This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/59547eed-f394-4d43-b55e-55ee1b7fb6b4.roa File: 59547eed-f394-4d43-b55e-55ee1b7fb6b4.roa (raw, json) Hash identifier: WbC9BMwEWDY0PIqpkfmPZyWy/W92ejq3F/2GUwjMJcc= Subject key identifier: 9C:BE:8C:D0:93:0B:48:45:05:CA:EA:10:99:8B:BA:DC:BB:70:37:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43246B9D69258184C74EE934FF8DD7E32F4952FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/59547eed-f394-4d43-b55e-55ee1b7fb6b4.roa Signing time: Sat 08 Nov 2025 00:01:10 +0000 ROA not before: Sat 08 Nov 2025 00:01:10 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:24:6b:9d:69:25:81:84:c7:4e:e9:34:ff:8d:d7:e3:2f:49:52:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:01:10 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=44b17b70ca268c5bc80df07051e5910ee3153a93c0204381b236e4aaf67d6ef4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:e5:1d:6a:56:00:d3:75:47:60:04:be:55: b3:7c:98:3a:15:2e:a3:65:64:a3:e4:3b:6f:92:4a: e1:a9:e9:ef:64:c4:5d:19:1a:66:c6:bd:c2:9d:48: de:eb:8f:35:95:4a:72:20:92:5b:25:4c:c1:bd:c0: 09:d8:a1:6e:81:a7:b4:fd:bd:d7:33:e3:15:e2:04: 51:93:1b:0f:04:04:8b:85:da:80:9b:ba:c4:17:5c: e3:55:c4:36:df:de:4a:06:ed:6f:13:a8:27:ce:df: 8b:48:c6:be:79:57:8f:34:a0:57:0c:0c:46:dd:6d: 8e:d0:33:7b:ca:ce:04:a0:fb:8b:18:08:7a:77:26: 65:0c:8f:b0:40:f1:38:5d:6d:a3:ea:79:9e:b2:73: 8e:ff:66:fa:03:6a:7e:c0:bb:87:da:b7:3b:c0:f2: 20:a1:b8:32:91:83:c1:98:77:53:a5:02:e9:9c:02: dc:64:2a:a5:42:33:a2:ee:fb:ad:c7:e0:b0:e6:df: c4:1d:56:89:64:e1:d8:c5:65:9b:1c:ff:a2:54:90: 73:42:d6:6d:a6:8a:25:e0:85:63:2b:4d:04:fa:4c: 99:50:22:d7:89:64:1f:af:63:12:c6:30:3c:e8:fe: b7:f7:8a:c6:b9:9e:3c:ff:e3:cb:0f:cc:a8:a1:bb: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BE:8C:D0:93:0B:48:45:05:CA:EA:10:99:8B:BA:DC:BB:70:37:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/59547eed-f394-4d43-b55e-55ee1b7fb6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:9000::/40 Signature Algorithm: sha256WithRSAEncryption 2e:82:46:94:d4:fc:55:1c:d4:15:9c:97:e0:67:52:d0:a0:aa: 5e:91:e5:3a:2f:e9:04:c6:7d:ca:20:2d:ea:bf:60:71:ee:88: f4:a5:7d:a6:96:2c:af:f7:f5:2b:c7:5e:94:6d:ab:3b:10:76: d3:3e:39:a4:e4:4b:e9:f1:eb:90:49:62:59:91:6d:1f:66:88: 81:aa:d1:9c:95:4d:fb:ac:04:9a:a5:cc:a0:c6:46:03:f5:4c: f0:da:27:b4:4a:b3:87:fe:80:41:ba:c7:63:56:22:31:c5:3a: 12:6a:be:d7:05:aa:5c:03:81:0a:0a:0b:61:fe:ff:f1:6e:05: 14:3e:af:d0:43:a3:33:21:29:57:41:03:6e:40:c7:33:67:ce: 08:5b:3c:45:7d:64:9c:41:8e:34:10:1e:96:1a:da:92:bd:c9: fb:38:ac:ff:41:77:76:74:40:e9:b8:dd:09:ad:ea:25:77:d2: 67:d7:7c:2d:55:a9:4c:57:5d:33:b4:05:24:75:a5:28:b6:03: 57:f5:8c:ba:0c:2a:5b:39:91:93:3a:d9:f3:07:ea:95:95:34: 9d:a9:f1:ff:20:67:6b:6b:12:90:1a:89:0f:be:05:e9:43:c0: 3d:ae:37:82:f0:6d:3b:03:6e:27:e9:99:8d:b0:e0:09:d6:1a: 9d:a8:5a:a7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQyRrnWklgYTHTuk0/43X4y9JUv8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDExMFoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNANDRiMTdiNzBjYTI2OGM1YmM4MGRm MDcwNTFlNTkxMGVlMzE1M2E5M2MwMjA0MzgxYjIzNmU0YWFmNjdkNmVmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx37lHWpWANN1R2AEvlWzfJg6FS6j ZWSj5DtvkkrhqenvZMRdGRpmxr3CnUje6481lUpyIJJbJUzBvcAJ2KFugae0/b3X M+MV4gRRkxsPBASLhdqAm7rEF1zjVcQ2395KBu1vE6gnzt+LSMa+eVePNKBXDAxG 3W2O0DN7ys4EoPuLGAh6dyZlDI+wQPE4XW2j6nmesnOO/2b6A2p+wLuH2rc7wPIg obgykYPBmHdTpQLpnALcZCqlQjOi7vutx+Cw5t/EHVaJZOHYxWWbHP+iVJBzQtZt pool4IVjK00E+kyZUCLXiWQfr2MSxjA86P6394rGuZ48/+PLD8yoobuBuQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJy+jNCTC0hFBcrqEJmLuty7cDeZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU5NTQ3ZWVkLWYzOTQtNGQ0My1iNTVlLTU1ZWUxYjdmYjZiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaZAwDQYJKoZIhvcNAQELBQADggEBAC6CRpTU/FUc1BWcl+Bn UtCgql6R5Tov6QTGfcogLeq/YHHuiPSlfaaWLK/39SvHXpRtqzsQdtM+OaTkS+nx 65BJYlmRbR9miIGq0ZyVTfusBJqlzKDGRgP1TPDaJ7RKs4f+gEG6x2NWIjHFOhJq vtcFqlwDgQoKC2H+//FuBRQ+r9BDozMhKVdBA25AxzNnzghbPEV9ZJxBjjQQHpYa 2pK9yfs4rP9Bd3Z0QOm43Qmt6iV30mfXfC1VqUxXXTO0BSR1pSi2A1f1jLoMKls5 kZM62fMH6pWVNJ2p8f8gZ2trEpAaiQ++BelDwD2uN4LwbTsDbifpmY2w4AnWGp2o Wqc= -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:02 2025 by rpki-client