This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa File: c8788082-9bee-454b-a32c-e6d016b76179.roa (raw, json) Hash identifier: DOID7EQgb+rJw/MmN+41B/VmbTpj5TcSvpKBVpnA0Lw= Subject key identifier: 03:50:14:9A:9B:50:03:B0:5F:D1:F5:A7:51:D0:89:27:B6:62:47:BA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40AF45A3CF776FD30B08671E4E04B81CD6A1CFE8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa Signing time: Sat 06 Dec 2025 00:00:10 +0000 ROA not before: Sat 06 Dec 2025 00:00:10 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da20:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:af:45:a3:cf:77:6f:d3:0b:08:67:1e:4e:04:b8:1c:d6:a1:cf:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 6 00:00:10 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=807a679b2858e3b0d32e02885b5be0f9433ad604aa8de19f30a77550337d4a5b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:18:57:2f:e9:93:c4:09:f9:3d:d5:c4:a0: 01:69:ea:10:1e:94:cb:f2:d0:49:0b:ac:fe:45:10: 60:ed:0f:1b:47:f6:5a:15:f2:98:62:09:47:40:d5: 21:97:93:08:0a:f7:c3:f3:50:4b:9c:3a:78:c7:f5: 77:db:6d:56:47:7c:5b:a6:d7:94:14:77:67:09:da: e2:ef:75:c4:e1:96:ca:76:b1:b7:10:df:da:7c:cc: f6:52:41:a4:93:c7:e6:5d:93:2c:da:fe:6e:02:08: e9:df:58:2f:c0:5a:a9:32:aa:9c:9f:4e:b7:e1:f9: fb:eb:08:25:27:dc:6f:dc:3b:78:1a:32:bb:fb:fb: a2:48:96:aa:25:0b:05:5d:ee:f3:ac:23:5f:7c:80: c5:b0:a6:79:12:21:fc:1c:e8:37:9f:a2:47:ad:99: 82:72:9e:c9:9e:3b:fe:1c:1c:b8:97:f3:27:2d:72: ba:49:0b:09:ba:ee:04:74:2a:4b:ae:79:34:d8:45: 7a:86:af:ed:5d:0d:f2:e8:f2:83:3b:27:db:46:46: a0:18:f2:ff:ec:2e:08:5c:d6:bc:ed:c5:5c:a2:0c: 09:13:e8:ff:e1:aa:24:18:03:1e:01:f0:15:7f:d3: 19:af:c7:07:10:f3:03:93:17:04:ab:8c:ab:0c:59: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:50:14:9A:9B:50:03:B0:5F:D1:F5:A7:51:D0:89:27:B6:62:47:BA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da20:8000::/36 Signature Algorithm: sha256WithRSAEncryption 68:fc:bf:2f:de:5f:45:93:97:22:34:ea:d1:bc:7c:22:d7:ea: 43:e6:bf:06:90:85:80:4f:b0:23:d5:66:5a:38:25:63:17:ef: 79:8a:26:e4:3d:df:a9:14:44:37:09:0a:0e:ad:0b:6a:37:12: fc:bb:ec:77:b7:12:c5:56:08:71:53:b5:d6:6a:2f:72:7d:0b: 80:17:95:1c:1b:fe:b7:78:ae:e0:a7:99:ed:3a:6e:73:8e:ff: a9:77:35:b3:b8:85:c6:94:5c:8e:35:9e:26:7f:7d:4b:f6:19: 83:09:1e:be:df:30:4d:a9:01:a4:46:2a:d2:29:b1:0c:e6:17: 78:ab:83:e6:33:c3:ff:21:0d:8e:df:7c:ca:f9:12:fd:94:bd: cf:aa:6d:70:c4:be:40:8a:64:0a:29:4f:d4:f1:d4:19:61:70: f7:a8:40:1e:1d:4f:f8:4f:65:6b:96:63:90:02:a4:19:b1:cc: ee:79:b8:d7:3c:3e:23:92:50:0f:bf:02:3d:e5:43:9b:e4:b7: 81:bd:45:7f:14:71:7a:58:f9:d6:2e:56:4d:7b:be:ca:05:3f: fd:6f:b7:aa:0b:cc:d4:e0:a1:9b:33:e6:a6:c9:e0:77:5f:e2: f7:9d:ec:e4:cb:40:a5:32:99:0a:75:be:e6:9f:00:6b:e7:90: d5:08:5e:9d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQK9Fo893b9MLCGceTgS4HNahz+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNjAwMDAxMFoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAODA3YTY3OWIyODU4ZTNiMGQzMmUw Mjg4NWI1YmUwZjk0MzNhZDYwNGFhOGRlMTlmMzBhNzc1NTAzMzdkNGE1YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZgYVy/pk8QJ+T3VxKABaeoQHpTL 8tBJC6z+RRBg7Q8bR/ZaFfKYYglHQNUhl5MICvfD81BLnDp4x/V3221WR3xbpteU FHdnCdri73XE4ZbKdrG3EN/afMz2UkGkk8fmXZMs2v5uAgjp31gvwFqpMqqcn063 4fn76wglJ9xv3Dt4GjK7+/uiSJaqJQsFXe7zrCNffIDFsKZ5EiH8HOg3n6JHrZmC cp7Jnjv+HBy4l/MnLXK6SQsJuu4EdCpLrnk02EV6hq/tXQ3y6PKDOyfbRkagGPL/ 7C4IXNa87cVcogwJE+j/4aokGAMeAfAVf9MZr8cHEPMDkxcEq4yrDFnkLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFANQFJqbUAOwX9H1p1HQiSe2Yke6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4Nzg4MDgyLTliZWUtNDU0Yi1hMzJjLWU2ZDAxNmI3NjE3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIIAwDQYJKoZIhvcNAQELBQADggEBAGj8vy/eX0WTlyI06tG8 fCLX6kPmvwaQhYBPsCPVZlo4JWMX73mKJuQ936kURDcJCg6tC2o3Evy77He3EsVW CHFTtdZqL3J9C4AXlRwb/rd4ruCnme06bnOO/6l3NbO4hcaUXI41niZ/fUv2GYMJ Hr7fME2pAaRGKtIpsQzmF3irg+Yzw/8hDY7ffMr5Ev2Uvc+qbXDEvkCKZAopT9Tx 1BlhcPeoQB4dT/hPZWuWY5ACpBmxzO55uNc8PiOSUA+/Aj3lQ5vkt4G9RX8UcXpY +dYuVk17vsoFP/1vt6oLzNTgoZsz5qbJ4Hdf4ved7OTLQKUymQp1vuafAGvnkNUI Xp0= -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:34 2025 by rpki-client