This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa File: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (raw, json) Hash identifier: 2BkwM3/1wtjpywMtwN4/FnHeiGyHBVHGkqADTb78Vho= Subject key identifier: 0E:7C:4C:80:93:C2:F7:7A:AD:7E:1C:38:B7:8E:CE:0C:75:71:16:79 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 74AC0EADFFBF78EE112A19A3EC377F685E507009 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa Signing time: Wed 12 Nov 2025 00:00:37 +0000 ROA not before: Wed 12 Nov 2025 00:00:37 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ac:0e:ad:ff:bf:78:ee:11:2a:19:a3:ec:37:7f:68:5e:50:70:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Nov 12 00:00:37 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=a955771b4eda3d07618c6e03518a824ced2e4eb5e8ff9c883ff7851eb2a8efa5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:87:94:63:0a:1b:c4:50:b6:92:44:26:ce: 8f:9f:71:62:14:bb:73:4f:ef:12:08:56:e6:53:82: 5c:47:1f:1f:50:e9:cf:da:73:17:a8:d6:70:b8:68: 25:9f:5a:91:a6:1d:b4:98:cc:73:f3:9b:58:3f:cf: b5:49:72:aa:e8:27:38:18:48:89:c0:40:0e:79:cc: 7c:b3:85:44:03:bd:52:8d:7d:5a:ac:60:24:98:ca: 01:57:61:f1:c3:e8:bd:7e:05:be:88:9d:8a:ac:ac: d7:d7:72:2f:85:72:c9:c5:32:1a:e3:30:44:09:b6: d5:81:25:ed:b3:a5:45:9c:75:72:8d:76:82:4f:9f: 2b:77:51:45:d1:c0:af:aa:07:5d:4e:b3:ae:a9:f2: ed:21:9d:14:3b:45:2c:86:e5:0b:08:52:04:0a:b9: 6b:ae:c6:ec:a4:b4:59:75:0c:71:d0:e1:db:c5:18: e0:8d:5d:44:cd:55:5f:f4:e8:b1:d8:de:5b:b8:b6: d7:3f:8d:79:92:55:41:ce:89:4c:3b:fe:5e:f7:a5: 40:9b:9f:be:9d:1a:be:99:12:76:67:9d:16:fd:45: e2:01:35:87:d0:df:19:a2:33:cd:57:ba:94:ef:d3: d4:22:14:4f:92:0e:27:ac:71:8c:1c:2a:da:c5:29: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7C:4C:80:93:C2:F7:7A:AD:7E:1C:38:B7:8E:CE:0C:75:71:16:79 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.200.0/21 Signature Algorithm: sha256WithRSAEncryption 72:2b:27:14:6c:7b:bc:57:d4:02:6c:c9:ff:22:81:f1:22:69: 06:82:ec:3f:c7:63:24:ac:ea:19:c7:b3:11:f5:ab:2d:78:d0: 61:dc:dc:7f:d7:be:ed:82:e0:7c:56:73:78:eb:df:72:ea:2a: 86:a4:bb:b6:0b:0b:1e:cd:92:1c:79:10:70:9f:20:08:05:44: 26:85:a3:98:b9:97:bc:67:c8:46:b9:6a:e8:ac:f1:44:af:ec: 86:4d:fb:3a:e9:e1:27:e3:7e:f8:c4:b8:48:b9:17:97:96:27: 8c:db:ff:18:a4:f2:4f:93:4c:52:74:81:cb:5d:d9:89:f6:71: b4:28:39:81:49:c9:06:8a:33:61:55:e5:3d:5a:cb:56:17:73: d9:ab:73:28:ff:1e:d4:d2:e2:1e:ca:1c:70:b8:3c:e8:86:6b: c4:b4:4a:ca:5e:65:9b:1c:fe:9d:55:ea:a2:35:82:59:4c:01: 28:2e:df:73:ae:63:31:61:6d:f6:c4:e9:ad:c2:ff:eb:bf:3b: 10:fe:f0:0f:2e:e3:4a:9d:55:35:93:82:68:4b:34:ad:93:6d: a0:75:b1:3f:4b:89:4e:c1:c5:5a:9b:d5:45:19:13:78:69:0d: f9:98:83:d4:34:69:02:db:a4:e3:62:a9:ec:d7:97:3b:19:11: ab:b1:c4:66 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUdKwOrf+/eO4RKhmj7Dd/aF5QcAkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MTExMjAwMDAzN1oX DTI1MTIxNzIzNTk1OVowejFJMEcGA1UEBRNAYTk1NTc3MWI0ZWRhM2QwNzYxOGM2 ZTAzNTE4YTgyNGNlZDJlNGViNWU4ZmY5Yzg4M2ZmNzg1MWViMmE4ZWZhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QOHlGMKG8RQtpJEJs6Pn3FiFLtz T+8SCFbmU4JcRx8fUOnP2nMXqNZwuGgln1qRph20mMxz85tYP8+1SXKq6Cc4GEiJ wEAOecx8s4VEA71SjX1arGAkmMoBV2Hxw+i9fgW+iJ2KrKzX13IvhXLJxTIa4zBE CbbVgSXts6VFnHVyjXaCT58rd1FF0cCvqgddTrOuqfLtIZ0UO0UshuULCFIECrlr rsbspLRZdQxx0OHbxRjgjV1EzVVf9Oix2N5buLbXP415klVBzolMO/5e96VAm5++ nRq+mRJ2Z50W/UXiATWH0N8ZojPNV7qU79PUIhRPkg4nrHGMHCraxSnZVQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFA58TICTwvd6rX4cOLeOzgx1cRZ5MB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRjYjNlOWY5LTQ2YTItNDFlYi1hNGI3LTc1YjUzZDc5MWYzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jIMA0GCSqGSIb3DQEBCwUAA4IBAQByKycUbHu8V9QCbMn/IoHx ImkGguw/x2MkrOoZx7MR9asteNBh3Nx/177tguB8VnN4699y6iqGpLu2CwsezZIc eRBwnyAIBUQmhaOYuZe8Z8hGuWrorPFEr+yGTfs66eEn4374xLhIuReXlieM2/8Y pPJPk0xSdIHLXdmJ9nG0KDmBSckGijNhVeU9WstWF3PZq3Mo/x7U0uIeyhxwuDzo hmvEtErKXmWbHP6dVeqiNYJZTAEoLt9zrmMxYW32xOmtwv/rvzsQ/vAPLuNKnVU1 k4JoSzStk22gdbE/S4lOwcVam9VFGRN4aQ35mIPUNGkC26TjYqns15c7GRGrscRm -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:27 2025 by rpki-client