This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa File: 511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa (raw, json) Hash identifier: jQ/+kMeNnaROKWT1tMRDrIQq0+93dLrVgdpTnbSflfM= Subject key identifier: 36:90:70:E6:9A:73:8C:E8:79:5B:20:A7:C2:39:C5:6C:B4:5A:67:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28A3FD21D699D786B31F9B50579B1A6A7350D405 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa Signing time: Sun 23 Nov 2025 00:00:44 +0000 ROA not before: Sun 23 Nov 2025 00:00:44 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a3:fd:21:d6:99:d7:86:b3:1f:9b:50:57:9b:1a:6a:73:50:d4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:44 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=8c4f82210717059c2634f5250dc415c3f60a7f12493a91dd96bf64bd3790be87, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:d0:e0:f7:df:c0:90:39:57:39:89:61:d4: e5:db:07:bc:57:90:60:56:57:b1:e5:23:89:d6:b4: ba:00:43:50:10:07:8d:d5:da:3b:e5:2d:38:73:91: 8d:cd:bb:29:43:36:c7:19:1c:f5:fc:51:a9:17:f9: e8:a9:d7:82:54:5e:a8:4e:4d:08:0e:57:d1:5c:e3: 94:a3:2d:53:3c:f2:bd:5e:9e:f4:ed:75:6a:9b:48: b3:9e:b8:72:89:56:cf:6d:00:c5:f1:11:b2:43:95: e6:de:58:f7:65:24:55:4a:20:e3:78:e3:e0:71:9f: 17:34:44:03:a2:91:41:cd:e3:e1:29:04:94:d7:67: 3c:2a:f3:a7:fb:35:52:c8:0f:96:f1:83:86:49:4e: 2f:49:66:e3:72:f8:57:c7:f8:2f:de:d9:ed:21:7f: 12:e2:c4:83:5b:93:d3:e9:5d:63:ec:fc:12:9e:28: b5:2a:b8:74:f4:65:d5:cc:c3:b9:a0:e3:ce:a8:9c: 38:94:df:c4:ae:e2:6e:fe:38:a6:00:6c:0b:94:3a: db:d8:19:29:45:4f:31:80:ef:40:2b:0e:36:27:6f: bf:82:9b:7e:67:ea:60:39:f0:f6:60:a5:ad:d8:7b: 01:56:82:f9:d1:35:1f:e1:ef:1b:08:fe:4e:4d:4e: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:90:70:E6:9A:73:8C:E8:79:5B:20:A7:C2:39:C5:6C:B4:5A:67:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:f000::/40 Signature Algorithm: sha256WithRSAEncryption 84:f9:0c:45:18:0a:f6:fd:5f:33:a2:89:39:2c:1c:17:a4:ea: bd:30:db:20:54:51:8d:0b:a8:1c:30:a2:dd:15:09:fd:ea:fa: 07:30:14:53:1f:44:05:30:c3:f0:99:a6:84:d1:26:e5:ef:03: d3:a1:5e:6e:d4:b6:a5:11:93:8e:7e:cf:7b:0b:33:e9:a8:9e: 2c:86:c8:af:3b:eb:35:51:07:32:21:ca:2b:f9:3c:9f:04:f2: 3e:47:69:d6:f3:be:08:c4:0b:33:e3:9a:98:10:c1:28:8d:a2: 2f:2e:f9:ce:21:24:d7:44:a6:b4:95:fe:61:a4:0d:24:f9:aa: a4:0d:10:b0:a0:f4:e1:9d:98:f0:a8:dd:10:fe:44:39:0d:a0: 82:1e:4e:10:1e:dd:44:53:6b:9d:cc:9c:58:c5:5c:a2:83:f8: 18:74:2c:56:a4:f1:ad:f8:99:d7:cb:34:60:47:84:d0:7c:f9: 07:1f:90:34:98:36:fc:e0:56:fc:55:ff:6e:a4:65:71:00:6d: 9c:03:1a:9a:09:82:e4:85:0f:f9:30:d7:60:84:0b:f6:1a:21: b1:3b:31:15:29:3c:f4:a3:1f:44:c0:9d:a2:53:fc:db:22:9f: c3:ba:83:ee:22:4d:06:96:61:89:55:7f:55:9a:9f:27:40:0a: 9f:90:b2:b7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKKP9IdaZ14azH5tQV5saanNQ1AUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMDA0NFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAOGM0ZjgyMjEwNzE3MDU5YzI2MzRm NTI1MGRjNDE1YzNmNjBhN2YxMjQ5M2E5MWRkOTZiZjY0YmQzNzkwYmU4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxzQ4PffwJA5VzmJYdTl2we8V5Bg Vlex5SOJ1rS6AENQEAeN1do75S04c5GNzbspQzbHGRz1/FGpF/noqdeCVF6oTk0I DlfRXOOUoy1TPPK9Xp707XVqm0iznrhyiVbPbQDF8RGyQ5Xm3lj3ZSRVSiDjeOPg cZ8XNEQDopFBzePhKQSU12c8KvOn+zVSyA+W8YOGSU4vSWbjcvhXx/gv3tntIX8S 4sSDW5PT6V1j7PwSnii1Krh09GXVzMO5oOPOqJw4lN/EruJu/jimAGwLlDrb2Bkp RU8xgO9AKw42J2+/gpt+Z+pgOfD2YKWt2HsBVoL50TUf4e8bCP5OTU7AvwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDaQcOaac4zoeVsgp8I5xWy0WmfJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxMTgxNmY5LTIzYzMtNDFmYi05ZDUwLTJhMmY0ZDY2NmM3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauPAwDQYJKoZIhvcNAQELBQADggEBAIT5DEUYCvb9XzOiiTks HBek6r0w2yBUUY0LqBwwot0VCf3q+gcwFFMfRAUww/CZpoTRJuXvA9OhXm7UtqUR k45+z3sLM+moniyGyK876zVRBzIhyiv5PJ8E8j5HadbzvgjECzPjmpgQwSiNoi8u +c4hJNdEprSV/mGkDST5qqQNELCg9OGdmPCo3RD+RDkNoIIeThAe3URTa53MnFjF XKKD+Bh0LFak8a34mdfLNGBHhNB8+QcfkDSYNvzgVvxV/26kZXEAbZwDGpoJguSF D/kw12CEC/YaIbE7MRUpPPSjH0TAnaJT/Nsin8O6g+4iTQaWYYlVf1WanydACp+Q src= -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:12 2025 by rpki-client