This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b92e0d-24ad-459d-a042-b5f94fba96db.roa File: 43b92e0d-24ad-459d-a042-b5f94fba96db.roa (raw, json) Hash identifier: pSS3tqa3zDFuT5V/1mJOYzHNdaXH5C8EGo9mXt7LZkk= Subject key identifier: 3B:4A:79:4A:3F:76:42:1F:9F:06:6E:36:AC:AF:58:E6:15:5B:37:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51BA907237BF9E9002409F02F1F8F945F1DCE252 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b92e0d-24ad-459d-a042-b5f94fba96db.roa Signing time: Sun 23 Nov 2025 00:01:09 +0000 ROA not before: Sun 23 Nov 2025 00:01:09 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ba:90:72:37:bf:9e:90:02:40:9f:02:f1:f8:f9:45:f1:dc:e2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:01:09 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=1cc9f0fb9ef74eb6ba72fe244b777d6d14b7ef5a59f9d8b5cc0d50c20ba6232f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:61:10:b6:17:44:a8:f2:a7:b8:c7:81:f5: 43:d6:aa:ea:24:a1:a0:bf:d3:44:89:06:c8:a2:f5: 10:3c:c7:68:b3:4e:ad:e6:bc:80:d2:07:fa:bc:e9: 14:d0:2a:d8:4e:39:39:10:44:0a:11:98:18:cf:13: 53:34:df:2b:fb:cb:db:cb:c3:6c:52:cb:17:53:24: b0:89:a4:c0:b3:2a:ea:b2:78:90:65:0b:15:0c:95: e6:d3:a2:83:a4:75:80:92:d8:2c:7a:2d:34:27:53: 10:ff:e1:ad:ba:7d:a9:ee:c5:e3:a3:53:7f:e5:7c: 91:88:62:75:fb:a6:1c:23:23:31:77:c4:7e:d9:10: 86:5d:4d:5a:30:9c:0a:ac:7d:15:47:46:57:f7:0f: 65:fc:74:fc:0d:1b:9f:5b:af:3d:f6:7a:a4:e6:c6: 81:48:ca:71:53:25:c2:95:af:2a:17:64:fa:9d:fc: 3d:b3:17:67:e8:73:fe:49:5d:18:cc:fb:34:55:77: 99:2b:48:e6:8d:65:2c:b7:78:c7:54:63:eb:1f:a9: 97:13:b4:30:f1:2b:96:01:07:73:15:86:57:68:ef: d2:27:da:26:dd:89:af:c5:65:79:ce:82:4c:c5:f8: ee:e9:9d:ce:30:8b:95:f1:95:50:80:e6:f9:21:81: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4A:79:4A:3F:76:42:1F:9F:06:6E:36:AC:AF:58:E6:15:5B:37:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b92e0d-24ad-459d-a042-b5f94fba96db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:e080::/48 Signature Algorithm: sha256WithRSAEncryption 55:db:76:b3:c3:61:1a:6a:06:35:72:00:c7:1d:db:63:20:79: b8:7e:63:2f:e5:de:8d:90:74:5e:2d:58:87:e1:56:b3:9e:b3: 80:e7:38:aa:4d:e0:4d:04:c5:e1:e3:d1:46:e6:2d:c7:b3:43: 60:ad:b4:7a:ff:9b:31:b4:08:8f:5f:29:22:cb:89:b3:fb:c4: 6d:6d:0c:fa:43:19:b6:f3:87:3c:9e:e6:b0:c5:e5:f1:7b:ea: c4:cf:da:53:41:ac:85:e4:ae:de:09:71:02:08:e9:8d:78:47: f2:f8:11:82:e0:e6:df:8f:3b:1f:bf:e3:96:4f:4b:23:cd:cb: a6:f3:a9:60:bb:e0:2f:6e:d0:dd:d2:66:2a:03:bb:dd:ee:66: 84:19:32:98:c5:00:1e:c7:51:73:52:41:29:fd:b6:0c:8c:dc: 6b:aa:80:da:df:94:7e:95:65:2c:5a:61:ef:85:46:0d:94:82: f8:21:2e:ef:96:52:37:8d:f6:dc:08:53:62:80:41:07:d8:c7: f0:09:a8:26:8f:0e:0d:bf:3e:ad:4b:34:ed:77:7e:fe:ac:de: 6f:d5:08:85:71:8f:b9:ca:8f:38:e9:a2:05:5a:b9:ba:eb:84: f7:39:1c:10:d3:91:f3:76:0b:9a:59:6b:a8:94:61:ba:ce:bb: ca:ce:4d:d0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUbqQcje/npACQJ8C8fj5RfHc4lIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMDEwOVoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAMWNjOWYwZmI5ZWY3NGViNmJhNzJm ZTI0NGI3NzdkNmQxNGI3ZWY1YTU5ZjlkOGI1Y2MwZDUwYzIwYmE2MjMyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYphELYXRKjyp7jHgfVD1qrqJKGg v9NEiQbIovUQPMdos06t5ryA0gf6vOkU0CrYTjk5EEQKEZgYzxNTNN8r+8vby8Ns UssXUySwiaTAsyrqsniQZQsVDJXm06KDpHWAktgsei00J1MQ/+Gtun2p7sXjo1N/ 5XyRiGJ1+6YcIyMxd8R+2RCGXU1aMJwKrH0VR0ZX9w9l/HT8DRufW6899nqk5saB SMpxUyXCla8qF2T6nfw9sxdn6HP+SV0YzPs0VXeZK0jmjWUst3jHVGPrH6mXE7Qw 8SuWAQdzFYZXaO/SJ9om3YmvxWV5zoJMxfju6Z3OMIuV8ZVQgOb5IYGX3wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDtKeUo/dkIfnwZuNqyvWOYVWzdzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYjkyZTBkLTI0YWQtNDU5ZC1hMDQyLWI1Zjk0ZmJhOTZkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6uCAMA0GCSqGSIb3DQEBCwUAA4IBAQBV23azw2EaagY1cgDH HdtjIHm4fmMv5d6NkHReLViH4VaznrOA5ziqTeBNBMXh49FG5i3Hs0NgrbR6/5sx tAiPXykiy4mz+8RtbQz6Qxm284c8nuawxeXxe+rEz9pTQayF5K7eCXECCOmNeEfy +BGC4Obfjzsfv+OWT0sjzcum86lgu+AvbtDd0mYqA7vd7maEGTKYxQAex1FzUkEp /bYMjNxrqoDa35R+lWUsWmHvhUYNlIL4IS7vllI3jfbcCFNigEEH2MfwCagmjw4N vz6tSzTtd37+rN5v1QiFcY+5yo846aIFWrm664T3ORwQ05HzdguaWWuolGG6zrvK zk3Q -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:38 2025 by rpki-client