This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa File: 4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa (raw, json) Hash identifier: AtVN+9SueZ/E3tSUtnrtZsn2UbfL72CTR8DkAVO+Wps= Subject key identifier: 52:B2:61:61:E4:93:A4:B2:61:CB:E6:92:30:D4:F2:11:83:C2:5F:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BD7BA5E66FB07CDB9B20BDC5AAD8F79E6A24760 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa Signing time: Sun 23 Nov 2025 00:10:58 +0000 ROA not before: Sun 23 Nov 2025 00:10:58 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d7:ba:5e:66:fb:07:cd:b9:b2:0b:dc:5a:ad:8f:79:e6:a2:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:10:58 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=5e9be063e101cd476b6aa06a48e996272759dbbbfe50f6aff83609425afab94f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:2c:a7:0f:bc:3b:de:79:c9:ca:9f:ea:84: 3d:6e:17:bd:e5:c6:1d:0b:d3:56:02:ad:ca:46:c7: e1:fc:62:b6:a8:f0:bd:75:a1:53:2a:48:4b:6a:de: 8a:aa:2b:8c:91:5d:8d:92:7d:b6:9c:39:64:8a:9e: 41:7e:84:5b:b2:1a:ff:9d:90:8a:2c:57:41:ec:b6: be:12:9c:a0:94:f2:ef:59:62:42:18:36:78:1f:a9: 79:3e:9c:30:ba:55:4c:32:70:ea:28:93:bc:2c:a0: 65:95:2f:6b:b3:3d:0f:94:92:3e:88:7b:73:a4:e0: e8:52:1a:14:65:7a:e1:a2:8f:68:b6:e7:fe:b9:f7: 24:a5:cb:f3:38:2c:98:77:bb:26:5d:5c:9b:43:e8: 71:6d:67:29:86:f1:3a:57:16:d8:7f:d6:8d:8d:f9: a3:cd:e7:14:ab:99:d1:b2:5b:98:01:49:b6:b2:5a: 3e:41:3f:ad:c5:9f:28:d0:3b:7e:11:e1:3c:18:e5: c8:f3:39:f4:b4:7f:a9:e9:85:60:8a:31:8b:9e:d2: bc:9e:ab:f1:76:b5:f2:02:a2:ad:ee:bb:70:4e:76: cf:35:be:9a:8b:ca:b0:8d:e7:7f:5c:60:43:7e:f0: 0a:39:a3:74:a4:39:96:c1:04:f3:11:fd:99:db:88: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B2:61:61:E4:93:A4:B2:61:CB:E6:92:30:D4:F2:11:83:C2:5F:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e24ebab-5f31-4eb5-99dd-e5fe113f21fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:e000::/40 Signature Algorithm: sha256WithRSAEncryption 31:11:6a:cc:04:c3:fd:c7:33:fe:d2:33:88:d0:b2:09:e1:1d: 70:9d:06:61:77:87:cc:71:73:c3:08:ea:85:08:1c:c8:4f:36: de:e2:25:f9:53:fd:79:56:29:cc:05:80:8c:5d:ad:b5:e9:04: 84:46:57:13:9a:66:2a:7a:6c:f5:36:19:b9:9b:a8:96:cd:ca: 00:ab:b7:25:d3:bd:82:53:c2:79:ff:4a:a8:9f:dd:c7:6f:c7: 37:af:15:21:cb:6e:58:09:77:35:f6:f4:f8:8d:47:4a:19:8a: 59:68:04:04:de:48:68:54:5f:fa:d9:b3:42:a5:03:98:93:53: 62:6c:a4:3a:75:30:80:f1:83:08:91:46:92:92:24:d9:02:4b: 9c:7c:8d:03:4e:0c:de:c5:ea:e9:61:d3:8b:7e:ff:34:8d:46: db:cc:03:4d:b2:5a:1a:a6:2f:6a:5c:5f:8c:e2:e9:57:62:18: 78:00:60:3f:d7:4b:44:c3:6d:44:be:bf:73:76:b3:8e:86:6a: 6a:0e:27:bf:9b:34:79:01:96:c7:b0:c3:93:ea:09:02:5b:90: 68:f5:54:20:b4:ea:b9:f9:e1:9f:bc:46:d4:fe:06:c0:07:8d: 8e:a6:db:23:14:5c:cf:4c:23:61:7c:00:94:78:c7:06:7c:10: af:8a:dc:61 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUS9e6Xmb7B825sgvcWq2PeeaiR2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTA1OFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNANWU5YmUwNjNlMTAxY2Q0NzZiNmFh MDZhNDhlOTk2MjcyNzU5ZGJiYmZlNTBmNmFmZjgzNjA5NDI1YWZhYjk0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ekspw+8O955ycqf6oQ9bhe95cYd C9NWAq3KRsfh/GK2qPC9daFTKkhLat6KqiuMkV2Nkn22nDlkip5BfoRbshr/nZCK LFdB7La+EpyglPLvWWJCGDZ4H6l5PpwwulVMMnDqKJO8LKBllS9rsz0PlJI+iHtz pODoUhoUZXrhoo9otuf+ufckpcvzOCyYd7smXVybQ+hxbWcphvE6VxbYf9aNjfmj zecUq5nRsluYAUm2slo+QT+txZ8o0Dt+EeE8GOXI8zn0tH+p6YVgijGLntK8nqvx drXyAqKt7rtwTnbPNb6ai8qwjed/XGBDfvAKOaN0pDmWwQTzEf2Z24iOBQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFKyYWHkk6SyYcvmkjDU8hGDwl/nMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlMjRlYmFiLTVmMzEtNGViNS05OWRkLWU1ZmUxMTNmMjFmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauOAwDQYJKoZIhvcNAQELBQADggEBADERaswEw/3HM/7SM4jQ sgnhHXCdBmF3h8xxc8MI6oUIHMhPNt7iJflT/XlWKcwFgIxdrbXpBIRGVxOaZip6 bPU2GbmbqJbNygCrtyXTvYJTwnn/Sqif3cdvxzevFSHLblgJdzX29PiNR0oZillo BATeSGhUX/rZs0KlA5iTU2JspDp1MIDxgwiRRpKSJNkCS5x8jQNODN7F6ulh04t+ /zSNRtvMA02yWhqmL2pcX4zi6VdiGHgAYD/XS0TDbUS+v3N2s46GamoOJ7+bNHkB lseww5PqCQJbkGj1VCC06rn54Z+8RtT+BsAHjY6m2yMUXM9MI2F8AJR4xwZ8EK+K 3GE= -----END CERTIFICATE-----Generated at Tue Nov 25 12:48:28 2025 by rpki-client