This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a177984-44c1-4fc1-97dc-e08be80f4299.roa File: 2a177984-44c1-4fc1-97dc-e08be80f4299.roa (raw, json) Hash identifier: j3saozULDFS6zRWt8a38Ih1jaqrWCs9z3ZS3xSboMF8= Subject key identifier: A6:2C:D1:9B:00:29:29:73:BB:8E:4C:99:ED:F4:52:E4:92:C3:B6:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 07C2C159B5278BB0CE0BE99A5157699919DAAEB6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a177984-44c1-4fc1-97dc-e08be80f4299.roa Signing time: Sun 23 Nov 2025 00:20:07 +0000 ROA not before: Sun 23 Nov 2025 00:20:07 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c2:c1:59:b5:27:8b:b0:ce:0b:e9:9a:51:57:69:99:19:da:ae:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:20:07 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=f484649940a1f536ea2d60d63774da3b4586522e73bde2e6a01ba8517f20168e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:36:a3:aa:df:fe:4e:a0:f4:84:48:3e:51: 8f:b8:e3:b4:02:0d:3a:02:cd:ad:6a:e8:6a:8e:56: 09:9a:4a:97:ca:b1:78:08:92:24:06:10:51:00:38: 37:79:7f:4d:c5:7b:ef:cc:98:c7:7a:89:15:1f:64: 41:1c:1b:46:4b:04:db:ab:c5:ad:3b:a3:22:58:6c: 30:e1:7d:bc:b6:53:15:03:06:6c:5b:c0:ce:1b:e8: bf:4b:07:f6:b1:7c:01:da:30:32:e1:0f:01:d1:6e: d7:66:ac:c9:c3:a7:84:fb:82:70:77:7a:57:93:01: 12:20:49:a0:a1:94:50:f6:3a:2c:3d:90:6a:a8:fa: 73:39:68:8e:c0:43:31:b9:1e:c7:79:22:8d:0d:bc: 2b:b3:85:64:df:74:fd:ca:91:06:a8:6d:e1:9f:73: de:5e:72:96:62:5a:d9:f9:57:df:1f:57:db:12:10: 31:94:d2:45:c9:cc:c3:34:e1:77:24:ee:cc:1f:0d: 43:f2:22:24:7c:ab:ec:3b:1c:28:97:1a:07:40:49: e3:ff:62:5a:54:ec:9f:b6:a9:99:e0:59:f7:5d:82: 81:c9:6a:cc:8a:e9:6a:f9:e3:c3:2a:9e:f5:52:49: a5:d1:70:1d:c3:6e:51:d9:ee:91:a4:29:53:dd:12: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2C:D1:9B:00:29:29:73:BB:8E:4C:99:ED:F4:52:E4:92:C3:B6:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a177984-44c1-4fc1-97dc-e08be80f4299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4840::/46 Signature Algorithm: sha256WithRSAEncryption 5a:b7:ef:03:0a:0f:e5:82:82:14:ec:23:d9:a0:76:f0:12:13: be:10:c3:37:03:62:0c:b1:3b:78:4c:51:b4:3b:1b:39:e6:2f: 34:c3:12:a5:ad:52:c0:4e:43:ce:54:6e:3d:ac:75:87:d5:e8: 98:87:7d:9a:01:be:07:8b:24:20:8e:60:0e:56:93:83:45:d0: 86:40:be:58:80:d1:04:88:79:76:00:60:3b:c0:24:5e:26:37: ec:11:85:58:81:45:55:5c:21:2e:59:b6:24:ac:22:ee:d1:6f: 0f:16:92:c7:22:1b:58:6d:81:f3:9c:71:3a:81:3f:f0:c3:e9: 67:a3:8b:64:25:bd:53:a0:11:c7:66:2a:63:4c:e5:ef:1d:8d: 94:88:bf:bc:1e:77:bc:fc:88:49:9c:5e:8d:6a:1d:a7:07:7c: 4d:e7:48:3a:a9:bd:29:93:6f:0f:fb:55:d2:0a:f9:22:54:68: 77:bc:4a:54:75:53:a0:cf:76:15:d9:a5:e0:19:4f:20:f5:12: dc:af:0b:d0:3f:e8:d4:8b:b2:69:59:b9:99:e6:f6:50:51:f2: bb:52:d5:9b:89:aa:8d:94:26:65:a9:38:1a:6c:ea:df:20:bc: 72:37:d4:f7:90:bb:64:9f:45:c1:d0:46:46:20:25:da:39:27: c9:f5:69:9c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUB8LBWbUni7DOC+maUVdpmRnarrYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMjAwN1oX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAZjQ4NDY0OTk0MGExZjUzNmVhMmQ2 MGQ2Mzc3NGRhM2I0NTg2NTIyZTczYmRlMmU2YTAxYmE4NTE3ZjIwMTY4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzA2o6rf/k6g9IRIPlGPuOO0Ag06 As2tauhqjlYJmkqXyrF4CJIkBhBRADg3eX9NxXvvzJjHeokVH2RBHBtGSwTbq8Wt O6MiWGww4X28tlMVAwZsW8DOG+i/Swf2sXwB2jAy4Q8B0W7XZqzJw6eE+4Jwd3pX kwESIEmgoZRQ9josPZBqqPpzOWiOwEMxuR7HeSKNDbwrs4Vk33T9ypEGqG3hn3Pe XnKWYlrZ+VffH1fbEhAxlNJFyczDNOF3JO7MHw1D8iIkfKvsOxwolxoHQEnj/2Ja VOyftqmZ4Fn3XYKByWrMiulq+ePDKp71Ukml0XAdw25R2e6RpClT3RKAdQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKYs0ZsAKSlzu45Mme30UuSSw7YNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhMTc3OTg0LTQ0YzEtNGZjMS05N2RjLWUwOGJlODBmNDI5OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80hAMA0GCSqGSIb3DQEBCwUAA4IBAQBat+8DCg/lgoIU7CPZ oHbwEhO+EMM3A2IMsTt4TFG0Oxs55i80wxKlrVLATkPOVG49rHWH1eiYh32aAb4H iyQgjmAOVpODRdCGQL5YgNEEiHl2AGA7wCReJjfsEYVYgUVVXCEuWbYkrCLu0W8P FpLHIhtYbYHznHE6gT/ww+lno4tkJb1ToBHHZipjTOXvHY2UiL+8Hne8/IhJnF6N ah2nB3xN50g6qb0pk28P+1XSCvkiVGh3vEpUdVOgz3YV2aXgGU8g9RLcrwvQP+jU i7JpWbmZ5vZQUfK7UtWbiaqNlCZlqTgabOrfILxyN9T3kLtkn0XB0EZGICXaOSfJ 9Wmc -----END CERTIFICATE-----Generated at Sun Nov 23 05:42:15 2025 by rpki-client