This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa File: df32b4dc-f216-4f87-832d-d0230fac751f.roa (raw, json) Hash identifier: 4FsHixluk6an2hh5miCOdylsvwLlAIQ1bPu0KUJi+2c= Subject key identifier: FF:8D:19:5B:57:B4:99:D2:6E:88:D8:A9:8A:C1:AA:F5:A6:8A:CB:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4FE1F37AA7DE7F7FF567825424F9B858B80B0F65 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa Signing time: Tue 02 Dec 2025 00:01:29 +0000 ROA not before: Tue 02 Dec 2025 00:01:29 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e1:f3:7a:a7:de:7f:7f:f5:67:82:54:24:f9:b8:58:b8:0b:0f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:01:29 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=b8d44e81a7b40a201ca0daaa287034f591cebb89dfc32a0efb43dc7c5b7c304e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:f6:4c:e5:e7:a0:2a:ab:29:df:f0:81:07: 3e:17:81:7c:32:25:fd:7b:5a:87:6b:74:45:64:a2: a9:17:7e:67:ef:ae:bd:ff:7d:82:f0:ef:a0:c5:91: 1f:4b:fe:39:01:9d:df:5b:54:eb:71:11:4e:27:fd: b3:92:0d:66:3c:14:1b:c3:b6:76:4a:45:a4:5e:61: e0:aa:96:1e:fa:1f:37:3c:a1:77:0d:06:43:fa:54: 33:d7:2f:a8:48:93:29:e0:a9:77:72:ec:f1:7b:fe: 31:24:1c:5a:c0:7c:3b:b4:b2:19:7e:ef:0e:e0:c8: 41:41:8d:38:0e:22:ec:84:e6:cc:3b:ee:40:cb:83: de:e6:5e:bf:4c:35:d0:a8:53:52:6a:62:f0:11:f1: 5d:66:6d:79:7d:24:a7:9f:14:5e:89:76:43:d0:66: a8:3e:93:34:d7:5c:51:53:8b:63:53:1c:e2:a8:d4: d0:10:8c:0a:97:36:d1:5c:ee:f2:a3:d1:e7:cb:6d: 69:a0:75:23:57:1f:2b:8e:b1:2b:7e:72:b2:3c:c0: 5a:de:42:ba:15:99:37:48:75:66:a3:54:83:98:64: 22:8b:eb:53:c3:1b:e0:9b:07:94:82:49:11:f4:15: 3c:8c:da:b6:50:33:d4:0f:86:ac:d7:c2:22:6f:05: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:19:5B:57:B4:99:D2:6E:88:D8:A9:8A:C1:AA:F5:A6:8A:CB:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9000::/40 Signature Algorithm: sha256WithRSAEncryption b4:a4:3b:e1:7e:e3:92:6c:99:c0:91:71:23:6c:b7:0e:1c:0b: 9d:4d:b9:7d:54:69:3e:f5:1d:ce:f3:f8:15:54:f1:fd:79:b2: 08:cf:c5:e1:1d:3c:a5:b4:e0:39:e3:7b:2f:7f:a8:54:ff:36: f7:9c:5c:cd:a2:c9:cb:02:16:13:08:cc:3d:09:1c:e0:09:67: 19:25:b2:3c:a6:08:2b:cb:da:b6:c8:f7:28:fe:50:84:77:bf: 18:06:98:8f:c5:a3:d2:de:66:60:42:0e:c9:7e:b3:74:4d:01: ae:e3:25:68:9c:a7:d8:6c:62:5f:af:88:ff:6e:63:17:13:3e: ee:d6:df:aa:1c:dd:3d:fb:da:f1:0e:7e:0e:c8:48:a5:b3:58: f6:a1:2e:39:81:13:35:7b:40:3e:6e:e1:99:dd:be:54:d9:3f: 6c:53:85:fc:bb:e2:40:3c:f8:82:5a:9b:cc:32:ff:07:53:6a: 61:69:fc:d2:f3:f8:82:eb:74:ba:bc:39:e4:09:fb:28:3f:a7: 63:4b:fa:76:cd:1d:db:93:d6:29:71:96:1e:1c:11:ef:8c:e7: 65:4c:4c:38:0c:ee:1f:8d:6a:b9:23:d2:87:c5:36:1a:87:ab: 57:d7:4e:f0:e1:91:27:83:55:69:19:4d:c6:15:17:ee:f9:cf: ef:61:5a:c3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT+Hzeqfef3/1Z4JUJPm4WLgLD2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDEyOVoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAYjhkNDRlODFhN2I0MGEyMDFjYTBk YWFhMjg3MDM0ZjU5MWNlYmI4OWRmYzMyYTBlZmI0M2RjN2M1YjdjMzA0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nv2TOXnoCqrKd/wgQc+F4F8MiX9 e1qHa3RFZKKpF35n7669/32C8O+gxZEfS/45AZ3fW1TrcRFOJ/2zkg1mPBQbw7Z2 SkWkXmHgqpYe+h83PKF3DQZD+lQz1y+oSJMp4Kl3cuzxe/4xJBxawHw7tLIZfu8O 4MhBQY04DiLshObMO+5Ay4Pe5l6/TDXQqFNSamLwEfFdZm15fSSnnxReiXZD0Gao PpM011xRU4tjUxziqNTQEIwKlzbRXO7yo9Hny21poHUjVx8rjrErfnKyPMBa3kK6 FZk3SHVmo1SDmGQii+tTwxvgmweUgkkR9BU8jNq2UDPUD4as18IibwUeFwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP+NGVtXtJnSbojYqYrBqvWmisvcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMzJiNGRjLWYyMTYtNGY4Ny04MzJkLWQwMjMwZmFjNzUxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8pAwDQYJKoZIhvcNAQELBQADggEBALSkO+F+45JsmcCRcSNs tw4cC51NuX1UaT71Hc7z+BVU8f15sgjPxeEdPKW04Dnjey9/qFT/NvecXM2iycsC FhMIzD0JHOAJZxklsjymCCvL2rbI9yj+UIR3vxgGmI/Fo9LeZmBCDsl+s3RNAa7j JWicp9hsYl+viP9uYxcTPu7W36oc3T372vEOfg7ISKWzWPahLjmBEzV7QD5u4Znd vlTZP2xThfy74kA8+IJam8wy/wdTamFp/NLz+ILrdLq8OeQJ+yg/p2NL+nbNHduT 1ilxlh4cEe+M52VMTDgM7h+Narkj0ofFNhqHq1fXTvDhkSeDVWkZTcYVF+75z+9h WsM= -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:58 2025 by rpki-client