This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa File: 9ff3d168-754a-40d4-ad25-8b3a7db40970.roa (raw, json) Hash identifier: KRWs4hCVtUKqONSMZ97L4/YQ1FxrjtqFaIZ5JLDvxAM= Subject key identifier: F4:93:0D:0D:09:37:C4:BF:8E:60:C7:80:C6:FC:E3:B3:92:B4:6C:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08C62B72DD5BE699B4DA01A1BD5F603F97334560 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa Signing time: Sun 23 Nov 2025 00:00:12 +0000 ROA not before: Sun 23 Nov 2025 00:00:12 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c6:2b:72:dd:5b:e6:99:b4:da:01:a1:bd:5f:60:3f:97:33:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:12 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=fee6da987e69481ecb5cf20a2837e0c38d6bfaf5e652cae6bfb84db3e3ec2eb5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:63:3a:c4:45:d1:e3:f5:59:d6:b2:93:d8:89: 04:eb:79:d6:30:3c:42:7a:29:c2:96:f1:54:1a:94: 2a:2e:42:dd:5e:92:f6:42:af:94:0d:6c:28:31:5f: e0:cb:56:a4:ce:eb:7a:03:fe:b5:3d:52:ae:24:00: 9d:e8:0b:07:ff:fa:c1:64:cf:df:53:c5:41:6d:15: 82:89:23:22:0c:4e:ac:64:e1:96:0e:bb:db:28:5f: 51:e2:7c:00:a1:c8:e0:ee:c6:a0:5c:4a:cc:d4:a5: fd:10:be:58:bd:43:8e:3c:5a:75:fa:46:7b:82:d0: a1:24:6f:1b:65:fc:b3:d6:f4:54:df:43:b3:39:78: 8a:29:11:df:11:8b:e9:95:a5:88:a6:4c:f6:70:34: a5:98:f7:d7:a8:67:c4:98:31:af:d3:5d:f0:a4:69: c3:e1:52:8d:7c:08:1f:97:84:0d:96:ff:bf:23:30: ef:9f:fb:45:16:ef:9a:53:c9:f7:96:da:77:11:09: e3:0e:5d:ef:e7:93:1d:7d:1d:b0:3f:4d:9b:d4:a7: 04:6f:e1:f9:28:64:75:39:1b:d4:6f:43:e0:b7:9a: 22:2f:15:18:57:4d:cb:84:8b:6e:2d:3a:42:d4:18: bc:d1:74:0e:3f:62:c1:34:81:be:17:c7:fb:a0:46: 74:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:0D:0D:09:37:C4:BF:8E:60:C7:80:C6:FC:E3:B3:92:B4:6C:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ff3d168-754a-40d4-ad25-8b3a7db40970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:7000::/40 Signature Algorithm: sha256WithRSAEncryption 8a:70:1e:c6:29:12:b8:88:87:09:b8:33:0f:30:86:68:88:77: 10:c0:81:a1:c1:53:b9:22:a8:ae:cc:f4:d2:e5:ed:85:70:56: d1:f2:20:3c:48:4c:a0:9f:fd:15:54:21:63:10:5a:2d:2a:1c: 75:7e:a4:08:b8:49:33:ba:3d:2b:f8:2d:20:10:0a:99:1a:00: ea:c8:02:23:f5:74:49:6a:9a:a7:4e:36:30:92:d7:6b:42:22: dd:c2:38:75:d3:5b:ae:0c:dc:da:5a:6e:c3:ef:24:94:36:23: e7:c5:ae:e4:f9:19:c0:21:95:e4:a1:71:88:b4:22:4f:b0:5a: 35:61:76:d3:ef:f9:32:ee:a5:4b:52:fd:b9:cc:ba:4b:be:be: 6b:48:82:7d:8f:70:f1:b7:f5:21:04:8c:62:02:df:3a:fd:94: a4:1e:d8:c3:c5:51:95:19:03:5c:a7:64:78:33:60:22:1f:92: ed:dd:66:8b:3b:2f:9b:81:2f:44:be:68:14:b6:5c:88:72:60: 25:72:22:9d:ca:48:62:51:39:63:1f:02:a6:45:ee:3d:49:c5: c8:ab:8b:41:20:b4:09:0f:3e:5f:fd:62:98:e9:06:6d:cf:55: 7b:bd:28:27:e1:75:b5:25:e6:55:33:da:49:24:74:10:e5:0d: d6:7e:bf:0e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCMYrct1b5pm02gGhvV9gP5czRWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMDAxMloX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAZmVlNmRhOTg3ZTY5NDgxZWNiNWNm MjBhMjgzN2UwYzM4ZDZiZmFmNWU2NTJjYWU2YmZiODRkYjNlM2VjMmViNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mM6xEXR4/VZ1rKT2IkE63nWMDxC einClvFUGpQqLkLdXpL2Qq+UDWwoMV/gy1akzut6A/61PVKuJACd6AsH//rBZM/f U8VBbRWCiSMiDE6sZOGWDrvbKF9R4nwAocjg7sagXErM1KX9EL5YvUOOPFp1+kZ7 gtChJG8bZfyz1vRU30OzOXiKKRHfEYvplaWIpkz2cDSlmPfXqGfEmDGv013wpGnD 4VKNfAgfl4QNlv+/IzDvn/tFFu+aU8n3ltp3EQnjDl3v55MdfR2wP02b1KcEb+H5 KGR1ORvUb0Pgt5oiLxUYV03LhItuLTpC1Bi80XQOP2LBNIG+F8f7oEZ0EQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPSTDQ0JN8S/jmDHgMb847OStGxbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmZjNkMTY4LTc1NGEtNDBkNC1hZDI1LThiM2E3ZGI0MDk3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauHAwDQYJKoZIhvcNAQELBQADggEBAIpwHsYpEriIhwm4Mw8w hmiIdxDAgaHBU7kiqK7M9NLl7YVwVtHyIDxITKCf/RVUIWMQWi0qHHV+pAi4STO6 PSv4LSAQCpkaAOrIAiP1dElqmqdONjCS12tCIt3COHXTW64M3NpabsPvJJQ2I+fF ruT5GcAhleShcYi0Ik+wWjVhdtPv+TLupUtS/bnMuku+vmtIgn2PcPG39SEEjGIC 3zr9lKQe2MPFUZUZA1ynZHgzYCIfku3dZos7L5uBL0S+aBS2XIhyYCVyIp3KSGJR OWMfAqZF7j1Jxciri0EgtAkPPl/9YpjpBm3PVXu9KCfhdbUl5lUz2kkkdBDlDdZ+ vw4= -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:49 2025 by rpki-client