This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa7e3294-e52d-460b-b3b0-7025fd72e0d2.roa File: fa7e3294-e52d-460b-b3b0-7025fd72e0d2.roa (raw, json) Hash identifier: wa4RF5Cee+ZA6RQ+CuE2Umu8eaL7hdMUhAadQxh6ims= Subject key identifier: 14:F6:44:92:AA:67:30:2C:18:59:EC:F6:5E:5A:A9:FF:C0:D9:52:F1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28CAB0686D984A5E20E51ECD5044090D0BC10F04 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa7e3294-e52d-460b-b3b0-7025fd72e0d2.roa Signing time: Sat 08 Nov 2025 00:10:03 +0000 ROA not before: Sat 08 Nov 2025 00:10:03 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ca:b0:68:6d:98:4a:5e:20:e5:1e:cd:50:44:09:0d:0b:c1:0f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:10:03 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=8b2d396688920db846efb58685b3de30456bb6a8fffc096d0e4bcbc4cd92e477, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:83:c0:70:87:05:72:59:dc:4f:6f:33:d3: db:c6:57:c4:01:c2:76:fd:1f:ad:05:a7:00:4f:f1: 69:98:50:19:f4:14:10:11:9e:cc:24:7c:e9:80:f5: c5:45:a4:b7:69:6c:3e:be:01:88:8f:96:6d:f0:d6: b6:4a:2c:31:12:fb:36:25:6c:07:29:af:a2:80:77: de:c1:e3:d7:0f:a5:d9:96:b0:9a:ac:7b:8e:b5:67: c5:4e:c2:7e:3d:b7:00:5f:53:25:a0:2f:63:de:02: e7:51:7e:f1:b7:a9:5e:c1:c3:f2:32:dc:da:c9:b3: 73:23:bf:bf:6d:d8:d2:10:d8:4e:1f:71:6f:6c:34: f3:0c:fd:99:88:9a:59:bd:89:40:85:aa:74:b1:38: 0e:37:ce:c3:c7:9a:bd:5c:e2:27:cf:0c:5c:d5:85: cb:bf:8f:ed:90:ff:5e:58:ba:30:8a:3d:36:cd:eb: a9:19:cb:c9:8d:f9:8c:b9:47:8e:c7:86:94:02:6f: aa:96:3a:b8:7a:fc:6f:ff:ae:0c:cc:4c:a1:f4:8a: 4b:67:f4:37:b6:98:16:d1:90:69:57:b7:ba:90:fe: d9:82:a3:31:12:f2:d6:50:6b:7a:18:5a:8f:86:c6: 87:7a:84:f1:bb:92:fa:e6:20:fc:81:7a:fe:91:e1: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:44:92:AA:67:30:2C:18:59:EC:F6:5E:5A:A9:FF:C0:D9:52:F1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa7e3294-e52d-460b-b3b0-7025fd72e0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4800::/40 Signature Algorithm: sha256WithRSAEncryption 90:21:5f:42:91:7e:07:f1:ef:9a:36:03:01:9a:ac:79:89:67: 7d:f9:19:97:de:01:e1:91:e3:cf:b8:c3:19:37:55:24:ef:c4: 8b:d0:32:96:7f:1f:e3:fc:e9:53:fc:f1:f6:58:de:0a:4f:5c: b1:28:2a:58:80:cb:85:3c:d1:05:95:50:9c:7b:9f:13:51:5d: a9:07:c5:13:50:9a:6d:13:77:4a:b4:b3:2e:94:fe:08:56:a6: 6c:59:b7:3b:09:8e:bc:d5:9e:1b:81:60:2e:9b:c1:ce:bd:fb: bb:60:88:ff:43:18:0d:6c:c7:78:82:08:50:51:f1:2e:6f:91: b7:80:5b:31:ff:92:c9:93:36:1d:2a:9b:92:ef:6a:50:28:16: b8:ca:d7:f3:ee:ae:e2:94:4c:f1:df:be:19:f3:17:9e:c9:04: 72:0b:3f:ed:d0:c1:c2:88:2f:f3:7b:aa:0f:b8:a0:cf:34:94: 56:a6:b2:06:28:66:42:41:b2:4a:e8:04:8c:a8:19:3c:67:6f: e7:ce:71:1e:df:6d:1d:e1:69:93:7e:6b:d5:c8:9f:f4:20:f5: a1:d9:23:f0:f9:2b:fd:66:00:21:28:07:4f:3f:8f:07:fd:3d: 9e:0a:51:8e:4c:2c:b9:b0:57:c5:4b:90:44:65:18:f4:33:ab: 21:f1:ac:0f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKMqwaG2YSl4g5R7NUEQJDQvBDwQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMTAwM1oX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAOGIyZDM5NjY4ODkyMGRiODQ2ZWZi NTg2ODViM2RlMzA0NTZiYjZhOGZmZmMwOTZkMGU0YmNiYzRjZDkyZTQ3NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQaDwHCHBXJZ3E9vM9PbxlfEAcJ2 /R+tBacAT/FpmFAZ9BQQEZ7MJHzpgPXFRaS3aWw+vgGIj5Zt8Na2SiwxEvs2JWwH Ka+igHfewePXD6XZlrCarHuOtWfFTsJ+PbcAX1MloC9j3gLnUX7xt6lewcPyMtza ybNzI7+/bdjSENhOH3FvbDTzDP2ZiJpZvYlAhap0sTgON87Dx5q9XOInzwxc1YXL v4/tkP9eWLowij02zeupGcvJjfmMuUeOx4aUAm+qljq4evxv/64MzEyh9IpLZ/Q3 tpgW0ZBpV7e6kP7ZgqMxEvLWUGt6GFqPhsaHeoTxu5L65iD8gXr+keEwpQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBT2RJKqZzAsGFns9l5aqf/A2VLxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhN2UzMjk0LWU1MmQtNDYwYi1iM2IwLTcwMjVmZDcyZTBkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaUgwDQYJKoZIhvcNAQELBQADggEBAJAhX0KRfgfx75o2AwGa rHmJZ335GZfeAeGR48+4wxk3VSTvxIvQMpZ/H+P86VP88fZY3gpPXLEoKliAy4U8 0QWVUJx7nxNRXakHxRNQmm0Td0q0sy6U/ghWpmxZtzsJjrzVnhuBYC6bwc69+7tg iP9DGA1sx3iCCFBR8S5vkbeAWzH/ksmTNh0qm5LvalAoFrjK1/PuruKUTPHfvhnz F57JBHILP+3QwcKIL/N7qg+4oM80lFamsgYoZkJBskroBIyoGTxnb+fOcR7fbR3h aZN+a9XIn/Qg9aHZI/D5K/1mACEoB08/jwf9PZ4KUY5MLLmwV8VLkERlGPQzqyHx rA8= -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:02 2025 by rpki-client