This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa File: e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa (raw, json) Hash identifier: pep1CMuLu4NSLqePMUok1WmegpPaUzFbzdl5OkYQEmE= Subject key identifier: C5:4E:E0:39:35:96:59:4A:07:0C:08:D2:31:4E:BA:6C:1B:7D:4A:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0593743FB84731F8761438B2A4EBF37CE7017AE8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa Signing time: Sun 30 Nov 2025 00:00:07 +0000 ROA not before: Sun 30 Nov 2025 00:00:07 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:93:74:3f:b8:47:31:f8:76:14:38:b2:a4:eb:f3:7c:e7:01:7a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:00:07 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=de3d00cba63da9af300041ff62b0eb375b3604a149a333d94255ce8ee9764722, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:7a:29:3d:4a:6e:ce:48:af:95:ca:9e:62: 75:78:39:46:fa:fe:7a:c5:a0:91:d1:3b:62:c5:e3: 52:bb:61:6b:6a:2c:47:e8:34:7e:24:f3:ca:e3:78: c8:81:f5:ca:fd:b3:47:fb:9b:9c:42:68:b9:4b:9f: 20:d6:14:c4:72:0e:fc:0c:0b:61:ad:9f:9d:03:0c: 70:b2:7a:4a:c8:3d:56:ca:c8:d9:6c:54:01:42:2c: 3a:b8:63:11:bc:82:db:ad:78:76:a4:eb:b6:6c:57: 7d:19:17:92:62:9f:1f:9a:79:ac:b6:24:85:d8:0a: 48:36:62:21:30:67:28:b2:65:95:0a:95:6b:40:95: 79:29:69:7b:a1:40:c3:01:fc:54:18:aa:12:7e:a2: 33:e4:b5:5a:d6:03:f3:84:66:ae:08:e4:43:9b:cf: 5c:31:cb:94:64:87:50:4a:1a:c0:25:4a:74:1f:c5: 77:c4:0a:29:9b:18:df:78:d7:d7:b8:d6:e1:14:09: 55:9e:74:30:7b:87:41:e3:c2:0f:4a:de:57:62:96: 92:ee:d9:87:b9:f8:5d:6e:3f:ec:3c:15:1f:1a:9a: f2:98:10:76:ef:1a:f0:54:c4:3c:ac:aa:73:22:ca: 7f:c1:bd:a6:6c:b9:a1:8a:7c:9a:52:5d:90:ca:4a: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4E:E0:39:35:96:59:4A:07:0C:08:D2:31:4E:BA:6C:1B:7D:4A:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b080::/48 Signature Algorithm: sha256WithRSAEncryption 6d:ac:9b:21:11:fa:8b:f3:bb:58:35:96:76:cc:2e:5e:b1:b2: f0:87:a9:08:7a:ef:75:6a:6c:e0:e8:5b:68:ce:b6:6e:23:17: e9:1f:43:fe:ed:a5:ff:ac:5e:2b:44:29:9f:fe:f9:7f:d2:36: 1f:2d:a0:22:c7:65:cc:5a:e9:76:49:8e:11:1a:af:f6:13:eb: 4b:90:a5:a3:e8:29:9c:a1:38:d3:98:c8:40:4d:23:0e:16:00: 7b:5c:ba:9f:1a:b3:0f:ae:af:51:9b:3a:85:64:b5:f6:0f:1e: 32:d1:0b:1e:63:b6:26:95:21:7e:95:ba:df:da:e8:11:f8:74: 0b:3f:9f:3f:a0:1e:ca:df:a7:6a:a4:c5:03:89:27:97:56:41: b6:da:25:8c:74:54:7e:77:c9:72:fd:cb:97:7b:69:6d:6e:73: a1:a7:0f:af:34:e5:01:5e:25:28:8b:4a:38:f3:90:82:45:4e: c7:2f:bf:89:dd:16:00:60:8b:81:bc:23:0a:61:8d:0a:11:ea: bb:77:b2:7a:b4:8c:e8:d8:e8:97:05:73:f6:3a:15:f7:3a:27: 6f:b6:7b:a8:18:b3:6e:98:cb:97:2d:5a:27:33:14:c4:f2:80: 9e:8d:f5:96:e3:92:7a:5d:e7:f4:ea:5d:d5:5d:f7:50:a2:af: 9b:6d:3b:d2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBZN0P7hHMfh2FDiypOvzfOcBeugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEzMDAwMDAwN1oX DTI2MDIyODIzNTk1OVowejFJMEcGA1UEBRNAZGUzZDAwY2JhNjNkYTlhZjMwMDA0 MWZmNjJiMGViMzc1YjM2MDRhMTQ5YTMzM2Q5NDI1NWNlOGVlOTc2NDcyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX16KT1Kbs5Ir5XKnmJ1eDlG+v56 xaCR0TtixeNSu2FraixH6DR+JPPK43jIgfXK/bNH+5ucQmi5S58g1hTEcg78DAth rZ+dAwxwsnpKyD1WysjZbFQBQiw6uGMRvILbrXh2pOu2bFd9GReSYp8fmnmstiSF 2ApINmIhMGcosmWVCpVrQJV5KWl7oUDDAfxUGKoSfqIz5LVa1gPzhGauCORDm89c McuUZIdQShrAJUp0H8V3xAopmxjfeNfXuNbhFAlVnnQwe4dB48IPSt5XYpaS7tmH ufhdbj/sPBUfGprymBB27xrwVMQ8rKpzIsp/wb2mbLmhinyaUl2QykogJwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMVO4Dk1lllKBwwI0jFOumwbfUqiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxYjBmNzM0LTRkZDUtNGQ2Yi1iNTYwLTIwNDAyNWExYjJlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8rCAMA0GCSqGSIb3DQEBCwUAA4IBAQBtrJshEfqL87tYNZZ2 zC5esbLwh6kIeu91amzg6FtozrZuIxfpH0P+7aX/rF4rRCmf/vl/0jYfLaAix2XM Wul2SY4RGq/2E+tLkKWj6CmcoTjTmMhATSMOFgB7XLqfGrMPrq9RmzqFZLX2Dx4y 0QseY7YmlSF+lbrf2ugR+HQLP58/oB7K36dqpMUDiSeXVkG22iWMdFR+d8ly/cuX e2ltbnOhpw+vNOUBXiUoi0o485CCRU7HL7+J3RYAYIuBvCMKYY0KEeq7d7J6tIzo 2OiXBXP2OhX3OidvtnuoGLNumMuXLVonMxTE8oCejfWW45J6Xef06l3VXfdQoq+b bTvS -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:57 2025 by rpki-client