This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa File: 55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa (raw, json) Hash identifier: MyF0ZLeR57lAf/WAjZ804/3p8Fti5qr3L83/bQcKwsQ= Subject key identifier: FD:3E:68:40:72:82:E0:52:64:78:BB:59:44:7E:E9:2C:20:D4:2D:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77EEA68DA3C75AE13AC09662436955DDBAE52860 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa Signing time: Tue 02 Dec 2025 00:10:25 +0000 ROA not before: Tue 02 Dec 2025 00:10:25 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ee:a6:8d:a3:c7:5a:e1:3a:c0:96:62:43:69:55:dd:ba:e5:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:10:25 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=64aebcc4d974e4b7a1d153e8558505976c4b74d792ce086e49f467a2fba6c1e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:f3:6c:f4:e4:9c:a6:99:14:14:8d:81:f7: 87:80:df:74:d5:f2:70:24:d4:ce:41:5f:3b:40:fc: a3:c9:4e:25:f7:68:ed:79:38:01:22:dd:ef:0c:08: 89:30:1e:fc:85:d7:7f:fc:b8:37:4f:51:0d:fd:b5: 5f:ad:cb:0e:09:8f:7a:67:58:d7:e5:b0:93:ae:bf: 5c:ac:3a:a7:23:0a:ac:d8:28:46:cd:1f:56:73:69: 60:f8:98:fe:f7:bc:29:a8:b8:fb:7d:32:a7:ff:75: 8f:ff:a1:2f:74:0a:2b:74:05:a3:ff:54:80:4f:73: e2:c9:f9:fa:ca:6f:ad:6d:58:ae:e3:57:c1:6a:46: 23:a0:15:fa:00:7f:08:b0:96:07:78:a2:e2:1c:43: 86:91:70:c4:f6:80:f7:13:95:c2:25:79:88:8e:02: c5:34:09:af:51:80:cf:a3:e2:db:96:30:ab:8e:ec: 7b:44:20:08:94:7c:35:97:b1:78:31:f5:38:1f:66: 72:ee:72:3b:9f:21:4f:0f:6a:e4:7d:50:da:29:b1: ae:ef:f5:13:ee:6c:20:ea:2d:29:4c:1d:fa:13:4b: a8:f7:af:2f:30:fd:54:ec:b0:3c:23:17:1a:ca:65: 7e:9a:5a:3f:34:19:84:c0:82:e5:7c:29:f1:b7:e0: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3E:68:40:72:82:E0:52:64:78:BB:59:44:7E:E9:2C:20:D4:2D:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4040::/48 Signature Algorithm: sha256WithRSAEncryption 51:6d:1e:36:8d:79:e4:00:e9:38:c2:06:cf:e5:a8:be:e2:7a: c7:20:2a:cb:b8:db:ca:74:a0:3f:56:f0:ab:5f:8f:54:43:a4: 1d:6f:c3:30:4c:2e:b9:49:36:ec:30:b3:34:bc:f0:15:c9:fd: 38:f2:75:c9:c7:82:29:9a:7d:3a:c8:95:fc:b2:f6:82:12:5b: 4c:76:d1:c6:e2:01:94:01:27:be:6e:87:9a:fa:91:51:53:12: 1c:82:14:4d:ba:a1:2e:f8:bc:2f:59:d0:9a:57:57:d0:98:a2: 6c:dc:3d:29:eb:64:f2:35:9a:7e:69:47:39:69:fa:4d:61:6a: 9d:0c:eb:ff:9d:c6:5c:04:1a:6f:c2:79:28:ad:d7:c9:ae:60: a2:ca:1c:23:ad:1b:05:9e:e8:01:1e:34:a2:fb:e0:fe:2a:8d: 55:e7:c8:32:59:7d:43:f7:34:b0:03:9b:79:49:9b:92:c1:4e: ad:e0:fd:99:c0:08:01:03:95:48:38:6b:c9:3d:8a:4e:6a:2a: 82:41:b3:29:0c:b1:e1:ab:cb:4e:70:79:56:64:88:76:d3:cb: 42:7b:ff:7b:0a:7c:3f:d0:2d:de:68:72:a4:87:24:5b:78:5e: 80:76:e3:c6:3e:5b:f8:23:97:1a:5f:d9:0d:4c:3d:08:63:86: 81:6e:bf:cb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd+6mjaPHWuE6wJZiQ2lV3brlKGAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMTAyNVoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNANjRhZWJjYzRkOTc0ZTRiN2ExZDE1 M2U4NTU4NTA1OTc2YzRiNzRkNzkyY2UwODZlNDlmNDY3YTJmYmE2YzFlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9TzbPTknKaZFBSNgfeHgN901fJw JNTOQV87QPyjyU4l92jteTgBIt3vDAiJMB78hdd//Lg3T1EN/bVfrcsOCY96Z1jX 5bCTrr9crDqnIwqs2ChGzR9Wc2lg+Jj+97wpqLj7fTKn/3WP/6EvdAordAWj/1SA T3Piyfn6ym+tbViu41fBakYjoBX6AH8IsJYHeKLiHEOGkXDE9oD3E5XCJXmIjgLF NAmvUYDPo+LbljCrjux7RCAIlHw1l7F4MfU4H2Zy7nI7nyFPD2rkfVDaKbGu7/UT 7mwg6i0pTB36E0uo968vMP1U7LA8IxcaymV+mlo/NBmEwILlfCnxt+B+AwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP0+aEByguBSZHi7WUR+6Swg1C1wMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1MTY4YzNmLTU5ZjUtNGM0Yi1iZjFmLTNkNzEyYzZhODVjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kBAMA0GCSqGSIb3DQEBCwUAA4IBAQBRbR42jXnkAOk4wgbP 5ai+4nrHICrLuNvKdKA/VvCrX49UQ6Qdb8MwTC65STbsMLM0vPAVyf048nXJx4Ip mn06yJX8svaCEltMdtHG4gGUASe+boea+pFRUxIcghRNuqEu+LwvWdCaV1fQmKJs 3D0p62TyNZp+aUc5afpNYWqdDOv/ncZcBBpvwnkordfJrmCiyhwjrRsFnugBHjSi ++D+Ko1V58gyWX1D9zSwA5t5SZuSwU6t4P2ZwAgBA5VIOGvJPYpOaiqCQbMpDLHh q8tOcHlWZIh208tCe/97Cnw/0C3eaHKkhyRbeF6AduPGPlv4I5caX9kNTD0IY4aB br/L -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:42 2025 by rpki-client