c7f81, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:ea:58:f1:fa:99:50:c3:a4:44:90:71:45:
3d:7b:ba:6c:d8:19:cb:6c:c2:c1:f0:81:63:51:ab:
49:e7:b1:39:cb:34:52:52:44:40:f3:42:52:fb:5b:
cd:c9:90:0c:37:9e:a2:2c:72:98:c7:2a:c2:5e:36:
06:9a:ec:9b:d3:ce:29:d5:5b:ec:26:13:57:0b:05:
35:1a:7b:83:ca:8a:ad:7e:0f:18:fa:72:04:a9:59:
c7:70:61:fd:71:f6:d7:a3:7a:f0:6f:96:63:0d:09:
e2:74:58:a0:bb:c2:b0:dc:e6:9b:63:3b:65:05:2a:
69:b4:a6:1e:81:26:2d:f8:bb:69:43:63:13:b9:46:
a7:35:22:8b:78:da:1e:d0:aa:84:81:9e:bf:f1:0f:
da:ed:88:0d:fc:2f:5f:97:f8:1e:d2:a9:89:25:d8:
31:b6:f7:88:b1:0c:4f:3c:6b:e9:ae:32:92:87:cf:
41:01:e4:03:4c:0e:67:57:b5:11:3c:b8:e6:2e:74:
9a:cb:c2:c2:e2:21:8d:21:20:8e:48:5b:c2:34:5c:
b2:5b:ed:3c:70:77:0b:d3:20:ba:76:35:86:82:66:
82:17:99:69:ed:12:32:cd:c6:5e:fd:4c:c1:3d:c4:
2f:02:32:6a:26:46:4f:7f:ed:40:4e:dd:17:db:ff:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:36:36:D1:C1:82:B0:1D:00:0F:4A:67:6B:90:25:67:8C:05:24
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d59282ae-6903-45f8-98c4-8d23be381568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daeb:7040::/48
Signature Algorithm: sha256WithRSAEncryption
13:4d:f4:28:19:7e:d6:4f:3f:44:b3:c0:0b:68:26:ac:24:90:
43:ee:03:40:dd:d7:6c:08:a4:87:7f:34:03:c3:2b:17:34:c4:
e6:b7:86:a6:c0:82:f3:85:46:80:36:0f:cd:d0:f9:0c:31:5a:
2d:c4:5c:de:e9:0f:fa:07:08:92:cf:ef:4f:ec:f6:27:0a:a6:
89:48:52:9c:84:b7:96:f5:98:26:68:17:a4:d0:8f:14:61:9f:
99:a1:d4:0b:7c:f9:e5:2a:d8:bd:c9:0b:d2:09:7e:90:fe:89:
bb:ed:07:3e:1b:e7:4e:29:34:49:1b:64:2d:35:62:35:3e:d9:
59:97:33:3f:dd:07:d7:f2:62:36:10:44:53:12:34:f0:a4:43:
5c:3e:38:c8:c6:d3:a3:13:a6:68:0d:ae:7a:06:f5:41:9f:45:
bd:32:db:7d:23:e1:ad:f0:ae:dd:8a:29:e1:0c:ea:0f:e4:ac:
d8:72:61:a7:34:72:68:6e:d7:fd:ce:ed:7b:e9:00:eb:dc:6f:
f8:9f:a9:6b:51:6a:52:2f:1f:6a:4e:aa:f8:c4:0e:c5:f4:b2:
94:a4:32:58:d7:d4:d3:45:28:b3:4f:bc:8f:c5:6c:33:ad:45:
a5:58:1b:ff:44:35:d6:16:f8:4a:5a:16:b2:7d:63:d8:09:b8:
b8:f5:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:41 2026 by rpki-client