This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa File: f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa (raw, json) Hash identifier: hOT1k36kNjC+G6BACIOFNPGCxwZrHlQjO+w6SjxQbPQ= Subject key identifier: 2E:F2:6E:CF:09:28:28:5F:83:AD:42:DA:B7:83:10:DF:44:4E:75:93 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F796A321578B55D314F30E8E496022413EA90EB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa Signing time: Tue 02 Dec 2025 00:00:08 +0000 ROA not before: Tue 02 Dec 2025 00:00:08 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:79:6a:32:15:78:b5:5d:31:4f:30:e8:e4:96:02:24:13:ea:90:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:00:08 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=f645e1bb6e1ff8688474c9893996607c2040731a3cc24945eef610407d725983, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:f1:7d:60:a4:d7:62:78:f1:9f:b6:81:1c: d2:67:ad:c7:8f:de:06:8e:29:a3:4b:a0:b2:a9:27: 4a:c9:b8:b1:a6:9b:6e:47:0d:f3:40:80:cf:b8:76: 68:f5:25:27:22:b6:c0:51:4d:4f:04:f4:60:53:30: dc:49:ad:9a:be:85:2e:e9:f4:99:04:f0:ec:92:18: de:15:83:31:c7:8c:51:dd:ee:fc:26:4b:e7:c0:a0: 60:b1:6f:0b:15:ae:8e:d6:93:27:45:94:0d:4d:20: 22:6e:93:ca:c6:25:59:75:84:50:85:11:1c:ce:55: e7:50:82:dc:7a:76:39:66:3a:be:5e:9c:c4:b8:3c: c1:ca:e0:bf:99:98:a7:a9:71:5b:92:19:13:65:eb: 68:55:1a:b0:c4:2f:a8:70:73:50:48:b1:1b:dd:71: 0a:b2:a3:84:90:c2:d8:51:cc:9a:11:8a:2a:0f:22: 80:52:5d:28:7a:14:b5:09:1f:8d:16:96:bd:13:4f: 64:d2:bb:5e:cc:4d:d1:f6:1f:bf:a1:83:5c:0e:85: af:a7:65:39:89:fe:a3:3e:31:21:54:21:b1:b7:01: ae:45:4c:ce:fe:a5:c4:c3:25:fe:f0:e2:37:2b:f2: b7:83:3e:12:2d:bb:1d:3d:cb:27:75:40:ab:20:06: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:6E:CF:09:28:28:5F:83:AD:42:DA:B7:83:10:DF:44:4E:75:93 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f863355c-0a33-4eb1-b2bb-b0c40c0693cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7000::/40 Signature Algorithm: sha256WithRSAEncryption 22:d4:b7:cd:cd:03:1c:07:f6:1e:49:45:99:f7:61:fb:42:f2: 43:df:03:0e:0a:f2:3f:cc:fb:28:13:bf:5d:fa:f3:87:fb:f8: a5:6e:8c:b7:35:00:4b:32:47:0e:ee:9a:57:7a:86:94:ca:91: c2:0f:57:6e:bf:a9:2f:ae:29:85:b8:25:59:e7:b1:0a:ca:c6: 4b:d8:4c:d0:c4:c1:a2:c6:d1:85:2a:a2:68:58:f4:b6:4d:87: 17:fe:21:02:b9:d3:4e:d5:7e:4a:92:6b:b3:21:52:eb:f8:13: 02:aa:0c:6a:a6:da:51:d3:e4:97:55:46:70:5e:fc:c3:57:8a: b6:11:5c:64:c8:da:b9:56:13:7b:4a:b8:af:6a:cd:4e:0c:d3: 48:b1:06:37:96:58:84:09:71:98:ad:d3:c8:df:75:bd:d8:6c: 49:95:21:4f:a3:97:a0:36:63:04:c4:47:a8:99:81:b3:05:a3: d2:2e:a6:ab:f2:94:8f:bf:fe:e5:88:6d:fa:f2:25:ce:11:46: ba:1a:17:37:4b:df:a0:d2:1a:59:f9:c6:28:f1:ba:bc:4d:9e: d7:ce:2b:6c:5d:36:b2:15:8b:79:99:d2:06:43:f9:56:ee:52: ea:f1:49:27:da:19:a2:d0:48:3b:2e:56:cf:41:ea:be:25:04: d3:ed:21:b8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP3lqMhV4tV0xTzDo5JYCJBPqkOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDAwOFoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAZjY0NWUxYmI2ZTFmZjg2ODg0NzRj OTg5Mzk5NjYwN2MyMDQwNzMxYTNjYzI0OTQ1ZWVmNjEwNDA3ZDcyNTk4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkfxfWCk12J48Z+2gRzSZ63Hj94G jimjS6CyqSdKybixpptuRw3zQIDPuHZo9SUnIrbAUU1PBPRgUzDcSa2avoUu6fSZ BPDskhjeFYMxx4xR3e78JkvnwKBgsW8LFa6O1pMnRZQNTSAibpPKxiVZdYRQhREc zlXnUILcenY5Zjq+XpzEuDzByuC/mZinqXFbkhkTZetoVRqwxC+ocHNQSLEb3XEK sqOEkMLYUcyaEYoqDyKAUl0oehS1CR+NFpa9E09k0rtezE3R9h+/oYNcDoWvp2U5 if6jPjEhVCGxtwGuRUzO/qXEwyX+8OI3K/K3gz4SLbsdPcsndUCrIAaz4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC7ybs8JKChfg61C2reDEN9ETnWTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y4NjMzNTVjLTBhMzMtNGViMS1iMmJiLWIwYzQwYzA2OTNjZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/3AwDQYJKoZIhvcNAQELBQADggEBACLUt83NAxwH9h5JRZn3 YftC8kPfAw4K8j/M+ygTv13684f7+KVujLc1AEsyRw7umld6hpTKkcIPV26/qS+u KYW4JVnnsQrKxkvYTNDEwaLG0YUqomhY9LZNhxf+IQK5007VfkqSa7MhUuv4EwKq DGqm2lHT5JdVRnBe/MNXirYRXGTI2rlWE3tKuK9qzU4M00ixBjeWWIQJcZit08jf db3YbEmVIU+jl6A2YwTER6iZgbMFo9IupqvylI+//uWIbfryJc4RRroaFzdL36DS Gln5xijxurxNntfOK2xdNrIVi3mZ0gZD+VbuUurxSSfaGaLQSDsuVs9B6r4lBNPt Ibg= -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:55 2025 by rpki-client