This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa File: d845b183-711b-4c94-b81c-1732651903fe.roa (raw, json) Hash identifier: //e7p3d3kAIXH9/L6VHnfzKv2GzeVx+Sf0B4JygbtG4= Subject key identifier: 1A:77:7F:1C:A4:C3:3E:F5:E1:E9:FA:94:6A:9D:C4:EE:31:5C:B2:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3128BAB2829BE424F90E0633FB561EF05F8ED7F0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa Signing time: Thu 04 Dec 2025 00:20:31 +0000 ROA not before: Thu 04 Dec 2025 00:20:31 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:28:ba:b2:82:9b:e4:24:f9:0e:06:33:fb:56:1e:f0:5f:8e:d7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:20:31 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=5b7c33eefeb52df121291c15c952cfd26f2a5df35d77c9ebbdacf0f91ecb3049, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:eb:f7:28:0b:ec:d5:f7:ee:94:be:54:21: 7c:43:67:35:7a:5f:ad:e9:2b:b2:24:e6:76:5a:33: 1e:be:67:58:b3:db:39:17:c9:41:ea:7f:d9:2f:c6: 7d:4e:01:be:47:ad:a2:8a:bb:b0:6a:ef:a3:68:b2: 2b:63:3a:da:12:dc:b4:fd:87:a5:c0:52:3a:72:04: de:3d:b0:3a:8b:82:65:ea:ca:f6:01:f3:93:49:43: ea:9c:ff:e1:6a:b6:05:d1:ef:2b:f2:53:f7:cd:dc: 3b:9d:c5:0b:29:e4:5e:16:c7:85:a7:40:4d:27:4c: 2a:de:d9:39:4d:7e:7d:ec:c6:3d:7f:19:35:7a:3c: 95:e4:e4:43:fc:37:40:b9:f4:d2:79:fc:a1:ff:93: 55:6d:19:0c:a0:7b:5d:6c:4f:2f:3e:fc:93:5d:a6: c0:2d:6f:bd:f8:d8:f0:74:a6:e1:95:34:9b:34:ac: c3:95:54:f2:3b:08:41:2a:3f:5a:b8:b0:97:85:00: 30:16:1e:49:8a:49:3d:c1:c3:de:cc:78:76:02:01: d3:18:cc:13:0b:cc:7c:99:dc:e1:61:db:3b:18:26: cd:43:bb:50:3e:3b:d2:7d:86:85:b9:54:27:43:98: 9b:bb:10:30:7d:bf:f6:37:b6:b3:26:f3:ae:44:91: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:7F:1C:A4:C3:3E:F5:E1:E9:FA:94:6A:9D:C4:EE:31:5C:B2:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:4800::/40 Signature Algorithm: sha256WithRSAEncryption 06:5b:7b:4d:11:55:d8:68:b0:b6:77:b2:ce:94:51:d4:7c:5c: fe:e8:5f:3c:30:29:e2:f5:91:25:ff:35:85:a9:f6:39:1d:fa: 3e:71:42:b5:60:45:91:4a:5e:5c:15:1b:25:cb:00:ec:f4:01: fb:41:d1:b9:5d:70:9c:df:9e:df:f5:93:9e:64:f7:d0:fa:70: ac:8e:91:7e:fd:e9:e7:f3:33:fd:3b:3b:14:27:ab:99:77:a3: 7f:72:fd:52:b0:ea:93:31:79:17:f7:f9:9b:65:96:be:8e:6f: ce:de:9c:29:49:37:04:20:60:cd:f4:1a:8e:12:7c:c8:8e:c5: 34:01:28:d5:0f:38:09:d0:82:c9:ef:44:a8:22:46:59:6a:93: fe:87:fd:93:c2:f4:1c:ea:c2:cf:1a:f9:f7:9d:45:93:21:be: 99:59:87:ef:6d:ac:48:ac:da:ec:bb:89:47:c2:19:62:32:2a: d8:e2:58:d7:22:48:87:56:63:f1:2a:a3:f4:d0:15:c0:26:83: 29:18:93:71:43:f6:2d:0b:7d:ec:fb:0c:24:56:4d:c0:f4:ea: 3d:31:b3:08:bb:91:a3:3f:68:4b:2c:f9:ac:0a:e9:7b:73:d6: 76:18:3f:84:6c:07:1d:8a:07:dd:0b:73:a5:97:16:56:66:46: e0:85:83:47 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMSi6soKb5CT5DgYz+1Ye8F+O1/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMjAzMVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANWI3YzMzZWVmZWI1MmRmMTIxMjkx YzE1Yzk1MmNmZDI2ZjJhNWRmMzVkNzdjOWViYmRhY2YwZjkxZWNiMzA0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudfr9ygL7NX37pS+VCF8Q2c1el+t 6SuyJOZ2WjMevmdYs9s5F8lB6n/ZL8Z9TgG+R62iiruwau+jaLIrYzraEty0/Yel wFI6cgTePbA6i4Jl6sr2AfOTSUPqnP/harYF0e8r8lP3zdw7ncULKeReFseFp0BN J0wq3tk5TX597MY9fxk1ejyV5ORD/DdAufTSefyh/5NVbRkMoHtdbE8vPvyTXabA LW+9+NjwdKbhlTSbNKzDlVTyOwhBKj9auLCXhQAwFh5Jikk9wcPezHh2AgHTGMwT C8x8mdzhYds7GCbNQ7tQPjvSfYaFuVQnQ5ibuxAwfb/2N7azJvOuRJExGwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBp3fxykwz714en6lGqdxO4xXLJyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4NDViMTgzLTcxMWItNGM5NC1iODFjLTE3MzI2NTE5MDNmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+EgwDQYJKoZIhvcNAQELBQADggEBAAZbe00RVdhosLZ3ss6U UdR8XP7oXzwwKeL1kSX/NYWp9jkd+j5xQrVgRZFKXlwVGyXLAOz0AftB0bldcJzf nt/1k55k99D6cKyOkX796efzM/07OxQnq5l3o39y/VKw6pMxeRf3+Ztllr6Ob87e nClJNwQgYM30Go4SfMiOxTQBKNUPOAnQgsnvRKgiRllqk/6H/ZPC9Bzqws8a+fed RZMhvplZh+9trEis2uy7iUfCGWIyKtjiWNciSIdWY/Eqo/TQFcAmgykYk3FD9i0L fez7DCRWTcD06j0xswi7kaM/aEss+awK6Xtz1nYYP4RsBx2KB90Lc6WXFlZmRuCF g0c= -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:12 2025 by rpki-client