This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa File: 79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa (raw, json) Hash identifier: YBTpuyaNAzfVeCOYCscqqcGKHke+00jzpzkfqn6TNqA= Subject key identifier: 01:37:FE:42:3D:88:2E:2C:D6:F2:3B:9F:B3:AD:11:02:65:70:56:6F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C479EB82751FD0C597DF0CEC63B2747F5665404 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa Signing time: Sun 23 Nov 2025 00:10:38 +0000 ROA not before: Sun 23 Nov 2025 00:10:38 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:47:9e:b8:27:51:fd:0c:59:7d:f0:ce:c6:3b:27:47:f5:66:54:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:10:38 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=5876eaf9435601792b45f5a350eea6e662ed0041ba0fd1ffaa39f117240eb88c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:87:5d:e2:94:22:ba:bc:aa:1b:49:04:75: 6c:23:0f:14:77:2f:3d:34:00:04:64:6c:fc:89:ee: 87:eb:02:ee:51:4e:df:1a:c4:d0:ef:72:fa:69:76: 58:6b:d0:e5:ca:20:09:8b:27:f3:fd:73:46:75:e3: 93:73:67:35:79:04:9a:55:ef:72:ce:59:38:d8:f0: 6e:73:21:4f:f8:8b:d5:89:5c:fd:ca:75:83:d3:c6: 0c:78:47:ee:31:3b:23:28:a7:bf:85:84:df:e7:6b: 38:36:86:3b:4e:f9:7e:5b:31:1d:64:94:0b:75:c5: 21:98:a9:98:fc:96:a3:62:7e:6a:09:ab:b9:c3:2e: 68:4c:b1:24:1c:91:1c:c5:6e:92:34:f8:b9:11:2e: 82:4d:de:5e:fa:95:4a:7b:7e:60:4f:42:94:ed:15: b5:fc:52:be:ee:78:64:f6:e6:20:f5:ff:df:df:07: ee:8e:f6:61:10:cf:b8:19:2a:db:93:c6:a1:cb:c8: 5b:10:35:4a:63:4e:95:d2:d4:6e:92:81:ba:68:40: f9:f7:9c:44:3c:d4:ae:3a:47:6c:f9:76:62:a2:ff: 68:f6:6b:8a:8d:fe:b0:9d:c6:6f:ed:95:82:12:04: 21:37:1b:b3:ee:bf:05:f2:81:e9:1d:80:92:85:50: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:FE:42:3D:88:2E:2C:D6:F2:3B:9F:B3:AD:11:02:65:70:56:6F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/79dfb2fb-1f9f-40a2-9a76-854d738f28fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:880::/46 Signature Algorithm: sha256WithRSAEncryption 3d:92:66:ea:27:5e:5b:77:6f:30:35:ef:e4:6a:01:37:11:26: 1f:1e:ba:56:9c:df:16:32:bc:92:7c:ea:1e:1e:8f:ed:3e:90: ef:4f:d1:5d:da:ed:c3:83:86:1d:2d:68:d0:89:34:6f:b0:31: c5:6c:a0:2a:de:8d:ac:e9:d6:dd:b5:9a:a2:f4:1a:74:a9:51: a0:b5:cd:f1:3f:e1:94:ab:e5:48:2b:40:e2:0b:42:83:27:77: 22:24:c9:2d:f5:31:07:ea:c8:d0:be:64:90:e5:2a:ad:da:62: ef:62:21:a1:54:94:b5:b1:e3:da:c4:e9:3d:35:ca:fd:9e:9d: 67:00:0f:ab:65:09:d5:67:7e:74:56:54:a5:e5:7f:0c:99:00: 00:67:a9:06:fd:1c:da:3b:80:ed:73:1a:06:eb:1e:9b:a3:78: dc:fc:0a:d0:7f:aa:d4:10:e6:22:6c:49:76:5c:ab:0d:18:d1: e8:54:c0:b4:1a:02:b7:8b:a6:98:3b:2e:39:b2:e6:98:23:0d: 0f:be:10:b1:2b:86:ec:9c:f6:e2:8e:de:74:00:d2:16:bb:d5: ab:35:ec:5a:56:c7:a6:86:f9:ec:0c:a1:7f:61:47:da:ff:e5: ae:61:b4:f5:98:c8:c5:65:d4:94:c1:04:3c:05:fa:a1:dd:a5: 39:02:c1:b3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfEeeuCdR/QxZffDOxjsnR/VmVAQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTAzOFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNANTg3NmVhZjk0MzU2MDE3OTJiNDVm NWEzNTBlZWE2ZTY2MmVkMDA0MWJhMGZkMWZmYWEzOWYxMTcyNDBlYjg4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMGHXeKUIrq8qhtJBHVsIw8Udy89 NAAEZGz8ie6H6wLuUU7fGsTQ73L6aXZYa9DlyiAJiyfz/XNGdeOTc2c1eQSaVe9y zlk42PBucyFP+IvViVz9ynWD08YMeEfuMTsjKKe/hYTf52s4NoY7Tvl+WzEdZJQL dcUhmKmY/JajYn5qCau5wy5oTLEkHJEcxW6SNPi5ES6CTd5e+pVKe35gT0KU7RW1 /FK+7nhk9uYg9f/f3wfujvZhEM+4GSrbk8ahy8hbEDVKY06V0tRukoG6aED595xE PNSuOkds+XZiov9o9muKjf6wncZv7ZWCEgQhNxuz7r8F8oHpHYCShVCysQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAE3/kI9iC4s1vI7n7OtEQJlcFZvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5ZGZiMmZiLTFmOWYtNDBhMi05YTc2LTg1NGQ3MzhmMjhmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8wiAMA0GCSqGSIb3DQEBCwUAA4IBAQA9kmbqJ15bd28wNe/k agE3ESYfHrpWnN8WMrySfOoeHo/tPpDvT9Fd2u3Dg4YdLWjQiTRvsDHFbKAq3o2s 6dbdtZqi9Bp0qVGgtc3xP+GUq+VIK0DiC0KDJ3ciJMkt9TEH6sjQvmSQ5Sqt2mLv YiGhVJS1sePaxOk9Ncr9np1nAA+rZQnVZ350VlSl5X8MmQAAZ6kG/RzaO4DtcxoG 6x6bo3jc/ArQf6rUEOYibEl2XKsNGNHoVMC0GgK3i6aYOy45suaYIw0PvhCxK4bs nPbijt50ANIWu9WrNexaVsemhvnsDKF/YUfa/+WuYbT1mMjFZdSUwQQ8Bfqh3aU5 AsGz -----END CERTIFICATE-----Generated at Sun Nov 23 05:41:32 2025 by rpki-client