This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa File: 1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa (raw, json) Hash identifier: 1SyI+qPU8FnPH1Sj1nDulmoXDrE3K50+0azox01TgHs= Subject key identifier: 8C:D1:73:DE:1A:40:0A:1B:6E:3E:36:A4:CC:90:DD:86:EE:48:07:6F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 304F5DE6D0D82BDA555EA7ED471CA890D955F7CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa Signing time: Sat 22 Nov 2025 00:00:37 +0000 ROA not before: Sat 22 Nov 2025 00:00:37 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4f:5d:e6:d0:d8:2b:da:55:5e:a7:ed:47:1c:a8:90:d9:55:f7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 22 00:00:37 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=04dd0933e589587c480332b92d6578150b4d29d854856cd21686996796b287d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:0a:40:ba:ed:e5:1e:28:aa:62:9f:5b:13: e1:73:4d:15:06:34:76:6b:fe:c7:07:69:bf:90:2f: 96:4f:2e:a5:c8:b1:b1:f0:36:f8:35:3d:a8:fa:33: 9d:0b:2b:03:69:36:a9:2c:8f:7c:0b:64:96:32:4d: 80:16:12:40:0f:a9:e7:e4:ff:75:f4:4d:77:17:51: 78:f9:f9:70:ba:ab:d6:7e:46:d4:cb:e4:58:99:7a: 85:ff:0b:58:7c:d2:62:c6:4d:54:c0:09:0a:06:7e: 65:6b:99:b6:33:00:96:94:39:1f:1d:dd:1c:5b:3a: 35:c9:33:05:51:d6:47:9a:b4:e4:70:3f:61:34:f6: 64:ce:13:2b:a2:45:6b:2b:c9:16:5c:51:42:c2:71: 6f:35:46:ce:f4:30:c5:1c:4e:ed:b2:36:73:f8:ce: 16:a1:8b:64:df:81:f6:29:8e:aa:26:62:f7:14:85: c5:69:51:1c:d5:eb:78:1a:0f:f7:ff:bb:e7:2d:25: 1d:27:86:70:7e:35:50:ff:a3:33:61:ac:7d:be:83: 3f:6d:12:27:a8:63:d7:df:88:ba:99:98:c1:62:df: 08:c4:55:66:61:ee:42:d1:44:49:4d:b0:a1:ef:55: 3b:b8:49:91:17:4d:a8:f3:4f:b9:7a:cd:cc:ba:ca: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D1:73:DE:1A:40:0A:1B:6E:3E:36:A4:CC:90:DD:86:EE:48:07:6F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1553bdf1-1e9c-4fe6-a809-daf4616a9184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:c000::/40 Signature Algorithm: sha256WithRSAEncryption af:06:f6:51:5b:bc:e9:33:70:69:a0:2a:50:35:ac:1c:23:6c: 5c:98:6f:e0:29:dd:ad:1d:c3:09:dc:ff:ee:5d:a2:be:af:3d: 85:c7:bd:77:af:06:39:45:08:ce:4d:0a:44:1b:97:6b:b3:c0: 5b:d4:1e:dd:1f:cc:63:56:ea:af:02:02:b4:c5:78:05:e1:89: cd:41:7b:89:37:a3:eb:14:55:09:e7:91:dd:17:cc:60:2d:55: 8b:b0:e0:5a:e2:db:e0:4f:8c:f8:0e:0b:83:9b:5b:88:40:0c: 3a:ce:bb:02:f4:ba:6c:69:c0:a1:18:8b:10:18:59:bf:0c:de: 66:e5:b0:e5:32:5e:75:91:92:6a:b2:97:5d:8d:db:5d:87:e4: ca:d8:59:8e:de:a8:c4:b2:4d:b0:44:42:42:9f:dc:a6:c3:9d: 02:39:a7:07:52:c0:72:cd:b0:f1:fe:ec:b0:42:ab:ec:df:9b: cd:f4:92:08:87:6c:f7:c1:70:1c:fd:1b:b9:b3:9e:b3:30:d0: 2d:9e:7f:ef:99:d9:3a:75:5d:6f:b6:88:0b:80:a5:6b:27:63: 7e:9e:67:51:45:44:a2:b8:8b:ab:75:cb:8e:39:da:1f:4b:5a: b6:83:38:10:81:54:76:fc:f9:41:e3:bd:67:88:88:32:e8:de: 1e:57:48:74 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUME9d5tDYK9pVXqftRxyokNlV98swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMjAwMDAzN1oX DTI2MDIyMDIzNTk1OVowejFJMEcGA1UEBRNAMDRkZDA5MzNlNTg5NTg3YzQ4MDMz MmI5MmQ2NTc4MTUwYjRkMjlkODU0ODU2Y2QyMTY4Njk5Njc5NmIyODdkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrMKQLrt5R4oqmKfWxPhc00VBjR2 a/7HB2m/kC+WTy6lyLGx8Db4NT2o+jOdCysDaTapLI98C2SWMk2AFhJAD6nn5P91 9E13F1F4+flwuqvWfkbUy+RYmXqF/wtYfNJixk1UwAkKBn5la5m2MwCWlDkfHd0c Wzo1yTMFUdZHmrTkcD9hNPZkzhMrokVrK8kWXFFCwnFvNUbO9DDFHE7tsjZz+M4W oYtk34H2KY6qJmL3FIXFaVEc1et4Gg/3/7vnLSUdJ4ZwfjVQ/6MzYax9voM/bRIn qGPX34i6mZjBYt8IxFVmYe5C0URJTbCh71U7uEmRF02o80+5es3MusopQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIzRc94aQAobbj42pMyQ3YbuSAdvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1NTNiZGYxLTFlOWMtNGZlNi1hODA5LWRhZjQ2MTZhOTE4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMsAwDQYJKoZIhvcNAQELBQADggEBAK8G9lFbvOkzcGmgKlA1 rBwjbFyYb+Ap3a0dwwnc/+5dor6vPYXHvXevBjlFCM5NCkQbl2uzwFvUHt0fzGNW 6q8CArTFeAXhic1Be4k3o+sUVQnnkd0XzGAtVYuw4Fri2+BPjPgOC4ObW4hADDrO uwL0umxpwKEYixAYWb8M3mblsOUyXnWRkmqyl12N212H5MrYWY7eqMSyTbBEQkKf 3KbDnQI5pwdSwHLNsPH+7LBCq+zfm830kgiHbPfBcBz9G7mznrMw0C2ef++Z2Tp1 XW+2iAuApWsnY36eZ1FFRKK4i6t1y4452h9LWraDOBCBVHb8+UHjvWeIiDLo3h5X SHQ= -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:57 2025 by rpki-client