This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8b275c7-67dd-41a5-a6c7-6668e32899fe.roa File: d8b275c7-67dd-41a5-a6c7-6668e32899fe.roa (raw, json) Hash identifier: gj/X+zkvhvBGp2gUHmoeaBO7BXwlKS8Nr6zfxntDE1s= Subject key identifier: FE:4C:67:5F:99:24:83:0F:C5:CC:0E:C4:03:1C:2E:77:02:53:B0:3A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 203AF10395C2F7968D21D143C028CCFE3A29558B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8b275c7-67dd-41a5-a6c7-6668e32899fe.roa Signing time: Tue 02 Dec 2025 00:10:27 +0000 ROA not before: Tue 02 Dec 2025 00:10:27 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3a:f1:03:95:c2:f7:96:8d:21:d1:43:c0:28:cc:fe:3a:29:55:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:10:27 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=961b8ec8857965534843f55f3c86d6887e03f0d7ba987169cac8825de4138197, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:d5:22:8c:40:6b:2b:9b:47:a9:16:be:9f: 32:0f:4e:4c:39:76:12:70:e6:ec:33:9e:03:41:3a: b6:b2:63:3e:02:10:22:e1:6f:86:ed:2d:dd:c0:7a: cd:9c:fa:36:bb:29:62:1b:43:71:fd:3f:d4:0a:a7: ef:a4:a1:10:36:84:4e:c5:0c:51:8f:3e:b2:97:26: a7:f1:aa:a7:d3:8a:81:7d:6b:3a:b8:4b:63:bc:13: 7f:b3:af:da:96:e1:e9:0f:31:2a:ba:85:bd:6e:43: 23:27:de:8a:40:f0:9c:51:25:b3:82:d1:50:92:ca: 59:a1:6a:0c:37:5f:2d:61:87:81:be:10:01:21:85: 2a:b3:7a:10:cc:8a:37:05:a5:e3:73:01:e7:b3:35: 2f:ea:21:d3:80:70:6a:45:48:ce:8d:10:e0:64:25: 10:49:93:88:7d:01:1c:c0:64:34:1d:02:38:36:92: eb:c4:d1:d4:3a:53:7e:c5:54:8b:0a:8c:10:0b:39: 78:ea:8f:6d:00:59:fb:d1:68:04:1b:4b:3f:cc:87: 6b:c1:51:ab:11:6f:73:7b:61:c1:b4:66:4a:ad:71: ca:d5:e7:34:c7:3f:ce:0f:bb:5b:e8:4f:b2:14:bd: c5:0b:f9:55:13:1c:91:1a:8d:7b:5c:ca:d3:76:d4: 5a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4C:67:5F:99:24:83:0F:C5:CC:0E:C4:03:1C:2E:77:02:53:B0:3A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8b275c7-67dd-41a5-a6c7-6668e32899fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4090::/48 Signature Algorithm: sha256WithRSAEncryption 01:b3:65:0e:80:16:d5:69:54:dc:76:23:d7:8b:f0:23:51:d2: f7:36:d6:fc:f9:a7:3e:3e:ab:7b:1d:23:1a:d0:e3:eb:1a:59: 45:7d:31:64:b9:50:35:09:80:90:12:a0:4a:7f:ff:ce:4e:c9: bc:5c:73:1c:31:5c:b9:ba:5e:7a:5c:1f:4c:0f:8d:18:f2:e8: a7:1b:b0:ec:6e:a4:38:53:6f:68:bb:72:05:a7:0f:53:ed:3b: fa:66:b6:3a:2e:f6:8d:af:4e:71:80:0e:38:2e:93:a5:e9:e1: a6:2f:94:7f:ba:8e:5a:1b:59:a7:f9:75:d5:51:5c:18:d0:53: d7:db:74:5d:79:20:39:4f:2e:a4:cd:93:0d:51:8d:c4:24:78: 56:2b:35:c1:27:2d:32:cb:82:d9:27:93:92:ad:22:41:37:ed: f6:ab:db:e8:55:8a:5a:ae:cc:a0:26:a7:14:60:00:9e:6e:cd: 45:5c:02:b1:ba:dd:6f:a6:29:e4:af:11:12:6a:be:dc:3e:96: 27:14:88:47:6a:ec:b0:83:c5:19:0d:70:68:e9:6f:71:d5:63: 18:f6:69:6a:0f:a4:b0:a6:34:aa:0d:e1:5b:ef:2f:46:db:b9: 71:e8:f2:1c:25:96:1f:f3:db:9b:62:e9:42:3b:33:5f:c3:d8: c4:08:b3:35 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIDrxA5XC95aNIdFDwCjM/jopVYswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMTAyN1oX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAOTYxYjhlYzg4NTc5NjU1MzQ4NDNm NTVmM2M4NmQ2ODg3ZTAzZjBkN2JhOTg3MTY5Y2FjODgyNWRlNDEzODE5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQfVIoxAayubR6kWvp8yD05MOXYS cObsM54DQTq2smM+AhAi4W+G7S3dwHrNnPo2uyliG0Nx/T/UCqfvpKEQNoROxQxR jz6ylyan8aqn04qBfWs6uEtjvBN/s6/aluHpDzEquoW9bkMjJ96KQPCcUSWzgtFQ kspZoWoMN18tYYeBvhABIYUqs3oQzIo3BaXjcwHnszUv6iHTgHBqRUjOjRDgZCUQ SZOIfQEcwGQ0HQI4NpLrxNHUOlN+xVSLCowQCzl46o9tAFn70WgEG0s/zIdrwVGr EW9ze2HBtGZKrXHK1ec0xz/OD7tb6E+yFL3FC/lVExyRGo17XMrTdtRaBwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP5MZ1+ZJIMPxcwOxAMcLncCU7A6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4YjI3NWM3LTY3ZGQtNDFhNS1hNmM3LTY2NjhlMzI4OTlmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAECQMA0GCSqGSIb3DQEBCwUAA4IBAQABs2UOgBbVaVTcdiPX i/AjUdL3Ntb8+ac+Pqt7HSMa0OPrGllFfTFkuVA1CYCQEqBKf//OTsm8XHMcMVy5 ul56XB9MD40Y8uinG7DsbqQ4U29ou3IFpw9T7Tv6ZrY6LvaNr05xgA44LpOl6eGm L5R/uo5aG1mn+XXVUVwY0FPX23RdeSA5Ty6kzZMNUY3EJHhWKzXBJy0yy4LZJ5OS rSJBN+32q9voVYparsygJqcUYACebs1FXAKxut1vpinkrxESar7cPpYnFIhHauyw g8UZDXBo6W9x1WMY9mlqD6SwpjSqDeFb7y9G27lx6PIcJZYf89ubYulCOzNfw9jE CLM1 -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:09 2025 by rpki-client