This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa File: e2dd8ffd-5ddf-4d66-8796-87f096579505.roa (raw, json) Hash identifier: kZf9I/ke1obgBwA3A89b6f2oyV9UuH9UzPk9LuTQ9RI= Subject key identifier: D4:6F:97:E0:31:F1:AE:96:50:3D:9B:0F:33:0A:00:AD:3F:C0:30:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7ACAA27E822B1017ADDA1704549CCF2F8F426E45 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa Signing time: Thu 20 Nov 2025 00:00:04 +0000 ROA not before: Thu 20 Nov 2025 00:00:04 +0000 ROA not after: Wed 18 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ca:a2:7e:82:2b:10:17:ad:da:17:04:54:9c:cf:2f:8f:42:6e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:04 2025 GMT Not After : Feb 18 23:59:59 2026 GMT Subject: serialNumber=3bc05c721a298e53299f7f27be4d4de4a50845d5d36634ab3303854f475eb40a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:92:f4:9e:b6:03:11:55:49:7a:41:1c:03: ab:be:33:5a:a2:44:66:20:a0:42:6c:6c:1c:fc:19: 7f:41:15:02:84:bd:7f:eb:37:23:04:d9:ae:32:41: e2:d7:03:9e:e2:6e:69:e6:1f:16:e7:fc:37:43:13: 19:da:fa:45:8d:23:63:e5:e4:75:d1:c2:a0:de:10: a4:f2:a0:e8:dd:12:db:b2:d6:a4:9a:f2:d2:2b:fe: c3:2d:22:92:fd:c4:a7:3c:31:78:af:3e:a0:a7:f4: fd:2b:ea:eb:97:42:50:d8:06:40:db:52:2d:50:ae: cd:35:da:87:38:c2:d7:2d:43:be:0d:11:f3:86:fc: e0:25:b1:4a:66:07:0c:35:8a:26:b6:d9:44:41:53: 7e:66:30:cf:c3:84:d9:ca:5c:3e:38:74:56:bc:21: 53:65:74:f3:fb:61:be:8c:ad:05:5e:3f:85:65:40: 0c:b9:e0:24:db:e8:5c:ff:5b:75:26:7f:da:7e:06: b6:24:cd:a6:90:44:26:5d:87:ba:fd:84:a0:10:6f: a6:57:7d:57:6c:84:26:87:e4:f2:82:8b:cd:1f:85: 8f:c1:4d:92:f2:d0:c5:3b:a7:ac:0d:93:41:0a:63: 27:13:20:5f:25:1e:a9:bd:df:3c:82:08:56:3e:71: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6F:97:E0:31:F1:AE:96:50:3D:9B:0F:33:0A:00:AD:3F:C0:30:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e2dd8ffd-5ddf-4d66-8796-87f096579505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da30::/32 Signature Algorithm: sha256WithRSAEncryption 5f:44:4d:b9:4a:86:3c:18:6e:c8:ac:ec:e0:c0:c5:a9:72:20: a9:06:bc:b7:52:d0:67:92:4d:f8:56:51:59:02:99:45:ef:f6: 76:28:a9:4b:a0:a1:3e:74:d7:07:2b:1e:c2:fa:ee:e8:5e:cd: cc:22:06:f1:09:65:8b:4b:61:45:39:a1:e9:72:34:4f:85:28: 5a:b5:be:d4:ac:a8:e8:0e:ac:3a:c2:dd:72:67:2f:39:d1:0e: 25:e4:85:d7:fa:63:1e:78:b7:bc:44:f2:fd:f5:95:a0:e5:2b: f8:5b:e6:94:5b:a4:70:91:36:51:36:64:7a:af:29:e6:53:17: 72:07:dd:0b:bb:18:59:8b:c9:71:f5:69:98:fa:40:4d:79:b6: 58:87:c3:32:3f:9d:9c:29:fb:72:41:47:ce:64:d6:d3:7d:de: 91:9d:82:9f:72:32:80:51:5f:cc:02:a5:19:4a:fb:9a:dc:f5: 5b:c8:7d:8f:4a:1e:11:9b:69:83:58:4d:e9:53:e4:ee:d0:1b: 83:99:6a:74:6b:ea:9c:49:ec:c1:91:aa:e2:25:5f:5e:91:1a: ca:77:da:f5:f7:f2:d9:48:3f:b2:93:b5:cf:48:06:b1:c9:8c: e7:43:a5:62:c3:6a:7d:3e:f8:7c:1e:4e:9c:fb:af:f2:3b:56: bd:93:bb:30 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUesqifoIrEBet2hcEVJzPL49CbkUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMDAwMDAwNFoX DTI2MDIxODIzNTk1OVowejFJMEcGA1UEBRNAM2JjMDVjNzIxYTI5OGU1MzI5OWY3 ZjI3YmU0ZDRkZTRhNTA4NDVkNWQzNjYzNGFiMzMwMzg1NGY0NzVlYjQwYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2uS9J62AxFVSXpBHAOrvjNaokRm IKBCbGwc/Bl/QRUChL1/6zcjBNmuMkHi1wOe4m5p5h8W5/w3QxMZ2vpFjSNj5eR1 0cKg3hCk8qDo3RLbstakmvLSK/7DLSKS/cSnPDF4rz6gp/T9K+rrl0JQ2AZA21It UK7NNdqHOMLXLUO+DRHzhvzgJbFKZgcMNYomttlEQVN+ZjDPw4TZylw+OHRWvCFT ZXTz+2G+jK0FXj+FZUAMueAk2+hc/1t1Jn/afga2JM2mkEQmXYe6/YSgEG+mV31X bIQmh+TygovNH4WPwU2S8tDFO6esDZNBCmMnEyBfJR6pvd88gghWPnHDdQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFNRvl+Ax8a6WUD2bDzMKAK0/wDD4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UyZGQ4ZmZkLTVkZGYtNGQ2Ni04Nzk2LTg3ZjA5NjU3OTUwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMDANBgkqhkiG9w0BAQsFAAOCAQEAX0RNuUqGPBhuyKzs4MDF qXIgqQa8t1LQZ5JN+FZRWQKZRe/2diipS6ChPnTXBysewvru6F7NzCIG8Qlli0th RTmh6XI0T4UoWrW+1Kyo6A6sOsLdcmcvOdEOJeSF1/pjHni3vETy/fWVoOUr+Fvm lFukcJE2UTZkeq8p5lMXcgfdC7sYWYvJcfVpmPpATXm2WIfDMj+dnCn7ckFHzmTW 033ekZ2Cn3IygFFfzAKlGUr7mtz1W8h9j0oeEZtpg1hN6VPk7tAbg5lqdGvqnEns wZGq4iVfXpEaynfa9ffy2Ug/spO1z0gGscmM50OlYsNqfT74fB5OnPuv8jtWvZO7 MA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:40 2025 by rpki-client