This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa File: dbe44f29-2c7d-46ec-898d-c756e1c81196.roa (raw, json) Hash identifier: wvtCxSfAnvg5GxCriC0mxHh5ZijXfOF83PXASrYc77Y= Subject key identifier: E5:6C:CA:87:6D:60:CA:4A:A8:D3:97:64:D4:B0:1A:F5:3B:5C:A1:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 610D15FB82C9732490B27B283D75350C3F1C97D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa Signing time: Sat 06 Dec 2025 00:00:06 +0000 ROA not before: Sat 06 Dec 2025 00:00:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0d:15:fb:82:c9:73:24:90:b2:7b:28:3d:75:35:0c:3f:1c:97:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 6 00:00:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=9ef045d4b28b79356e0da7b9eef412e1882792f244b2e63129fcb6cee5492f2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:69:0f:28:0d:80:d6:a7:bf:40:0a:0d:21: 6f:bf:68:f7:c6:95:d7:28:8a:83:03:5d:70:f8:5a: 6e:1a:29:f8:09:18:f9:65:5e:b2:9d:fe:b5:e8:06: 75:d8:9f:7b:f3:1b:99:91:4e:ab:91:6e:cd:62:e7: b3:1c:5e:28:3c:36:99:06:77:39:c0:95:2c:77:aa: 7d:22:ec:28:e1:24:03:43:32:19:57:6d:2c:a0:29: f2:9e:c8:6a:00:50:46:34:66:73:b1:86:25:7d:09: 02:95:d9:29:5c:e7:1d:8f:ef:fc:ee:88:27:df:0f: 60:28:f5:24:bc:e1:87:1c:64:fa:2a:83:90:7d:8d: 4e:ac:93:bc:e1:b1:74:f5:41:a5:53:bd:a6:c2:35: 4e:ca:26:f8:51:bb:a0:a4:38:3a:fd:1b:cd:14:e0: 1f:ac:4d:00:8b:3f:f3:f8:2b:95:0f:16:f1:f8:e3: b5:a6:89:77:ed:7c:4e:e5:29:96:df:90:02:b5:88: 96:07:c2:3c:2e:85:90:9c:89:57:97:07:0e:7e:5a: 11:b1:55:ec:f3:6f:b9:2c:d6:7b:72:96:15:67:17: 0d:86:a4:1c:e7:66:7c:71:21:43:91:d8:96:fc:ed: dd:15:54:c0:81:fd:b5:32:ff:92:2d:af:46:c7:84: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6C:CA:87:6D:60:CA:4A:A8:D3:97:64:D4:B0:1A:F5:3B:5C:A1:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.52.0/23 Signature Algorithm: sha256WithRSAEncryption 20:1c:24:b3:4a:9e:9c:60:cf:31:0e:b3:76:45:1a:16:1f:24: 04:a1:b0:eb:13:83:f0:ef:f0:96:fd:67:33:6a:d5:b2:69:e6: a3:8f:c6:f6:be:2a:ef:42:94:b8:57:d9:f1:14:85:3c:ea:4a: 8a:7f:7b:60:b7:7c:d4:17:d2:82:83:e5:42:23:d4:f4:10:4d: 21:7f:3b:36:a2:6c:8a:ef:66:6f:06:4e:b0:95:bb:ff:2a:d6: aa:2d:1b:e8:c3:a2:e2:07:de:b7:ed:ae:0c:ce:0d:0d:9e:e4: 2f:8f:a8:36:d6:7b:f2:4f:64:72:0f:19:f2:0a:c3:64:4b:fc: 6b:66:b5:00:6e:60:e6:79:2b:77:f8:8e:27:16:a3:a5:d6:6b: 5a:a9:db:92:98:3a:3b:3d:84:26:b5:c0:fd:fd:46:72:00:a5: 48:e5:3c:7c:34:9f:8d:ed:30:7a:7a:60:d7:66:4d:04:47:e7: 41:fd:af:c0:1f:23:ab:e2:4b:72:e4:5d:ee:31:d7:59:53:b9: 81:97:7c:ea:0a:61:5b:1e:93:2b:bc:61:50:dd:b6:cb:66:b9: 7c:9a:05:67:a9:9f:bc:bc:65:a2:49:38:f8:8f:92:e3:e9:d2: cf:de:18:d2:f7:a8:ac:c0:45:5c:b1:ab:9f:6e:48:24:45:0c: be:fe:eb:54 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUYQ0V+4LJcySQsnsoPXU1DD8cl9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNjAwMDAwNloX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAOWVmMDQ1ZDRiMjhiNzkzNTZlMGRh N2I5ZWVmNDEyZTE4ODI3OTJmMjQ0YjJlNjMxMjlmY2I2Y2VlNTQ5MmYyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYhpDygNgNanv0AKDSFvv2j3xpXX KIqDA11w+FpuGin4CRj5ZV6ynf616AZ12J978xuZkU6rkW7NYuezHF4oPDaZBnc5 wJUsd6p9Iuwo4SQDQzIZV20soCnynshqAFBGNGZzsYYlfQkCldkpXOcdj+/87ogn 3w9gKPUkvOGHHGT6KoOQfY1OrJO84bF09UGlU72mwjVOyib4UbugpDg6/RvNFOAf rE0Aiz/z+CuVDxbx+OO1pol37XxO5SmW35ACtYiWB8I8LoWQnIlXlwcOfloRsVXs 82+5LNZ7cpYVZxcNhqQc52Z8cSFDkdiW/O3dFVTAgf21Mv+SLa9Gx4SrhwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOVsyodtYMpKqNOXZNSwGvU7XKGnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiZTQ0ZjI5LTJjN2QtNDZlYy04OThkLWM3NTZlMWM4MTE5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9g0MA0GCSqGSIb3DQEBCwUAA4IBAQAgHCSzSp6cYM8xDrN2RRoW HyQEobDrE4Pw7/CW/WczatWyaeajj8b2virvQpS4V9nxFIU86kqKf3tgt3zUF9KC g+VCI9T0EE0hfzs2omyK72ZvBk6wlbv/KtaqLRvow6LiB9637a4Mzg0NnuQvj6g2 1nvyT2RyDxnyCsNkS/xrZrUAbmDmeSt3+I4nFqOl1mtaqduSmDo7PYQmtcD9/UZy AKVI5Tx8NJ+N7TB6emDXZk0ER+dB/a/AHyOr4kty5F3uMddZU7mBl3zqCmFbHpMr vGFQ3bbLZrl8mgVnqZ+8vGWiSTj4j5Lj6dLP3hjS96iswEVcsaufbkgkRQy+/utU -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:39 2025 by rpki-client