This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/589cd174-ff9f-4468-b434-55095a24f148.roa File: 589cd174-ff9f-4468-b434-55095a24f148.roa (raw, json) Hash identifier: rTpPKvKc2KitY/piWk8fikIH/PRvRuUaCtOd/oppUz8= Subject key identifier: FD:28:D3:FD:84:B8:06:F0:D0:34:C1:C7:11:AD:DE:D8:FB:67:F9:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C432E73BF4F1AB55A1DE5338C12A3C42B007EC9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/589cd174-ff9f-4468-b434-55095a24f148.roa Signing time: Tue 02 Dec 2025 00:00:46 +0000 ROA not before: Tue 02 Dec 2025 00:00:46 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:43:2e:73:bf:4f:1a:b5:5a:1d:e5:33:8c:12:a3:c4:2b:00:7e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:00:46 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=6065592839feb989da4739acb701fddaf22eb50753c1f402a4825b42449a0e6b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:ae:7e:20:16:58:5e:b2:2f:c3:ac:8b:68: dc:1a:b9:67:84:c8:ef:35:48:f7:a5:cb:f2:cf:86: 81:bf:db:41:04:99:c9:9c:c7:32:67:db:7e:b4:96: b4:99:cd:ed:e8:de:fa:2f:aa:10:c1:01:47:69:39: 07:83:56:a6:27:d9:71:d3:e4:22:09:47:66:67:57: 78:4b:03:ab:94:59:ec:c5:0a:75:18:1a:54:0a:e5: be:23:74:20:f8:a0:34:59:aa:78:28:24:88:da:a2: 9d:05:68:29:41:0f:c2:4e:33:68:6e:44:a4:cd:3c: a0:ab:88:ea:16:03:3b:06:ea:a1:db:54:7a:1f:18: 72:d2:2a:7b:fe:1e:81:79:52:6b:45:d4:74:4f:7c: b9:c2:e3:e7:b2:66:63:3c:a8:0f:00:f1:cb:33:12: 55:dc:63:b1:77:cc:ba:d8:97:b1:c8:10:36:ce:2d: 37:ff:73:78:2a:a6:5e:7e:fc:92:f9:0e:ad:3b:e5: dd:3c:ca:72:00:bd:05:f4:34:72:7d:4b:d0:79:e7: 7c:c5:6e:c5:cf:a1:07:09:48:91:7f:6d:89:8f:bc: d8:37:bb:c9:98:79:f7:5a:99:aa:6d:92:0b:c4:28: aa:a6:33:2c:98:e4:39:12:91:ec:28:1d:c2:8c:6d: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:28:D3:FD:84:B8:06:F0:D0:34:C1:C7:11:AD:DE:D8:FB:67:F9:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/589cd174-ff9f-4468-b434-55095a24f148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c020::/48 Signature Algorithm: sha256WithRSAEncryption 1a:f0:bd:61:3e:d9:29:07:6a:9a:df:f1:cf:08:b2:db:3d:6e: 0d:d3:ac:db:99:3c:3a:c1:85:2b:d9:c5:6d:9f:cf:b2:7c:9b: c9:90:94:d6:22:4e:36:2d:4a:d7:8e:d1:23:cb:54:39:21:e3: 0d:1f:45:a9:65:3c:b7:39:76:65:fd:99:2f:5e:d3:e5:64:d9: fb:0c:dd:1c:11:e7:49:c5:57:36:e8:5c:ab:82:5d:2e:cc:34: 6f:3f:5a:99:23:83:b9:83:af:88:60:44:a1:78:7c:a7:bb:91: 84:ff:51:74:04:d8:7f:8f:24:47:3c:36:6b:12:a9:6b:b4:1d: d5:4f:16:cd:8d:a0:c3:eb:91:a0:41:6a:b9:df:60:c5:fc:9b: ba:fa:af:6e:6b:b3:16:04:f1:a5:36:77:2c:a6:94:8d:33:bd: 4e:0a:8e:07:70:20:99:6a:3c:ea:8c:75:28:fe:f8:8b:73:f8: 1f:5f:1c:d4:f1:88:44:54:f9:77:b6:af:a0:e2:ea:df:eb:41: 7d:ce:ef:89:fc:94:21:be:b4:92:4b:aa:28:75:59:4b:60:eb: 81:9c:93:51:cf:59:d2:57:cc:fc:b5:a5:6e:b8:63:c2:a7:46: bd:59:39:9e:05:0e:39:24:ff:8f:db:b0:b3:8a:2a:32:33:99: 2f:4a:d5:53 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTEMuc79PGrVaHeUzjBKjxCsAfskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDA0NloX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNANjA2NTU5MjgzOWZlYjk4OWRhNDcz OWFjYjcwMWZkZGFmMjJlYjUwNzUzYzFmNDAyYTQ4MjViNDI0NDlhMGU2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvueufiAWWF6yL8Osi2jcGrlnhMjv NUj3pcvyz4aBv9tBBJnJnMcyZ9t+tJa0mc3t6N76L6oQwQFHaTkHg1amJ9lx0+Qi CUdmZ1d4SwOrlFnsxQp1GBpUCuW+I3Qg+KA0Wap4KCSI2qKdBWgpQQ/CTjNobkSk zTygq4jqFgM7Buqh21R6Hxhy0ip7/h6BeVJrRdR0T3y5wuPnsmZjPKgPAPHLMxJV 3GOxd8y62JexyBA2zi03/3N4KqZefvyS+Q6tO+XdPMpyAL0F9DRyfUvQeed8xW7F z6EHCUiRf22Jj7zYN7vJmHn3WpmqbZILxCiqpjMsmOQ5EpHsKB3CjG2q9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP0o0/2EuAbw0DTBxxGt3tj7Z/nEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU4OWNkMTc0LWZmOWYtNDQ2OC1iNDM0LTU1MDk1YTI0ZjE0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMAgMA0GCSqGSIb3DQEBCwUAA4IBAQAa8L1hPtkpB2qa3/HP CLLbPW4N06zbmTw6wYUr2cVtn8+yfJvJkJTWIk42LUrXjtEjy1Q5IeMNH0WpZTy3 OXZl/ZkvXtPlZNn7DN0cEedJxVc26Fyrgl0uzDRvP1qZI4O5g6+IYESheHynu5GE /1F0BNh/jyRHPDZrEqlrtB3VTxbNjaDD65GgQWq532DF/Ju6+q9ua7MWBPGlNncs ppSNM71OCo4HcCCZajzqjHUo/viLc/gfXxzU8YhEVPl3tq+g4urf60F9zu+J/JQh vrSSS6oodVlLYOuBnJNRz1nSV8z8taVuuGPCp0a9WTmeBQ45JP+P27CziioyM5kv StVT -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:14 2025 by rpki-client