This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa File: 7c72c9cc-5e02-4b29-84f1-24b580f20438.roa (raw, json) Hash identifier: yoWxrxPeCd9SZKaZfyvnMZQ2ZKuIQh+HuN5ODs+r72c= Subject key identifier: D4:38:CF:D5:2B:C1:26:F2:3C:6F:F2:0D:A7:C6:9B:A8:8C:F8:6B:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6912556D996F21EFFA2887BCB89CCF321A639C69 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa Signing time: Thu 04 Dec 2025 00:00:05 +0000 ROA not before: Thu 04 Dec 2025 00:00:05 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:12:55:6d:99:6f:21:ef:fa:28:87:bc:b8:9c:cf:32:1a:63:9c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:00:05 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=dfb7f053fabc5de6ac5fb68d15f34ec014c223f64bf128cde64ebe8a5abe18ce, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:b7:82:11:75:12:ff:15:51:7e:05:72:05: 0d:d2:9f:51:26:67:e2:a2:77:2b:a9:02:d3:0f:7e: 3a:36:ea:f5:d2:3f:3d:dc:d9:c2:62:2b:b1:96:94: ad:ba:26:4e:0e:83:8d:4b:1e:8a:f4:2a:69:5a:20: 49:ae:9c:c0:26:e5:ac:89:6c:83:58:84:65:1f:f6: d6:c2:c4:ac:a4:68:0c:c8:a4:81:32:b6:25:f7:f1: 07:33:25:54:fd:0a:77:0e:2d:1d:de:f2:cc:b4:1a: d9:45:d9:f7:10:8b:93:c8:50:9b:71:c0:b6:65:c1: cc:14:77:4e:08:81:a6:02:71:3a:b7:8f:6d:cf:ea: 13:ec:19:57:81:53:ea:a0:76:aa:f8:a5:b1:69:99: 09:d7:a3:cd:4e:6f:c8:85:6a:cf:b1:85:04:59:2c: da:a0:c8:80:78:01:68:b5:20:2a:60:50:27:dd:e7: 97:c8:30:58:5b:bd:3b:11:03:03:85:b1:03:5c:60: 3b:d7:36:2d:4b:9e:08:07:73:ea:7e:77:ce:51:bc: b4:1c:3a:1c:55:e8:6e:a4:7f:3c:11:2e:a8:9f:af: 06:9e:02:1d:46:3d:f7:38:8a:2e:85:a3:eb:0a:19: 1d:8b:92:cc:24:74:53:84:5e:05:fc:f1:86:87:91: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:38:CF:D5:2B:C1:26:F2:3C:6F:F2:0D:A7:C6:9B:A8:8C:F8:6B:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c72c9cc-5e02-4b29-84f1-24b580f20438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b:c00::/38 Signature Algorithm: sha256WithRSAEncryption c6:e1:70:29:c1:a5:ea:32:43:d7:29:c4:be:ca:f9:f2:1d:d8: 0d:58:6d:fc:8a:fc:a9:9e:82:4a:a9:5d:49:f3:eb:a5:e0:e7: 50:e9:d2:be:af:64:e3:76:18:f2:42:30:87:55:91:64:f4:72: b5:f9:b4:c5:8d:69:13:e6:bf:04:ef:23:3b:26:d7:fe:eb:09: 87:af:e2:fa:42:ae:a9:46:ed:36:80:03:77:da:9a:8b:bc:a3: 4c:d3:b4:40:1e:d2:d0:70:27:11:62:73:42:ad:7d:6a:54:13: 15:21:b8:7e:86:d6:3e:1b:87:12:1c:4b:15:a7:fc:c3:c9:d5: 35:86:0a:e4:9b:06:8f:c4:5a:55:27:e4:ab:de:f9:e1:95:ef: a8:31:80:6e:cf:7b:a4:ea:33:af:4d:77:46:9a:c9:0f:6a:30: d2:b4:60:e9:57:e8:71:77:75:52:47:27:e7:9d:e2:b7:27:79: e3:b8:ac:5e:55:20:3f:0a:35:79:3e:a7:e4:08:18:f7:79:72: 56:c1:f2:74:3b:5a:52:0a:d6:65:66:c9:93:34:74:a5:74:93: d0:d7:23:35:e5:57:62:f3:77:ea:87:e9:e9:d5:c4:48:8f:f4: 5a:63:a3:1d:f6:18:af:94:24:ec:e6:15:f5:b9:49:80:7e:a6: bb:63:7d:60 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaRJVbZlvIe/6KIe8uJzPMhpjnGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDAwNVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAZGZiN2YwNTNmYWJjNWRlNmFjNWZi NjhkMTVmMzRlYzAxNGMyMjNmNjRiZjEyOGNkZTY0ZWJlOGE1YWJlMThjZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySy3ghF1Ev8VUX4FcgUN0p9RJmfi oncrqQLTD346Nur10j893NnCYiuxlpStuiZODoONSx6K9CppWiBJrpzAJuWsiWyD WIRlH/bWwsSspGgMyKSBMrYl9/EHMyVU/Qp3Di0d3vLMtBrZRdn3EIuTyFCbccC2 ZcHMFHdOCIGmAnE6t49tz+oT7BlXgVPqoHaq+KWxaZkJ16PNTm/IhWrPsYUEWSza oMiAeAFotSAqYFAn3eeXyDBYW707EQMDhbEDXGA71zYtS54IB3PqfnfOUby0HDoc VehupH88ES6on68GngIdRj33OIouhaPrChkdi5LMJHRThF4F/PGGh5EBRwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNQ4z9UrwSbyPG/yDafGm6iM+GvGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjNzJjOWNjLTVlMDItNGIyOS04NGYxLTI0YjU4MGYyMDQzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGwwwDQYJKoZIhvcNAQELBQADggEBAMbhcCnBpeoyQ9cpxL7K +fId2A1YbfyK/KmegkqpXUnz66Xg51Dp0r6vZON2GPJCMIdVkWT0crX5tMWNaRPm vwTvIzsm1/7rCYev4vpCrqlG7TaAA3famou8o0zTtEAe0tBwJxFic0KtfWpUExUh uH6G1j4bhxIcSxWn/MPJ1TWGCuSbBo/EWlUn5Kve+eGV76gxgG7Pe6TqM69Nd0aa yQ9qMNK0YOlX6HF3dVJHJ+ed4rcneeO4rF5VID8KNXk+p+QIGPd5clbB8nQ7WlIK 1mVmyZM0dKV0k9DXIzXlV2Lzd+qH6enVxEiP9Fpjox32GK+UJOzmFfW5SYB+prtj fWA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:28 2025 by rpki-client