This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa File: 850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa (raw, json) Hash identifier: TUj69wJLi7qg9+xXn5vV6ZvKv0KAfTaFfcVqQD9WNyU= Subject key identifier: 8E:6B:86:85:CC:08:04:6B:FC:E8:B3:C5:A0:66:4B:B8:0D:75:29:09 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35A9FA5FB4F0987A1C2BD5B432D82F3F0C7612A8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa Signing time: Sun 23 Nov 2025 00:00:43 +0000 ROA not before: Sun 23 Nov 2025 00:00:43 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a9:fa:5f:b4:f0:98:7a:1c:2b:d5:b4:32:d8:2f:3f:0c:76:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:43 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=84ba8535cca386a3a43f7dfd79dcb5c9a6e80472750cbebf587e57e089b86130, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:a6:00:16:46:a7:02:bc:6d:1f:07:76:fc: 89:ff:56:a4:c4:6c:3b:d1:e0:b1:44:30:51:6c:22: ac:d2:03:f0:a8:dc:69:75:83:a5:70:f8:f8:67:18: 6a:51:6d:7e:bb:c3:72:e3:bb:04:d3:b1:a1:00:a1: 62:3f:3d:f5:2a:5a:a9:75:70:e1:09:2d:66:d1:03: 28:b2:92:66:4e:68:02:98:12:fc:86:f9:f0:55:ff: 3a:72:a5:2c:57:9e:ab:a1:11:2f:1e:51:42:03:ae: 4c:19:8d:82:c3:19:90:c2:2f:f5:de:5e:4a:71:98: 3b:97:5e:74:75:9e:f9:51:3a:25:c1:fa:9d:71:e1: 46:12:c5:ff:73:a8:58:89:4e:01:d7:ca:10:6c:c8: 30:a4:fc:8d:19:ad:79:ed:a7:d2:b5:3e:c1:b9:77: b6:6c:ec:6d:89:cc:67:d6:df:3b:88:da:0c:50:6c: 26:a3:81:0c:2a:b6:bc:ac:dc:47:ec:b6:83:7e:c1: 11:54:9c:4b:72:98:eb:9f:3a:e2:ca:5a:b9:c3:37: 03:1c:ce:34:1c:84:f3:38:1c:69:72:35:fb:8f:00: 08:34:ed:99:6b:38:ae:d7:a6:e5:20:bb:4c:8c:9c: 2a:fb:71:63:b3:29:70:16:35:eb:84:bf:bb:a6:df: 46:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:86:85:CC:08:04:6B:FC:E8:B3:C5:A0:66:4B:B8:0D:75:29:09 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/850e0fc5-88f5-49f5-b9de-6017e72e00eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 6b:93:1b:21:a7:86:e7:7f:32:ca:fe:be:18:9b:ea:1d:90:ae: b1:49:8d:5d:0a:65:62:a7:3f:fa:79:db:b1:ba:e5:cb:3d:e3: 18:63:60:b6:4b:66:62:8c:ae:d6:81:18:6e:6e:9a:d0:e2:a5: 17:e1:13:86:51:a7:c4:ed:22:70:3c:86:20:f5:ef:35:8c:2c: 04:bf:75:d5:a7:ad:88:2b:6a:3b:a6:b1:a0:b0:07:d0:d7:1e: f7:cb:ba:7a:52:db:b3:42:c1:59:5e:da:55:d8:5b:d1:b1:3c: f0:47:d7:d9:4a:20:09:a2:17:4a:a9:c8:02:cc:82:23:13:2a: 3c:ef:23:28:10:4a:b7:31:53:55:28:1f:45:23:ac:f0:65:b3: 62:d0:c6:67:79:bf:91:ff:79:74:22:48:c2:39:7e:48:d5:36: 19:65:8a:7d:fb:14:1d:8b:1f:53:bd:20:0e:d7:5f:87:bf:d6: ce:49:e9:d5:c7:ec:c3:33:53:17:20:1c:eb:3f:81:da:16:6d: 2e:cf:f9:b8:8a:e8:66:76:53:60:18:fc:db:76:8e:70:0c:20: 00:92:8a:bb:15:b8:24:c2:18:27:1c:bd:f1:53:85:84:93:56: 7f:c2:86:ca:ea:a3:aa:6e:fe:1a:03:b9:16:37:ac:26:7e:97: 35:fd:63:06 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNan6X7TwmHocK9W0MtgvPwx2EqgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMDA0M1oX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAODRiYTg1MzVjY2EzODZhM2E0M2Y3 ZGZkNzlkY2I1YzlhNmU4MDQ3Mjc1MGNiZWJmNTg3ZTU3ZTA4OWI4NjEzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCimABZGpwK8bR8HdvyJ/1akxGw7 0eCxRDBRbCKs0gPwqNxpdYOlcPj4ZxhqUW1+u8Ny47sE07GhAKFiPz31KlqpdXDh CS1m0QMospJmTmgCmBL8hvnwVf86cqUsV56roREvHlFCA65MGY2CwxmQwi/13l5K cZg7l150dZ75UTolwfqdceFGEsX/c6hYiU4B18oQbMgwpPyNGa157afStT7BuXe2 bOxticxn1t87iNoMUGwmo4EMKra8rNxH7LaDfsERVJxLcpjrnzriylq5wzcDHM40 HITzOBxpcjX7jwAINO2Zaziu16blILtMjJwq+3FjsylwFjXrhL+7pt9GGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI5rhoXMCARr/OizxaBmS7gNdSkJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1MGUwZmM1LTg4ZjUtNDlmNS1iOWRlLTYwMTdlNzJlMDBlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88DAMA0GCSqGSIb3DQEBCwUAA4IBAQBrkxshp4bnfzLK/r4Y m+odkK6xSY1dCmVipz/6eduxuuXLPeMYY2C2S2ZijK7WgRhubprQ4qUX4ROGUafE 7SJwPIYg9e81jCwEv3XVp62IK2o7prGgsAfQ1x73y7p6UtuzQsFZXtpV2FvRsTzw R9fZSiAJohdKqcgCzIIjEyo87yMoEEq3MVNVKB9FI6zwZbNi0MZneb+R/3l0IkjC OX5I1TYZZYp9+xQdix9TvSAO11+Hv9bOSenVx+zDM1MXIBzrP4HaFm0uz/m4iuhm dlNgGPzbdo5wDCAAkoq7FbgkwhgnHL3xU4WEk1Z/wobK6qOqbv4aA7kWN6wmfpc1 /WMG -----END CERTIFICATE-----Generated at Sun Nov 23 05:43:01 2025 by rpki-client