This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa File: 3df16135-87fe-480c-90d5-ba22a1787aa1.roa (raw, json) Hash identifier: jOKFCsrk8eu/MacxiQyl7WIzsRRIIadxXoy38TYs7Xs= Subject key identifier: AF:A7:E0:98:46:C4:C4:A3:6D:7B:83:C3:FB:F7:4F:22:C2:58:3A:71 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1B8655AA0CA06CE1E4787D1E9F11DE9C8CB70695 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa Signing time: Sat 08 Nov 2025 00:00:07 +0000 ROA not before: Sat 08 Nov 2025 00:00:07 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:86:55:aa:0c:a0:6c:e1:e4:78:7d:1e:9f:11:de:9c:8c:b7:06:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:00:07 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=c2a5e5a5ca1216a108402dae1ce50b5027cf3feea9c9a32152ddb08b5f90ceb8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:89:ae:43:83:d8:93:eb:3c:40:73:cf:0d: 4b:c5:ef:2d:15:5e:76:f4:14:01:7e:e5:d4:68:95: ba:a9:14:01:bb:7d:b3:e8:74:2e:13:b8:21:6c:f2: 4d:fc:1b:fb:c8:91:75:ea:e3:24:8d:9a:ee:67:f8: ab:4d:cf:a9:d7:56:7d:ad:8c:db:1d:83:5a:29:d7: cc:96:d2:a5:c8:56:bb:94:ab:d6:3f:4e:7f:6e:2d: 3b:fd:72:7f:45:e8:21:01:a6:d2:1f:ca:23:57:0a: 53:61:85:3c:56:3f:38:49:60:3f:80:fb:49:a9:36: 0c:b9:4e:2f:cd:8c:a2:fd:7f:28:22:a2:0e:dd:37: 1f:fc:c0:e1:1e:f5:4c:38:73:fb:bb:15:63:09:a6: 78:8b:84:ff:f0:68:14:49:ee:8a:92:80:1f:76:40: 75:39:ea:86:03:19:c9:c7:8e:8c:e2:76:71:d8:62: 56:2a:60:95:85:73:88:9b:20:99:7e:d4:fd:3d:82: 43:71:f7:af:5e:ab:4e:2f:e7:6e:97:8d:ac:3f:8c: 1f:99:e6:c8:a0:52:c6:fe:85:93:b3:fe:b4:98:a2: 24:9b:fb:14:66:21:ed:b3:18:70:6d:79:01:ee:a5: 06:17:37:8a:83:c9:59:7f:e5:ab:88:ef:5c:d5:7e: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:E0:98:46:C4:C4:A3:6D:7B:83:C3:FB:F7:4F:22:C2:58:3A:71 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3df16135-87fe-480c-90d5-ba22a1787aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:f000::/40 Signature Algorithm: sha256WithRSAEncryption 80:43:73:0b:4c:96:2c:41:e8:29:e8:d7:d7:d8:ff:f6:66:00: 28:da:0e:fd:a1:48:af:49:05:d7:31:4d:1f:32:21:72:25:06: ae:38:44:63:dc:83:dc:d3:cd:39:07:81:a1:65:c9:aa:b3:d3: 69:02:90:06:dc:25:9d:c0:ab:83:5a:53:d6:da:c5:23:a6:df: 6e:ca:51:15:9a:64:1d:b4:3d:3d:bc:af:17:64:23:db:57:89: 98:81:24:01:6e:2d:70:22:dd:ad:9c:7b:1c:53:ed:e4:68:c2: e7:27:97:c6:cb:8b:6d:8b:52:6a:ad:76:45:28:c5:a4:21:00: c4:9b:46:30:4b:8d:32:5e:e3:0c:14:b6:9a:f7:13:26:0c:b1: 06:6b:96:89:4c:6f:88:3f:69:5b:38:85:ea:19:67:af:a0:70: ec:bc:da:9f:47:b0:d9:a0:8b:e0:8f:46:af:24:92:2f:96:a0: c6:fd:22:49:9b:06:34:31:8e:c2:71:7d:a8:07:2c:20:0a:b4: 7b:24:09:73:31:55:45:0e:15:99:57:aa:5b:8a:f3:41:9a:3a: 6c:4b:c1:1f:19:be:0a:12:e8:a4:fa:65:45:03:7f:6f:bb:db: 00:72:48:7a:99:b5:50:a0:81:70:88:f1:fc:43:40:7c:14:4d: 13:48:32:af -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUG4ZVqgygbOHkeH0enxHenIy3BpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDAwN1oX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAYzJhNWU1YTVjYTEyMTZhMTA4NDAy ZGFlMWNlNTBiNTAyN2NmM2ZlZWE5YzlhMzIxNTJkZGIwOGI1ZjkwY2ViODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6JrkOD2JPrPEBzzw1Lxe8tFV52 9BQBfuXUaJW6qRQBu32z6HQuE7ghbPJN/Bv7yJF16uMkjZruZ/irTc+p11Z9rYzb HYNaKdfMltKlyFa7lKvWP05/bi07/XJ/ReghAabSH8ojVwpTYYU8Vj84SWA/gPtJ qTYMuU4vzYyi/X8oIqIO3Tcf/MDhHvVMOHP7uxVjCaZ4i4T/8GgUSe6KkoAfdkB1 OeqGAxnJx46M4nZx2GJWKmCVhXOImyCZftT9PYJDcfevXqtOL+dul42sP4wfmebI oFLG/oWTs/60mKIkm/sUZiHtsxhwbXkB7qUGFzeKg8lZf+WriO9c1X7G6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK+n4JhGxMSjbXuDw/v3TyLCWDpxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNkZjE2MTM1LTg3ZmUtNDgwYy05MGQ1LWJhMjJhMTc4N2FhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+/AwDQYJKoZIhvcNAQELBQADggEBAIBDcwtMlixB6Cno19fY //ZmACjaDv2hSK9JBdcxTR8yIXIlBq44RGPcg9zTzTkHgaFlyaqz02kCkAbcJZ3A q4NaU9baxSOm327KURWaZB20PT28rxdkI9tXiZiBJAFuLXAi3a2cexxT7eRowucn l8bLi22LUmqtdkUoxaQhAMSbRjBLjTJe4wwUtpr3EyYMsQZrlolMb4g/aVs4heoZ Z6+gcOy82p9HsNmgi+CPRq8kki+WoMb9IkmbBjQxjsJxfagHLCAKtHskCXMxVUUO FZlXqluK80GaOmxLwR8ZvgoS6KT6ZUUDf2+72wBySHqZtVCggXCI8fxDQHwUTRNI Mq8= -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:39 2025 by rpki-client