This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa File: 07945819-d82c-427a-b71b-535d57170872.roa (raw, json) Hash identifier: 5vCkYpoorHQEYfjvnhZpHzGuypVtYQZBDI2Gq4P+TWo= Subject key identifier: 4C:14:9B:B9:5A:4D:97:BA:A5:39:11:9B:58:06:8C:33:F3:53:05:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A0463663E0673D00AF5D6D67205536A90BE7F77 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa Signing time: Sat 08 Nov 2025 00:00:05 +0000 ROA not before: Sat 08 Nov 2025 00:00:05 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:04:63:66:3e:06:73:d0:0a:f5:d6:d6:72:05:53:6a:90:be:7f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:00:05 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=e8ec9419dcff5003042946c3a6c05aca87dce3f23d5ea6341756d42f7aebd0c4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:69:a2:a2:fd:d4:0b:3d:95:fd:7f:d0:39: bf:99:03:2a:a8:63:ba:bc:d6:a5:de:b4:f9:a1:0b: c1:d8:4b:b7:a2:34:7c:37:c4:f1:7a:98:30:a9:c5: 85:2b:2f:21:b8:03:00:52:82:cf:05:99:e8:03:f0: d4:14:c5:99:7c:8e:20:04:eb:8a:c6:20:3c:c9:b0: 13:05:df:20:cb:16:d4:97:82:50:6a:1a:15:e5:70: cd:4d:1c:cc:f7:19:f4:a5:8a:40:0e:e8:4e:dd:54: 55:9b:40:3d:f8:a8:f9:78:77:03:db:57:96:e0:e8: b1:e9:18:08:f0:2e:f5:75:50:6d:5b:df:1b:30:53: fa:a2:0f:0b:66:86:2b:fb:a3:f1:98:f7:36:08:a6: 64:c8:2b:85:50:dc:dc:2a:91:62:4a:45:9b:95:62: 31:f4:b8:a1:2b:8c:2c:45:72:be:95:ce:cd:c4:8d: 8d:b5:d8:68:9c:0f:d6:7d:7f:a8:b7:a0:98:2d:d3: ce:f2:f7:30:23:3f:0c:fe:96:4a:72:7c:6a:98:0a: 40:d3:06:43:f4:2d:33:f6:ab:68:e7:6d:e1:2e:3f: b6:d5:b4:4e:fb:1f:0d:7d:fb:43:30:e8:06:1d:56: 79:a1:52:28:ba:c8:cc:e1:89:70:fa:85:a1:9c:9b: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:14:9B:B9:5A:4D:97:BA:A5:39:11:9B:58:06:8C:33:F3:53:05:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07945819-d82c-427a-b71b-535d57170872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption ca:02:76:99:91:84:ac:90:63:26:67:0f:6e:00:09:08:e5:34: 92:b5:4b:98:e6:26:75:cf:2f:74:6d:dc:00:5a:7b:6d:c7:99: c1:7e:7a:7d:1c:09:bd:9a:32:c1:2a:7d:cc:7f:09:b6:7d:7e: e0:6e:ed:d3:03:e4:27:f5:13:f9:c0:04:0d:79:94:25:af:e3: 36:ab:20:c8:06:da:82:ff:e3:9b:1d:77:78:38:44:ae:b6:17: 69:23:7d:51:dd:cd:27:f5:82:81:fa:5e:1f:24:c7:01:6f:30: 79:be:d3:9c:4c:ea:4a:d8:d5:e9:4e:9f:68:b2:a6:26:54:e0: 86:2c:33:d2:01:6d:b1:54:0c:ac:fa:e9:7d:35:e2:f3:c9:77: f2:b0:a1:28:5f:98:d9:e5:d2:29:69:9e:5e:09:28:e4:8d:b3: 43:f8:36:ff:77:fa:d8:24:39:69:ee:fd:88:f7:e9:38:80:28: 0d:14:0b:6e:98:6c:a6:1d:13:f0:5e:4d:66:ce:45:06:b6:cc: 2d:8a:47:0f:df:01:73:d7:40:96:a2:78:74:69:0f:e7:48:1d: 97:5b:e4:f0:9f:78:4d:c4:9c:22:b6:e2:79:73:3f:3b:af:54: 73:9b:a6:46:4c:a4:c7:cd:df:6d:14:6d:93:2f:3f:ca:cc:d8: 7f:62:ae:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGgRjZj4Gc9AK9dbWcgVTapC+f3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDAwNVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAZThlYzk0MTlkY2ZmNTAwMzA0Mjk0 NmMzYTZjMDVhY2E4N2RjZTNmMjNkNWVhNjM0MTc1NmQ0MmY3YWViZDBjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aZpoqL91As9lf1/0Dm/mQMqqGO6 vNal3rT5oQvB2Eu3ojR8N8TxepgwqcWFKy8huAMAUoLPBZnoA/DUFMWZfI4gBOuK xiA8ybATBd8gyxbUl4JQahoV5XDNTRzM9xn0pYpADuhO3VRVm0A9+Kj5eHcD21eW 4Oix6RgI8C71dVBtW98bMFP6og8LZoYr+6PxmPc2CKZkyCuFUNzcKpFiSkWblWIx 9LihK4wsRXK+lc7NxI2NtdhonA/WfX+ot6CYLdPO8vcwIz8M/pZKcnxqmApA0wZD 9C0z9qto523hLj+21bRO+x8NfftDMOgGHVZ5oVIousjM4Ylw+oWhnJsu2wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEwUm7laTZe6pTkRm1gGjDPzUwVeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3OTQ1ODE5LWQ4MmMtNDI3YS1iNzFiLTUzNWQ1NzE3MDg3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBAMoCdpmRhKyQYyZnD24A CQjlNJK1S5jmJnXPL3Rt3ABae23HmcF+en0cCb2aMsEqfcx/CbZ9fuBu7dMD5Cf1 E/nABA15lCWv4zarIMgG2oL/45sdd3g4RK62F2kjfVHdzSf1goH6Xh8kxwFvMHm+ 05xM6krY1elOn2iypiZU4IYsM9IBbbFUDKz66X014vPJd/KwoShfmNnl0ilpnl4J KOSNs0P4Nv93+tgkOWnu/Yj36TiAKA0UC26YbKYdE/BeTWbORQa2zC2KRw/fAXPX QJaieHRpD+dIHZdb5PCfeE3EnCK24nlzPzuvVHObpkZMpMfN320UbZMvP8rM2H9i rvo= -----END CERTIFICATE-----Generated at Sun Nov 23 05:43:52 2025 by rpki-client