This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b00b4bd-a92b-43ae-b31e-fca60c8d760c.roa File: 1b00b4bd-a92b-43ae-b31e-fca60c8d760c.roa (raw, json) Hash identifier: fw1V2AsfoRVkV/2f7cSpx2ke8RZaPsjADlnPo7hnrDY= Subject key identifier: F4:17:B3:27:B7:D3:CC:31:AB:2C:12:CE:03:92:71:07:10:6E:1F:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 488BF230856CF41647785C868C62F3938A5590C3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b00b4bd-a92b-43ae-b31e-fca60c8d760c.roa Signing time: Wed 26 Nov 2025 00:00:12 +0000 ROA not before: Wed 26 Nov 2025 00:00:12 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8b:f2:30:85:6c:f4:16:47:78:5c:86:8c:62:f3:93:8a:55:90:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:00:12 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=6ba53ebcf13b0f90281947406a65364f7fe8d8f8e4040168decbed97cbe987d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:57:28:69:3f:0e:76:02:3e:82:d2:f3:f7: 88:e2:80:13:0f:53:18:af:dc:27:39:d2:fb:a5:42: 8a:0e:74:56:75:38:58:8a:6c:09:47:e0:84:4d:5d: 01:76:59:92:47:94:02:82:83:d9:5f:8e:e6:f9:28: a5:05:e0:c1:ef:83:2a:d4:30:39:b7:81:d0:70:90: 2f:50:b8:1d:a1:e4:7b:36:d3:ca:44:7b:9e:7e:8c: 1d:3a:86:65:c3:93:d7:57:b8:fa:d3:51:23:8c:d0: 4e:00:39:b7:84:e4:bc:80:42:a9:89:32:71:56:95: 3c:4a:cb:f4:fb:21:ef:1f:36:a0:66:3b:3a:73:76: 02:66:8c:f5:f2:e7:9a:8b:24:60:1d:06:ee:6a:ca: a5:d6:cc:98:63:c0:0d:3e:f1:7d:5f:4a:f7:b6:fb: 30:91:bc:62:56:0c:b6:32:5a:e8:b2:63:b6:f4:17: ac:bb:9c:4f:4f:46:da:eb:b6:38:25:66:42:95:8b: 88:34:fd:f8:26:93:07:a1:da:59:03:ff:c6:96:55: 74:94:fb:13:10:76:1f:3e:31:ab:32:d3:3e:83:89: b7:78:35:1f:7e:37:cd:27:6f:e3:6e:55:7f:80:34: 0d:ae:b0:7d:25:71:bd:b2:ba:33:e1:37:b4:de:3f: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:17:B3:27:B7:D3:CC:31:AB:2C:12:CE:03:92:71:07:10:6E:1F:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b00b4bd-a92b-43ae-b31e-fca60c8d760c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:800::/40 Signature Algorithm: sha256WithRSAEncryption c7:42:e0:40:be:ef:07:26:f5:fd:74:12:a4:2a:fb:dd:e4:b1: 4a:59:44:5b:5b:ec:5f:f8:81:46:1e:35:e9:a0:d2:b4:fc:1e: 18:32:87:af:02:3a:80:b7:6f:d6:86:ca:bd:df:11:07:9c:93: 70:93:89:f6:e6:05:a7:c7:31:ab:7b:b7:94:0e:aa:92:67:af: ee:b8:5d:a1:8e:1e:5a:26:d5:a3:86:0e:f0:6b:c6:5f:73:33: 24:66:2f:b6:47:82:1b:94:75:0d:a8:02:33:cb:5b:29:c5:c8: 3c:b9:1a:ab:54:0e:11:3b:c7:dd:a6:a1:aa:18:53:2e:6e:dd: f3:92:1f:80:d1:76:0d:f9:23:66:4b:df:98:61:da:f3:4e:bd: 17:10:6c:d3:ca:a8:15:f6:32:2c:e6:b6:58:99:c7:08:7e:16: 7c:0e:ea:ba:c3:cb:97:b9:b4:1e:19:fb:8b:b0:0d:48:b3:0a: a2:af:7a:08:f2:10:13:f3:0e:8b:8e:85:93:0d:47:e1:b3:56: c3:3a:7c:de:f3:6f:6c:d9:a1:b0:2f:3a:7b:a5:c0:41:de:93: 6b:26:42:59:b6:ab:ce:32:8c:bb:a1:23:3c:c6:3f:98:34:8e: 79:dc:61:a5:f8:36:ea:93:ec:0d:8b:ad:6f:28:10:b4:eb:11: 4a:5b:7f:cf -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSIvyMIVs9BZHeFyGjGLzk4pVkMMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDAxMloX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNANmJhNTNlYmNmMTNiMGY5MDI4MTk0 NzQwNmE2NTM2NGY3ZmU4ZDhmOGU0MDQwMTY4ZGVjYmVkOTdjYmU5ODdkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWBXKGk/DnYCPoLS8/eI4oATD1MY r9wnOdL7pUKKDnRWdThYimwJR+CETV0BdlmSR5QCgoPZX47m+SilBeDB74Mq1DA5 t4HQcJAvULgdoeR7NtPKRHuefowdOoZlw5PXV7j601EjjNBOADm3hOS8gEKpiTJx VpU8Ssv0+yHvHzagZjs6c3YCZoz18ueaiyRgHQbuasql1syYY8ANPvF9X0r3tvsw kbxiVgy2MlrosmO29Besu5xPT0ba67Y4JWZClYuINP34JpMHodpZA//GllV0lPsT EHYfPjGrMtM+g4m3eDUffjfNJ2/jblV/gDQNrrB9JXG9sroz4Te03j+uQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPQXsye308wxqywSzgOScQcQbh/DMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiMDBiNGJkLWE5MmItNDNhZS1iMzFlLWZjYTYwYzhkNzYwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9AgwDQYJKoZIhvcNAQELBQADggEBAMdC4EC+7wcm9f10EqQq +93ksUpZRFtb7F/4gUYeNemg0rT8Hhgyh68COoC3b9aGyr3fEQeck3CTifbmBafH Mat7t5QOqpJnr+64XaGOHlom1aOGDvBrxl9zMyRmL7ZHghuUdQ2oAjPLWynFyDy5 GqtUDhE7x92moaoYUy5u3fOSH4DRdg35I2ZL35hh2vNOvRcQbNPKqBX2MizmtliZ xwh+FnwO6rrDy5e5tB4Z+4uwDUizCqKvegjyEBPzDouOhZMNR+GzVsM6fN7zb2zZ obAvOnulwEHek2smQlm2q84yjLuhIzzGP5g0jnncYaX4NuqT7A2LrW8oELTrEUpb f88= -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:16 2025 by rpki-client