This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa File: 9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa (raw, json) Hash identifier: MBjHLpGj9YouDNQFjkKhXlMKHIQPHTryA7kCutJ8Hi8= Subject key identifier: 13:3B:EF:23:A9:38:78:B4:CE:61:44:9F:54:E1:40:F0:C9:ED:14:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B7CBA3B77ED0158EE442E9BCE2FAEFAB3EC49D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa Signing time: Sun 23 Nov 2025 00:00:44 +0000 ROA not before: Sun 23 Nov 2025 00:00:44 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:2020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7c:ba:3b:77:ed:01:58:ee:44:2e:9b:ce:2f:ae:fa:b3:ec:49:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:44 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=60046f875ca66918972fe341db330ad8637bba7c7ecb5cbb67d4a40eb6dbfac0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:29:77:c9:ee:4b:07:10:ef:44:bb:e4:47: 4a:ff:20:cb:be:d7:75:8e:16:7b:1e:91:24:9b:4e: 24:0a:74:be:2c:c5:b1:e3:39:70:86:8c:25:33:b5: 90:71:a2:b5:40:22:2d:c7:b3:a1:1f:c8:5d:19:15: d9:7f:f3:d3:16:b8:48:67:1e:b2:33:54:44:6b:92: 1e:79:be:6a:30:c2:1e:c7:c9:11:91:2e:bf:7e:a6: c1:fc:c3:80:88:ce:a4:97:9f:a4:21:67:fe:f3:3f: b7:d7:b5:d7:ad:87:7f:6a:c5:9f:61:1f:d5:f4:95: ea:9d:2b:c5:5c:5b:f3:8f:31:88:78:ab:81:ae:5b: 22:2f:87:e9:6d:ea:3e:50:cc:ee:e1:0b:f9:1e:d6: 7d:05:38:2b:0d:0e:7b:a8:fa:59:fb:47:15:08:7a: 12:51:95:3e:9a:bb:ae:10:27:c1:65:00:c1:2b:74: 36:4a:34:c8:41:81:91:10:e5:8a:a2:48:4c:57:ad: c2:e1:9d:61:b9:d4:6b:91:e7:82:06:0a:1e:42:24: 5c:b6:25:a2:32:3a:e6:2d:82:43:be:04:fd:aa:90: 86:7f:40:71:2c:5e:1d:f4:99:0a:c8:c1:b4:90:a1: cb:e2:44:4e:28:9c:16:9f:aa:f8:15:18:1f:81:9c: 6e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3B:EF:23:A9:38:78:B4:CE:61:44:9F:54:E1:40:F0:C9:ED:14:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e9c95df-834b-4f90-b50a-380e8ec88ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:2020::/46 Signature Algorithm: sha256WithRSAEncryption 70:8f:6d:36:54:ab:20:48:b1:59:81:c1:71:55:e5:c5:79:2f: e3:5f:c6:3e:0d:e6:4e:59:da:60:f1:d4:72:c5:53:0c:4a:39: 3b:0c:9e:91:40:40:e2:9c:3a:e7:c7:c5:10:8b:ef:88:e0:43: d6:d5:f2:d8:71:e7:63:0b:2c:34:81:18:19:0d:73:cb:61:49: 3b:21:8f:bc:93:c4:9f:d5:bc:29:42:ca:f7:47:a7:a1:26:0e: c1:3a:9f:ac:63:95:bb:0a:d7:b5:e7:8b:7b:9e:f2:91:3f:62: 17:12:f5:62:90:31:6d:44:49:de:4b:63:e3:b8:16:50:97:07: d2:5b:5f:16:a4:0f:ad:f3:7b:0b:34:09:5e:70:ed:5d:90:39: 86:94:31:25:72:53:a9:07:8d:b5:27:ae:cb:a7:9e:c1:66:3d: 91:dd:7a:2b:b3:17:9f:62:c9:ae:90:09:48:b2:8c:39:03:6d: 68:97:74:de:58:26:ec:7c:27:5e:2a:ce:ae:5d:cb:39:af:00: 86:ac:7f:a5:11:e2:73:36:8b:ce:99:54:f7:46:98:36:de:e5: 67:69:28:5b:49:d8:16:27:62:43:37:57:b2:c3:84:51:09:83: 2e:94:6d:08:b0:24:9b:3e:e6:f0:fe:0a:3f:ba:d9:76:4c:3c: 24:b8:2d:2e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUO3y6O3ftAVjuRC6bzi+u+rPsSdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMDA0NFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNANjAwNDZmODc1Y2E2NjkxODk3MmZl MzQxZGIzMzBhZDg2MzdiYmE3YzdlY2I1Y2JiNjdkNGE0MGViNmRiZmFjMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gcpd8nuSwcQ70S75EdK/yDLvtd1 jhZ7HpEkm04kCnS+LMWx4zlwhowlM7WQcaK1QCItx7OhH8hdGRXZf/PTFrhIZx6y M1REa5Ieeb5qMMIex8kRkS6/fqbB/MOAiM6kl5+kIWf+8z+317XXrYd/asWfYR/V 9JXqnSvFXFvzjzGIeKuBrlsiL4fpbeo+UMzu4Qv5HtZ9BTgrDQ57qPpZ+0cVCHoS UZU+mruuECfBZQDBK3Q2SjTIQYGREOWKokhMV63C4Z1hudRrkeeCBgoeQiRctiWi MjrmLYJDvgT9qpCGf0BxLF4d9JkKyMG0kKHL4kROKJwWn6r4FRgfgZxuJwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBM77yOpOHi0zmFEn1ThQPDJ7RTnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllOWM5NWRmLTgzNGItNGY5MC1iNTBhLTM4MGU4ZWM4OGNlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8yAgMA0GCSqGSIb3DQEBCwUAA4IBAQBwj202VKsgSLFZgcFx VeXFeS/jX8Y+DeZOWdpg8dRyxVMMSjk7DJ6RQEDinDrnx8UQi++I4EPW1fLYcedj Cyw0gRgZDXPLYUk7IY+8k8Sf1bwpQsr3R6ehJg7BOp+sY5W7Cte154t7nvKRP2IX EvVikDFtREneS2PjuBZQlwfSW18WpA+t83sLNAlecO1dkDmGlDElclOpB421J67L p57BZj2R3XorsxefYsmukAlIsow5A21ol3TeWCbsfCdeKs6uXcs5rwCGrH+lEeJz NovOmVT3Rpg23uVnaShbSdgWJ2JDN1eyw4RRCYMulG0IsCSbPubw/go/utl2TDwk uC0u -----END CERTIFICATE-----Generated at Sun Nov 23 05:42:16 2025 by rpki-client