This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa File: 77745ad7-44b5-44a8-9e13-4096720b7c90.roa (raw, json) Hash identifier: mLVtMXqNBcXGp7i579V5Aj+nnjEIotvq+Mv89AmcXwg= Subject key identifier: A9:B2:EF:2A:94:56:5C:C1:59:3F:AF:E3:9B:13:C6:89:A5:25:59:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F699D9AD488EA4D0E10B85AF492A2EDF4FB5210 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa Signing time: Tue 02 Dec 2025 00:11:07 +0000 ROA not before: Tue 02 Dec 2025 00:11:07 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:69:9d:9a:d4:88:ea:4d:0e:10:b8:5a:f4:92:a2:ed:f4:fb:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:11:07 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=b9a4849f70fda5ccd2203edfed0ebfb3e0cb7465640fa419d426aa3c44a371c9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:8f:b5:5f:6a:c7:c9:ba:93:b1:49:93:62: b8:6d:d1:c3:12:c0:b9:e3:c7:50:89:22:47:c0:53: 49:76:e7:f8:e6:40:f8:f2:b4:b9:6b:f6:4f:0f:36: e6:84:d8:e9:e8:9b:3e:2a:35:70:17:fb:bd:82:87: 47:0f:e1:17:18:b8:87:ee:4a:66:93:06:8b:05:b7: b9:aa:da:51:4d:7d:6f:ff:18:93:9b:14:86:bd:8e: 02:af:c7:f9:d4:8e:f0:a9:9d:f0:15:20:88:57:42: 93:56:f8:c1:0c:59:d3:58:d9:4c:4b:b8:c6:3e:be: cc:cc:29:1f:ea:2e:10:b5:40:26:99:db:18:22:49: 80:e4:7e:a8:9d:12:03:93:52:8a:9f:14:77:a5:ff: 73:8f:8a:dd:03:11:4e:a8:9e:3d:45:71:d4:ac:f2: 49:dd:50:af:7c:6b:2a:00:99:3b:1b:ce:35:09:2d: 44:54:b4:5a:84:46:ec:e8:f4:88:50:7e:21:33:04: c2:52:e9:25:a6:9c:89:10:fe:d9:81:b4:98:87:a2: 6e:4e:41:e8:91:11:12:b5:39:05:56:81:8f:b9:05: 85:5d:15:46:a9:b5:ea:6c:76:53:1e:1a:92:dc:e7: 07:bf:13:38:6c:76:72:54:da:53:10:62:a8:4f:40: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B2:EF:2A:94:56:5C:C1:59:3F:AF:E3:9B:13:C6:89:A5:25:59:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9080::/48 Signature Algorithm: sha256WithRSAEncryption b0:18:74:f9:a0:01:c8:ce:09:41:14:d6:b4:33:87:2f:25:44: 57:6a:51:16:d2:2c:51:cf:fc:49:c5:7a:ef:6d:dd:9b:45:ec: a5:35:40:a6:5f:fa:4d:63:59:de:0a:ad:c6:c1:d3:f2:44:06: 39:4a:64:3a:b6:4e:55:07:04:0e:c8:02:bc:35:30:c5:b7:2c: 2a:48:6a:72:0f:94:9b:74:83:2f:ca:b1:93:72:2a:89:cd:38: d5:87:70:1a:24:9c:be:1c:3d:be:e3:df:e7:01:e4:65:44:31: c2:c3:03:12:22:7e:2b:a9:01:87:68:b5:08:86:c6:e7:9c:59: a2:b1:91:d9:ab:be:e1:06:71:a1:9d:38:6c:d8:a4:bf:a5:ce: 96:98:3b:eb:33:47:06:97:24:bb:8c:10:14:d3:38:a4:c8:40: 8f:a6:ac:2b:5b:08:19:b1:dd:cc:3b:0d:f5:89:a6:25:01:e2: c1:5a:64:1e:a9:42:c9:ff:2e:38:69:67:18:ff:0e:89:11:9e: ae:8b:71:5c:1c:15:14:c1:0a:f4:6f:31:a9:8a:7b:66:9c:e8: 5d:25:4a:5f:42:6c:88:9f:fd:a8:71:8f:35:d3:79:43:30:38: 48:1d:56:f7:ee:d3:11:6a:8d:83:1c:35:ea:dd:8c:c9:5c:4a: d4:d1:9a:ee -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf2mdmtSI6k0OELha9JKi7fT7UhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMTEwN1oX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAYjlhNDg0OWY3MGZkYTVjY2QyMjAz ZWRmZWQwZWJmYjNlMGNiNzQ2NTY0MGZhNDE5ZDQyNmFhM2M0NGEzNzFjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbaPtV9qx8m6k7FJk2K4bdHDEsC5 48dQiSJHwFNJduf45kD48rS5a/ZPDzbmhNjp6Js+KjVwF/u9godHD+EXGLiH7kpm kwaLBbe5qtpRTX1v/xiTmxSGvY4Cr8f51I7wqZ3wFSCIV0KTVvjBDFnTWNlMS7jG Pr7MzCkf6i4QtUAmmdsYIkmA5H6onRIDk1KKnxR3pf9zj4rdAxFOqJ49RXHUrPJJ 3VCvfGsqAJk7G841CS1EVLRahEbs6PSIUH4hMwTCUuklppyJEP7ZgbSYh6JuTkHo kREStTkFVoGPuQWFXRVGqbXqbHZTHhqS3OcHvxM4bHZyVNpTEGKoT0CcpQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKmy7yqUVlzBWT+v45sTxomlJVnrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3NzQ1YWQ3LTQ0YjUtNDRhOC05ZTEzLTQwOTY3MjBiN2M5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5CAMA0GCSqGSIb3DQEBCwUAA4IBAQCwGHT5oAHIzglBFNa0 M4cvJURXalEW0ixRz/xJxXrvbd2bReylNUCmX/pNY1neCq3GwdPyRAY5SmQ6tk5V BwQOyAK8NTDFtywqSGpyD5SbdIMvyrGTciqJzTjVh3AaJJy+HD2+49/nAeRlRDHC wwMSIn4rqQGHaLUIhsbnnFmisZHZq77hBnGhnThs2KS/pc6WmDvrM0cGlyS7jBAU 0zikyECPpqwrWwgZsd3MOw31iaYlAeLBWmQeqULJ/y44aWcY/w6JEZ6ui3FcHBUU wQr0bzGpintmnOhdJUpfQmyIn/2ocY8103lDMDhIHVb37tMRao2DHDXq3YzJXErU 0Zru -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:48 2025 by rpki-client