This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32899b9-14c3-4649-a1dc-82fec0214193.roa File: e32899b9-14c3-4649-a1dc-82fec0214193.roa (raw, json) Hash identifier: u9NfNSPRIrnwEzVRrdh281b/CqswTvJKrkdLdrnqiS4= Subject key identifier: 87:9E:4D:60:78:8F:35:A0:9C:6C:04:81:81:AC:F1:8C:C6:09:43:D2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08BB0A69D2417F848E3EA2580B0CC564958C1C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32899b9-14c3-4649-a1dc-82fec0214193.roa Signing time: Sun 30 Nov 2025 00:01:21 +0000 ROA not before: Sun 30 Nov 2025 00:01:21 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bb:0a:69:d2:41:7f:84:8e:3e:a2:58:0b:0c:c5:64:95:8c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:01:21 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=399e298daf562c6c472a3cb15a88187cd3d0dd92761e29a4105a92c3a45e7855, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:86:90:89:dc:46:91:28:2f:13:fb:40:0b: 5b:44:05:41:2c:ec:c5:71:fc:88:d9:bd:06:b5:3b: 18:3d:b8:7e:c2:8a:be:c8:90:bb:10:75:9c:b4:2c: 37:25:72:e4:bc:d2:ad:c8:c5:8c:37:da:6c:4e:8e: 89:4d:c5:88:27:0c:ee:8e:5d:dc:03:a3:99:a4:8f: b6:d4:63:95:75:b2:f3:65:a1:07:d7:32:8b:5b:a5: a8:ae:01:7e:2c:16:b2:48:9a:33:76:d7:3f:e2:6e: 09:ec:1e:94:4c:ee:cd:fa:2c:4e:7a:ef:5b:6b:0d: a9:e2:8e:de:1b:54:d2:5a:c3:e7:87:c1:70:99:47: 1c:e6:88:a2:98:50:88:ad:65:57:2a:7f:c1:d4:ea: 32:b3:e9:38:a9:62:69:66:6a:b5:fa:76:5c:20:5c: 54:ba:68:0e:d5:86:9f:f1:95:18:f6:d5:8f:82:25: 46:37:37:4e:c0:9b:3b:9e:ce:1b:0f:05:fe:ae:21: dd:98:4a:73:63:21:e5:9a:48:75:a8:ab:63:47:a3: eb:3a:9c:eb:f5:3e:f9:66:2a:31:d7:62:f3:0c:73: 28:4b:46:fc:7e:55:fb:bc:cd:6b:22:6d:8f:60:21: 97:06:f4:8e:f1:7d:bc:07:3a:0f:1a:9f:8f:37:b6: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9E:4D:60:78:8F:35:A0:9C:6C:04:81:81:AC:F1:8C:C6:09:43:D2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32899b9-14c3-4649-a1dc-82fec0214193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e080::/48 Signature Algorithm: sha256WithRSAEncryption 4b:18:07:84:c6:df:f7:42:68:2f:01:ec:79:e2:37:2d:ca:d5: b7:30:ba:5f:7b:4f:ce:b7:e4:9d:78:6f:b1:3b:92:55:a0:37: 03:2c:3b:ff:b6:c9:3c:b2:a4:8a:67:9c:f4:07:22:99:24:ef: 83:71:b9:23:d6:b2:37:4e:61:18:82:11:69:79:28:63:46:7c: 3c:f7:a3:30:08:6a:ce:51:4d:3c:16:b0:18:20:25:d3:b2:15: 18:a7:e9:86:34:36:f9:56:36:68:09:8c:a5:b0:85:bb:08:8d: 03:46:9c:a4:49:fd:2c:09:8e:3c:9e:9f:af:aa:4b:72:1c:66: 9f:b0:03:d8:62:da:06:8a:9d:4a:a7:ab:cf:0c:c9:88:8f:08: 22:17:d6:dd:17:2a:aa:c0:63:e1:b3:91:24:ba:53:89:70:3a: b1:e2:0d:6a:2c:48:9c:8e:18:72:4e:78:c5:ff:ff:7d:96:4e: 0f:a2:03:36:9b:65:89:b7:c5:d4:15:44:4d:5c:eb:38:4d:ff: a0:e1:9e:2e:20:d1:4f:fe:87:6c:25:8f:13:2c:c0:66:93:1b: 27:5b:05:c0:80:41:f5:9a:03:c7:4f:b2:66:73:25:54:c4:ee: b4:e2:00:ba:36:29:48:a6:32:20:20:27:7e:88:9d:78:dd:66: 16:f8:5c:a8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgITCLsKadJBf4SOPqJYCwzFZJWMHDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjUxMTMwMDAwMTIxWhcN MjYwMjI4MjM1OTU5WjB6MUkwRwYDVQQFE0AzOTllMjk4ZGFmNTYyYzZjNDcyYTNj YjE1YTg4MTg3Y2QzZDBkZDkyNzYxZTI5YTQxMDVhOTJjM2E0NWU3ODU1MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+IaQidxGkSgvE/tAC1tEBUEs7MVx /IjZvQa1Oxg9uH7Cir7IkLsQdZy0LDclcuS80q3IxYw32mxOjolNxYgnDO6OXdwD o5mkj7bUY5V1svNloQfXMotbpaiuAX4sFrJImjN21z/ibgnsHpRM7s36LE5671tr Danijt4bVNJaw+eHwXCZRxzmiKKYUIitZVcqf8HU6jKz6TipYmlmarX6dlwgXFS6 aA7Vhp/xlRj21Y+CJUY3N07AmzuezhsPBf6uId2YSnNjIeWaSHWoq2NHo+s6nOv1 PvlmKjHXYvMMcyhLRvx+Vfu8zWsibY9gIZcG9I7xfbwHOg8an483tsYTAgMBAAGj ggJLMIICRzAdBgNVHQ4EFgQUh55NYHiPNaCcbASBgazxjMYJQ9IwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv ZTMyODk5YjktMTRjMy00NjQ5LWExZGMtODJmZWMwMjE0MTkzLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkBtoA4IAwDQYJKoZIhvcNAQELBQADggEBAEsYB4TG3/dCaC8B7Hni Ny3K1bcwul97T8635J14b7E7klWgNwMsO/+2yTyypIpnnPQHIpkk74NxuSPWsjdO YRiCEWl5KGNGfDz3ozAIas5RTTwWsBggJdOyFRin6YY0NvlWNmgJjKWwhbsIjQNG nKRJ/SwJjjyen6+qS3IcZp+wA9hi2gaKnUqnq88MyYiPCCIX1t0XKqrAY+GzkSS6 U4lwOrHiDWosSJyOGHJOeMX//32WTg+iAzabZYm3xdQVRE1c6zhN/6Dhni4g0U/+ h2wljxMswGaTGydbBcCAQfWaA8dPsmZzJVTE7rTiALo2KUimMiAgJ36InXjdZhb4 XKg= -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:42 2025 by rpki-client