This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa
File: e07764e8-f635-4cf8-8330-8cffc6056fd8.roa (raw, json)
Hash identifier: CPfqGrFmEQb0nL0d0H25wUW2n1wsHvSVrMD1QmUuR5A=
Subject key identifier: 09:54:CD:52:34:A1:76:FD:26:D6:13:E8:1D:99:A0:29:9D:D9:D4:BE
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 6BB21048F48917EFD36ECC0CFE6DD51D1AAC6C5C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa
Signing time: Thu 04 Dec 2025 00:20:33 +0000
ROA not before: Thu 04 Dec 2025 00:20:33 +0000
ROA not after: Wed 04 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2406:da14::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 00:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b2:10:48:f4:89:17:ef:d3:6e:cc:0c:fe:6d:d5:1d:1a:ac:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 4 00:20:33 2025 GMT
Not After : Mar 4 23:59:59 2026 GMT
Subject: serialNumber=5778128371b32507bab48104613d1ebad9d551a97d470d443d5d4d5a668e48b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:cf:3e:7e:9e:ff:2d:6b:72:4c:4d:91:f7:
f6:22:40:a4:87:77:49:52:ce:2a:fd:bc:ff:57:ef:
8c:ce:53:97:cf:79:fa:c3:2b:bc:2a:17:23:78:b4:
ab:ec:74:b8:c2:eb:b8:6e:fa:9c:4a:5e:97:62:d3:
96:08:bd:be:31:80:a3:08:6b:b2:ce:c1:fd:03:80:
98:95:f4:3d:bb:fc:93:71:9f:22:48:45:e9:42:7f:
e5:11:4e:e5:f2:84:6d:74:b7:ee:4a:c4:6d:d7:67:
3c:03:f5:da:26:51:9d:8e:b5:81:ae:f2:ea:6c:29:
e8:c8:07:69:4c:2e:4f:42:87:06:d0:d6:b2:00:d1:
2f:f8:77:48:e2:78:06:2f:bb:99:a1:09:b8:ed:fa:
ea:1e:b5:b1:ae:37:ab:39:2a:02:d1:b3:b5:39:63:
cd:ae:0d:ae:6e:37:2d:69:21:c2:f2:b6:1f:d1:cd:
40:2d:d8:92:96:f9:2f:75:20:a0:48:9b:c5:9b:f0:
e0:c0:4e:f2:00:bf:8f:51:2f:fa:0c:50:a2:c5:08:
2b:12:0f:f4:05:0c:c1:0e:65:3d:b8:09:77:07:03:
f8:8f:80:dd:fc:53:66:3a:31:6b:b0:36:1d:fe:ff:
38:5f:06:ae:f5:23:02:e7:85:bc:1f:b4:0a:46:9e:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:CD:52:34:A1:76:FD:26:D6:13:E8:1D:99:A0:29:9D:D9:D4:BE
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:da14::/35
Signature Algorithm: sha256WithRSAEncryption
c5:ad:d6:d1:69:bf:f9:d3:5a:15:07:46:9a:32:65:7b:06:bb:
7d:c8:f9:5a:9c:98:44:b6:63:f8:44:a7:12:9b:63:c3:37:80:
37:02:4d:c2:c7:d5:19:66:34:c6:e6:40:b7:51:6c:c0:ad:7f:
37:ce:7b:99:81:fd:0e:95:fe:1e:95:11:0c:7b:34:87:54:cd:
31:d8:37:5f:bb:5a:0e:19:fa:af:38:69:5a:9f:6e:43:7e:e8:
f2:78:06:a8:07:7a:8d:46:58:30:dc:bb:d4:d7:b1:c2:10:b2:
84:40:fd:ec:62:a2:5f:c3:83:6a:61:ef:95:3e:0f:8b:43:28:
e1:65:17:8a:39:52:73:d6:62:92:6a:7e:64:76:03:c0:b5:99:
47:48:16:18:f9:b5:9e:26:51:b4:e1:e3:ce:23:1b:3c:b6:31:
1a:56:6a:a7:15:5b:71:ad:1f:4d:7c:db:ac:88:de:6d:b8:e2:
b7:79:8e:35:11:99:89:64:e8:a9:a8:bd:73:66:67:5e:0c:4a:
05:07:ab:52:a7:04:c9:fb:5b:c2:48:11:42:11:0b:40:ce:40:
c6:ea:fb:68:b3:7b:75:b1:ec:64:5c:fd:71:70:c9:c3:da:30:
39:c1:18:92:dc:64:a6:eb:85:d9:55:46:85:07:11:9c:16:0e:
71:a0:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:59:03 2025 by rpki-client