This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa File: 31f81ea6-74ce-4274-9ac4-8387da206374.roa (raw, json) Hash identifier: 8+cxOYhaDQ9HOXLjEZQcCEA1UjJD0qU91nME/N4bSHg= Subject key identifier: C5:87:5E:E6:91:3D:CB:FD:0F:F2:3B:BE:7B:E8:43:53:81:4C:D5:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21EAB6B43B5C3630BD02EBF0F5F93200495762EC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa Signing time: Tue 02 Dec 2025 00:11:06 +0000 ROA not before: Tue 02 Dec 2025 00:11:06 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ea:b6:b4:3b:5c:36:30:bd:02:eb:f0:f5:f9:32:00:49:57:62:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:11:06 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=7a63e19199026b2af04db7cb4b9c21371413cf0b0204375b79f1acaf920e4399, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:78:7f:d3:0a:c4:1a:ca:2e:1c:f8:db:5a: 33:fa:70:b0:09:27:87:61:64:8c:43:69:e1:57:c3: 69:01:b6:c9:72:0d:84:39:59:94:9e:c4:3e:58:26: c6:56:d5:e1:fd:79:9f:e5:d7:44:61:75:33:6f:97: c6:ba:61:91:6a:30:58:40:e7:77:a8:6b:38:ce:18: 32:1a:38:ff:93:7e:8c:65:db:27:b9:44:9d:2a:ba: 0b:9c:2d:26:c8:50:75:92:bc:59:07:ec:8c:ea:fd: e2:09:43:91:7f:63:1d:32:e2:03:bf:47:f9:0d:e5: a1:f7:cd:40:ad:39:fb:59:82:e9:fd:43:69:56:fc: bc:b5:08:4d:0c:c2:17:7b:a6:c0:55:aa:18:b6:cc: a8:5b:af:b2:b1:99:04:f0:1e:e2:0d:e2:d8:17:64: 92:74:2e:15:12:a5:37:16:6a:d5:75:f3:6b:69:a1: af:e7:f1:a9:9f:75:01:9c:65:4b:10:a3:88:5a:fd: ce:36:9c:07:ad:06:58:05:32:14:09:9b:7d:55:a4: 00:61:79:29:13:7a:f4:a5:9f:6d:6e:14:ec:60:46: 79:ad:21:9d:83:f2:d0:14:42:92:9f:eb:c5:b3:cd: b3:0c:45:74:06:6a:08:12:fa:21:a1:fc:46:4b:93: 3e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:87:5E:E6:91:3D:CB:FD:0F:F2:3B:BE:7B:E8:43:53:81:4C:D5:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31f81ea6-74ce-4274-9ac4-8387da206374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8040::/48 Signature Algorithm: sha256WithRSAEncryption 7a:f9:ec:5f:19:da:cb:4b:1e:97:8b:07:14:05:11:08:70:99: 26:d8:da:f5:be:e0:00:a7:e6:00:64:d6:b9:4e:06:66:dd:e5: cb:df:46:ff:f4:c1:72:40:36:2e:40:54:69:4b:6f:54:2e:51: 74:7b:ec:85:f4:b2:27:ed:16:6f:3f:d4:51:3b:93:dd:7e:93: b9:93:a1:04:5d:c6:d5:62:bc:f1:92:e0:fa:46:34:ef:60:07: d6:21:fc:fa:ad:09:9a:28:ce:53:88:a9:b4:48:96:5d:26:32: a8:3f:93:7e:4d:66:23:1c:a2:52:73:28:8c:ae:dd:0b:09:c0: dc:c4:34:fa:65:28:4d:db:e4:55:9d:ed:c7:6f:e8:c6:8b:93: 9b:7f:f3:b6:c7:27:62:d4:10:ed:82:fa:43:8f:81:24:75:dd: 0d:86:6a:4d:17:b9:d4:bc:ab:d9:a1:0f:0b:46:6c:a7:ff:03: ea:4c:0f:57:53:6f:c6:96:ad:b8:ff:4b:a0:e4:ee:5b:5b:69: f6:ad:29:b6:5c:58:91:21:3f:3a:72:97:22:39:ee:95:3a:cc: 53:8b:29:fe:9f:21:3e:4d:61:36:59:b3:8e:fe:41:ca:7d:13: 46:d3:80:5a:0a:a6:de:be:1d:e2:38:0b:6d:0c:14:6f:80:40: fd:50:0c:9a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIeq2tDtcNjC9Auvw9fkyAElXYuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMTEwNloX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAN2E2M2UxOTE5OTAyNmIyYWYwNGRi N2NiNGI5YzIxMzcxNDEzY2YwYjAyMDQzNzViNzlmMWFjYWY5MjBlNDM5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0J4f9MKxBrKLhz421oz+nCwCSeH YWSMQ2nhV8NpAbbJcg2EOVmUnsQ+WCbGVtXh/Xmf5ddEYXUzb5fGumGRajBYQOd3 qGs4zhgyGjj/k36MZdsnuUSdKroLnC0myFB1krxZB+yM6v3iCUORf2MdMuIDv0f5 DeWh981ArTn7WYLp/UNpVvy8tQhNDMIXe6bAVaoYtsyoW6+ysZkE8B7iDeLYF2SS dC4VEqU3FmrVdfNraaGv5/Gpn3UBnGVLEKOIWv3ONpwHrQZYBTIUCZt9VaQAYXkp E3r0pZ9tbhTsYEZ5rSGdg/LQFEKSn+vFs82zDEV0BmoIEvohofxGS5M+tQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMWHXuaRPcv9D/I7vnvoQ1OBTNXyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxZjgxZWE2LTc0Y2UtNDI3NC05YWM0LTgzODdkYTIwNjM3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYBAMA0GCSqGSIb3DQEBCwUAA4IBAQB6+exfGdrLSx6XiwcU BREIcJkm2Nr1vuAAp+YAZNa5TgZm3eXL30b/9MFyQDYuQFRpS29ULlF0e+yF9LIn 7RZvP9RRO5PdfpO5k6EEXcbVYrzxkuD6RjTvYAfWIfz6rQmaKM5TiKm0SJZdJjKo P5N+TWYjHKJScyiMrt0LCcDcxDT6ZShN2+RVne3Hb+jGi5Obf/O2xydi1BDtgvpD j4Ekdd0NhmpNF7nUvKvZoQ8LRmyn/wPqTA9XU2/Glq24/0ug5O5bW2n2rSm2XFiR IT86cpciOe6VOsxTiyn+nyE+TWE2WbOO/kHKfRNG04BaCqbevh3iOAttDBRvgED9 UAya -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:57 2025 by rpki-client