This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa File: 5a0d1930-a322-4bbd-8eef-91ba17b37082.roa (raw, json) Hash identifier: phjmR8IMDPHFmAsmEXjq3oOZmwuYGki8dnuZtDxGq5w= Subject key identifier: 45:8F:57:19:2B:5C:F5:29:24:1C:9F:F2:03:90:2A:62:27:15:15:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A7B0471F34508AEC1434AD0706BACDA35A173A5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa Signing time: Tue 02 Dec 2025 00:10:14 +0000 ROA not before: Tue 02 Dec 2025 00:10:14 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7b:04:71:f3:45:08:ae:c1:43:4a:d0:70:6b:ac:da:35:a1:73:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:10:14 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=a34e1ba7ecc234949c7d93edfb7e8dd691d4428209a0a2a67c56cffa45fb7020, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:61:99:9e:4a:72:0f:97:36:8f:4f:86:b2: 07:0b:43:ec:8e:5b:e7:aa:d7:3f:fd:f8:b7:dd:f2: d3:3a:16:bf:75:28:8c:0d:dd:b4:6d:b2:c0:17:94: f4:1c:bf:23:74:c8:19:51:28:91:ea:34:bd:cf:4f: e0:62:4e:d9:cf:14:08:48:21:4d:bb:55:1a:3a:02: 0a:10:a3:de:10:43:77:75:b3:75:1a:1b:d1:4f:90: 32:b2:15:89:d3:5d:e4:5c:1f:42:02:95:1d:a1:d6: 01:a8:46:3e:36:c5:15:5b:39:9d:b9:05:43:79:0e: 57:7b:a3:88:16:68:40:bd:af:42:d3:29:1e:48:44: 29:fe:76:41:97:f2:ad:28:6e:16:35:46:47:ee:e4: 5f:f4:d3:13:53:50:97:60:c2:71:fe:7b:3f:28:d0: 4d:8b:36:cb:7e:8a:b7:05:0f:5b:bc:fe:c5:fb:70: 0d:79:82:fd:08:7b:66:d9:20:63:ee:ff:11:36:1b: 2d:d3:1e:af:5b:3a:1b:79:b8:79:ff:8a:8b:3d:f8: 99:39:f7:52:00:e8:36:e6:0b:48:18:61:37:3a:e3: f8:01:2f:3a:8c:45:02:e0:48:c9:93:32:65:50:b7: b7:bc:ee:6b:bb:70:ef:fd:87:f3:02:75:97:b9:bb: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8F:57:19:2B:5C:F5:29:24:1C:9F:F2:03:90:2A:62:27:15:15:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:76:50:19:97:1a:37:8a:ed:df:9e:eb:53:bb:d2:1d:a0:e0: 4e:6e:9b:d5:00:c6:62:b5:d1:bc:d2:2c:14:4a:01:42:93:af: 1f:1e:b0:89:a4:c7:d9:78:46:09:24:f1:4d:77:f6:42:92:df: aa:5d:d3:6f:96:f4:f0:ea:05:51:f4:d4:ce:65:6e:1d:17:0d: 7a:ee:d6:3b:93:2a:92:c2:23:b8:cd:5c:94:bc:e8:35:2b:92: 99:70:a0:b1:bc:33:1c:86:fd:b8:2b:a3:16:e2:d8:c7:9d:8a: 84:3e:9b:27:b9:0e:98:64:e7:41:e7:a7:29:1d:57:da:2a:a2: 0b:01:bc:94:6a:a5:05:06:75:4a:a8:9d:2d:45:bf:84:84:e4: 2e:b2:6b:ba:65:c7:af:a2:87:d5:67:be:82:7f:17:98:9a:63: 04:ca:7f:1e:11:60:ba:83:58:d0:e3:1c:29:52:19:16:bf:b3: df:b1:11:d1:8b:bb:32:6a:1a:72:02:a4:1e:11:9f:58:6c:fa: 92:af:75:df:aa:95:f5:56:4b:cb:e6:ff:2e:d0:9b:ae:57:59: 0e:57:37:51:c3:68:f5:d7:7a:d8:5c:e8:f7:91:ae:61:08:90: bb:ba:a3:20:01:ed:49:d6:78:c6:20:c1:ca:d7:aa:49:a1:8b: 9d:c6:a8:ec -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCnsEcfNFCK7BQ0rQcGus2jWhc6UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMTAxNFoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAYTM0ZTFiYTdlY2MyMzQ5NDljN2Q5 M2VkZmI3ZThkZDY5MWQ0NDI4MjA5YTBhMmE2N2M1NmNmZmE0NWZiNzAyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qphmZ5Kcg+XNo9PhrIHC0Psjlvn qtc//fi33fLTOha/dSiMDd20bbLAF5T0HL8jdMgZUSiR6jS9z0/gYk7ZzxQISCFN u1UaOgIKEKPeEEN3dbN1GhvRT5AyshWJ013kXB9CApUdodYBqEY+NsUVWzmduQVD eQ5Xe6OIFmhAva9C0ykeSEQp/nZBl/KtKG4WNUZH7uRf9NMTU1CXYMJx/ns/KNBN izbLfoq3BQ9bvP7F+3ANeYL9CHtm2SBj7v8RNhst0x6vWzobebh5/4qLPfiZOfdS AOg25gtIGGE3OuP4AS86jEUC4EjJkzJlULe3vO5ru3Dv/YfzAnWXubtUdwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEWPVxkrXPUpJByf8gOQKmInFRWSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhMGQxOTMwLWEzMjItNGJiZC04ZWVmLTkxYmExN2IzNzA4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYeDAMA0GCSqGSIb3DQEBCwUAA4IBAQBddlAZlxo3iu3fnutT u9IdoOBObpvVAMZitdG80iwUSgFCk68fHrCJpMfZeEYJJPFNd/ZCkt+qXdNvlvTw 6gVR9NTOZW4dFw167tY7kyqSwiO4zVyUvOg1K5KZcKCxvDMchv24K6MW4tjHnYqE PpsnuQ6YZOdB56cpHVfaKqILAbyUaqUFBnVKqJ0tRb+EhOQusmu6ZcevoofVZ76C fxeYmmMEyn8eEWC6g1jQ4xwpUhkWv7PfsRHRi7syahpyAqQeEZ9YbPqSr3XfqpX1 VkvL5v8u0JuuV1kOVzdRw2j113rYXOj3ka5hCJC7uqMgAe1J1njGIMHK16pJoYud xqjs -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:34 2025 by rpki-client