This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1da204b5-0e3f-4900-a99d-d43a795ecf89.roa File: 1da204b5-0e3f-4900-a99d-d43a795ecf89.roa (raw, json) Hash identifier: Yd3vorlfh0sg4uF6FILzgx4yw8DEE2DjGBwmXcoDLvE= Subject key identifier: B7:28:69:7B:70:98:3B:7B:0A:39:54:C8:56:8A:94:69:C1:61:26:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A1E3946F9F8C76CD34381F1294D28ED8F3CA449 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1da204b5-0e3f-4900-a99d-d43a795ecf89.roa Signing time: Thu 04 Dec 2025 00:30:07 +0000 ROA not before: Thu 04 Dec 2025 00:30:07 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1e:39:46:f9:f8:c7:6c:d3:43:81:f1:29:4d:28:ed:8f:3c:a4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:30:07 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=5ce47c273e197c68c613c9be1fd08fe56915d4b3d5a599195dbbc9bf5ca4bf17, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:75:77:52:bf:c8:ff:4a:2d:1a:7c:6d:90: 0c:7b:0b:53:72:74:75:ab:fc:f1:56:5e:1b:ee:c8: 9f:d2:d6:6b:74:ea:44:f5:39:10:8c:0f:cc:40:7f: c5:9c:0e:bb:3d:fe:19:45:85:6f:38:bf:45:a8:dd: b5:fe:12:c9:59:f1:6b:95:7a:fa:3f:8b:13:a0:22: d8:7d:2a:47:e4:0d:07:14:4e:c1:21:48:51:37:56: 46:72:a1:9f:0a:c8:3c:b1:e2:80:09:be:9e:0d:4a: 9c:ed:82:ec:cb:d3:07:72:0c:1f:48:6f:e1:a8:cf: a9:1a:0b:71:69:14:f9:48:95:c6:a7:a0:e6:ad:89: 04:f5:13:bf:44:cd:d1:1a:48:24:50:50:6b:7d:cc: 0c:29:9f:79:57:59:e5:ef:cc:db:1c:27:7e:fc:06: d9:aa:f4:e1:9c:f3:79:30:3b:c7:aa:7d:c3:ee:c4: fb:63:4b:01:2e:f2:b0:d9:5c:71:4e:b4:4a:8d:94: 70:ec:c9:fb:39:99:1b:88:2f:1b:fc:76:02:b8:5d: 7b:fc:a5:87:4f:1f:d8:a2:73:96:30:1a:14:db:66: 98:ef:b4:36:a8:ec:6c:8f:04:9e:81:70:b9:ac:86: ca:90:2c:6d:84:14:3e:82:50:50:bb:e2:51:69:dc: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:28:69:7B:70:98:3B:7B:0A:39:54:C8:56:8A:94:69:C1:61:26:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1da204b5-0e3f-4900-a99d-d43a795ecf89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8400::/38 Signature Algorithm: sha256WithRSAEncryption c9:fd:bb:25:23:2a:65:26:83:46:e7:08:1b:be:8b:1f:3c:9b: 5b:36:06:8c:6d:28:a1:e1:2e:3e:bd:29:24:5b:10:a0:9f:cc: c9:79:b1:cf:a3:75:1c:fc:53:3b:db:3c:ea:38:18:38:8f:31: fb:be:b4:a3:41:fd:61:a1:bd:fe:76:52:3f:57:16:03:04:fa: 65:c2:3d:ca:62:4a:16:8f:3a:91:5a:35:45:3a:ec:56:fa:b3: 12:74:e5:2b:a4:b7:2c:89:bd:d0:6b:14:85:d3:1c:9d:49:fc: 09:ef:97:f7:18:2d:00:a8:8f:f5:8c:71:7c:33:a8:e6:5f:c1: 1f:8e:dd:bf:10:ac:79:92:65:a2:74:32:52:8d:93:43:4f:94: 61:23:08:5c:1e:d9:ae:b6:48:de:6a:e6:2b:60:9c:b0:3f:91: 9f:bf:23:cd:39:e5:02:33:26:18:0e:7a:5b:78:fe:1c:5f:b9: 5a:9f:11:74:53:2b:cc:fd:3c:36:80:dc:57:ba:c0:28:b1:bf: e3:ac:65:83:7e:85:d4:5f:db:4d:fd:09:13:e1:f9:83:34:61: 88:d9:9c:ed:9a:52:91:27:7a:ea:02:87:04:68:be:99:67:a9: 6f:ee:fe:a7:29:24:99:3b:1d:70:19:cb:16:1f:83:16:01:10: 1b:01:63:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCh45Rvn4x2zTQ4HxKU0o7Y88pEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzAwN1oX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANWNlNDdjMjczZTE5N2M2OGM2MTNj OWJlMWZkMDhmZTU2OTE1ZDRiM2Q1YTU5OTE5NWRiYmM5YmY1Y2E0YmYxNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDd1d1K/yP9KLRp8bZAMewtTcnR1 q/zxVl4b7sif0tZrdOpE9TkQjA/MQH/FnA67Pf4ZRYVvOL9FqN21/hLJWfFrlXr6 P4sToCLYfSpH5A0HFE7BIUhRN1ZGcqGfCsg8seKACb6eDUqc7YLsy9MHcgwfSG/h qM+pGgtxaRT5SJXGp6DmrYkE9RO/RM3RGkgkUFBrfcwMKZ95V1nl78zbHCd+/AbZ qvThnPN5MDvHqn3D7sT7Y0sBLvKw2VxxTrRKjZRw7Mn7OZkbiC8b/HYCuF17/KWH Tx/YonOWMBoU22aY77Q2qOxsjwSegXC5rIbKkCxthBQ+glBQu+JRadyPSwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLcoaXtwmDt7CjlUyFaKlGnBYSYNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFkYTIwNGI1LTBlM2YtNDkwMC1hOTlkLWQ0M2E3OTVlY2Y4OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIQwDQYJKoZIhvcNAQELBQADggEBAMn9uyUjKmUmg0bnCBu+ ix88m1s2BoxtKKHhLj69KSRbEKCfzMl5sc+jdRz8UzvbPOo4GDiPMfu+tKNB/WGh vf52Uj9XFgME+mXCPcpiShaPOpFaNUU67Fb6sxJ05SuktyyJvdBrFIXTHJ1J/Anv l/cYLQCoj/WMcXwzqOZfwR+O3b8QrHmSZaJ0MlKNk0NPlGEjCFwe2a62SN5q5itg nLA/kZ+/I8055QIzJhgOelt4/hxfuVqfEXRTK8z9PDaA3Fe6wCixv+OsZYN+hdRf 2039CRPh+YM0YYjZnO2aUpEneuoChwRovplnqW/u/qcpJJk7HXAZyxYfgxYBEBsB YyM= -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:12 2025 by rpki-client