This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24530a80-10e8-4a49-a230-127756a86b17.roa File: 24530a80-10e8-4a49-a230-127756a86b17.roa (raw, json) Hash identifier: uvVrOvITa/kYxQf/x88kmpPI2jQ6diYoVhkj+fzlMaA= Subject key identifier: F4:17:D7:EF:D7:C0:06:F0:F0:EB:A8:C0:3E:A7:F8:59:62:FE:54:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 274A8E1BB537CB226F4CE0839838AE89F0C7F6CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24530a80-10e8-4a49-a230-127756a86b17.roa Signing time: Thu 04 Dec 2025 00:40:20 +0000 ROA not before: Thu 04 Dec 2025 00:40:20 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4a:8e:1b:b5:37:cb:22:6f:4c:e0:83:98:38:ae:89:f0:c7:f6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:40:20 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=3e2247b84bbfa667083737173267e20952503316abdee8074cc60cfdf2c4d0e8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:81:2b:0a:52:1f:a0:2d:cd:5d:88:4a:92: 65:0a:4f:68:f4:51:ad:3b:c8:33:e4:5f:5b:df:fa: 7c:31:14:27:94:e4:6d:37:1a:65:98:91:78:7e:36: 9c:02:d6:3e:ec:35:3d:dc:12:bf:78:01:eb:e4:97: 5e:1c:94:8b:22:f8:50:e5:36:93:78:39:a3:6d:0b: c9:ad:5d:1a:6f:7d:15:d1:2a:8e:92:bb:2c:60:a5: fd:54:21:1e:d2:8f:19:52:22:2b:3a:76:16:1f:f2: 75:24:40:82:8f:08:10:1c:bf:83:3c:17:5d:30:f2: 5a:8c:25:ca:6a:de:1d:f7:35:44:b6:02:e8:de:06: b7:16:d4:51:64:66:84:e4:aa:86:b5:d1:9c:ad:59: be:b1:f8:76:54:d1:21:f7:99:7f:57:08:86:b6:2c: 03:17:4e:e1:ce:43:53:c3:34:87:b3:d2:d4:f4:5c: 12:b4:51:6b:dc:a7:67:b0:6e:8f:c6:4c:46:49:db: 5e:ac:25:c4:98:b7:34:36:2e:c1:12:52:a1:c7:68: 84:cd:a5:1b:22:c0:e6:49:20:bc:5e:a7:fb:1f:3c: 99:53:93:ad:c9:9b:4e:57:18:ba:62:74:bd:db:f4: bb:9c:76:d0:8d:4b:26:db:24:48:81:af:94:fb:84: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:17:D7:EF:D7:C0:06:F0:F0:EB:A8:C0:3E:A7:F8:59:62:FE:54:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24530a80-10e8-4a49-a230-127756a86b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:b000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:8d:d0:89:95:e1:7b:3c:db:74:98:44:86:e2:b2:ef:5b:61: bf:21:f0:1e:0e:cf:2b:41:10:a1:85:f2:18:7f:63:f5:0a:bf: 59:58:fa:94:1a:5e:e7:d3:1f:c5:57:b9:78:17:63:5c:8d:0d: 13:d9:c3:e5:74:b4:02:d2:36:78:28:8a:59:27:bc:8d:37:48: 2f:ee:31:53:7a:d8:3e:cc:67:4d:af:68:ad:2d:57:ad:d6:32: 16:fc:b3:ad:d7:b6:39:e8:c5:1a:19:0e:d2:f4:ae:df:07:b7: 39:6b:50:64:6e:86:28:d0:b1:57:5d:d7:dd:57:e3:15:9b:04: 3d:a5:89:f7:8d:d2:e4:ba:db:8a:28:0d:64:3c:cc:15:2a:23: 2d:ba:a6:b6:8e:cd:cf:ae:7e:59:69:77:41:eb:51:c9:7c:d6: 84:77:44:0b:ff:2c:e9:3d:52:75:47:f4:7c:cc:58:37:87:4f: 20:1b:70:1a:9a:78:f8:66:a3:9c:a0:08:c0:4b:c1:18:4f:ac: 41:b3:9b:b1:96:62:4e:29:22:99:54:ea:0b:5e:83:ed:f5:d9: 78:6e:a1:03:9e:9d:c5:33:b2:cd:b1:e3:ad:03:17:11:b5:23: 32:a6:22:c8:29:89:43:c8:95:73:a8:a5:c3:96:9f:4f:ac:68: d6:6b:be:48 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJ0qOG7U3yyJvTOCDmDiuifDH9sswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwNDAyMFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAM2UyMjQ3Yjg0YmJmYTY2NzA4Mzcz NzE3MzI2N2UyMDk1MjUwMzMxNmFiZGVlODA3NGNjNjBjZmRmMmM0ZDBlODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKaBKwpSH6AtzV2ISpJlCk9o9FGt O8gz5F9b3/p8MRQnlORtNxplmJF4fjacAtY+7DU93BK/eAHr5JdeHJSLIvhQ5TaT eDmjbQvJrV0ab30V0SqOkrssYKX9VCEe0o8ZUiIrOnYWH/J1JECCjwgQHL+DPBdd MPJajCXKat4d9zVEtgLo3ga3FtRRZGaE5KqGtdGcrVm+sfh2VNEh95l/VwiGtiwD F07hzkNTwzSHs9LU9FwStFFr3KdnsG6PxkxGSdterCXEmLc0Ni7BElKhx2iEzaUb IsDmSSC8Xqf7HzyZU5OtyZtOVxi6YnS92/S7nHbQjUsm2yRIga+U+4S8LwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPQX1+/XwAbw8OuowD6n+Fli/lSEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NTMwYTgwLTEwZTgtNGE0OS1hMjMwLTEyNzc1NmE4NmIxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/rAwDQYJKoZIhvcNAQELBQADggEBADqN0ImV4Xs823SYRIbi su9bYb8h8B4OzytBEKGF8hh/Y/UKv1lY+pQaXufTH8VXuXgXY1yNDRPZw+V0tALS NngoilknvI03SC/uMVN62D7MZ02vaK0tV63WMhb8s63XtjnoxRoZDtL0rt8Htzlr UGRuhijQsVdd191X4xWbBD2lifeN0uS624ooDWQ8zBUqIy26praOzc+ufllpd0Hr Ucl81oR3RAv/LOk9UnVH9HzMWDeHTyAbcBqaePhmo5ygCMBLwRhPrEGzm7GWYk4p IplU6gteg+312XhuoQOencUzss2x460DFxG1IzKmIsgpiUPIlXOopcOWn0+saNZr vkg= -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:54 2025 by rpki-client