This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa File: fbbb78e0-9689-404e-873b-b6e1797d5078.roa (raw, json) Hash identifier: X1h2Pza7JlMV4ZZkFXYeFsEbQhEt2SNaK33OpVEePQk= Subject key identifier: FE:AB:92:B2:EE:5F:D7:83:97:0C:2A:5B:EF:E7:79:F0:38:50:F9:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0361C91A34D4FCE1C5003168D1D9B4058EE30895 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa Signing time: Thu 04 Dec 2025 00:30:40 +0000 ROA not before: Thu 04 Dec 2025 00:30:40 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:61:c9:1a:34:d4:fc:e1:c5:00:31:68:d1:d9:b4:05:8e:e3:08:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:30:40 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=e6276b58bb644924e48cadf852a135de537150998194edd391c7d42c50b5f98d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:55:1a:3e:40:e1:98:71:da:03:12:1f:7e: de:f9:f1:1e:14:f3:19:e8:23:09:2d:2c:63:e2:0d: 4f:53:3c:30:7e:d7:c2:87:9c:46:09:85:96:f0:8a: e9:83:ca:25:03:8b:ae:5e:bb:fc:a8:9c:fa:14:c4: c7:fb:e1:31:61:84:54:ff:4a:d6:ed:d2:1b:19:87: 11:b5:e6:4b:65:65:40:ac:0a:89:b4:04:96:2c:51: 60:b0:d9:4b:ed:68:46:54:56:31:64:d7:91:e7:51: 31:e9:d7:04:dd:63:88:84:9c:53:3f:89:4a:84:16: 73:54:e8:3d:15:d7:17:a2:29:b5:13:26:6b:96:95: 9c:6d:30:f7:7b:54:5a:64:73:37:91:2e:57:36:bb: 2b:b5:38:d2:68:e6:57:17:cb:e7:64:59:a1:1d:aa: ad:b8:f3:da:49:f5:f9:85:a2:f5:4e:04:49:ad:6a: c6:80:04:fe:3a:36:a3:35:d7:f1:b9:7d:47:25:7e: f8:f3:2c:d2:5d:78:27:d2:7b:5e:76:3a:63:ea:9d: 76:31:02:83:8c:54:19:2d:a7:61:da:33:5a:ee:b6: 3a:97:d6:eb:84:18:17:1d:f4:a7:b9:03:61:f8:22: ba:e3:9a:10:75:ab:f9:c9:b3:da:bf:36:3a:60:90: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AB:92:B2:EE:5F:D7:83:97:0C:2A:5B:EF:E7:79:F0:38:50:F9:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e::/38 Signature Algorithm: sha256WithRSAEncryption a4:8b:6d:73:fb:76:98:a8:63:cd:df:d3:37:e6:a6:d2:59:ed: b3:48:0e:da:05:ba:14:b1:5e:e8:1c:fc:30:c2:0b:2f:d4:f8: 3f:29:6a:9d:1f:05:1d:cb:84:6f:2a:78:c9:97:e8:05:75:4c: a6:13:e3:32:0f:5d:b1:96:5a:18:eb:c0:14:92:b3:56:ba:82: 3a:42:22:e7:e5:ec:d3:4c:8c:d0:50:4f:23:6a:87:dd:30:df: 23:10:df:9c:0e:17:ce:42:71:ad:b9:32:39:b9:e7:98:46:d8: 97:16:84:3e:aa:1c:a1:95:bc:c4:24:5b:33:64:6d:b8:e0:ca: 78:8a:db:2d:1a:e3:29:ed:5c:c0:b4:32:c5:8c:90:1d:46:9d: 66:f0:67:e2:48:c8:44:9f:17:9f:e4:2a:46:e6:44:a3:7a:17: d6:ec:97:bd:ba:e2:b2:71:b4:a2:7c:c3:84:12:bf:ff:46:a0: b0:a5:de:64:45:02:1f:5b:42:2b:4f:05:17:dc:1d:a5:a6:3c: 08:7f:5e:ff:95:4e:a0:e9:29:6b:2d:51:b6:83:32:47:bb:8c: d2:6e:69:e6:74:36:33:3d:dc:64:db:9e:0b:5d:3a:60:bf:ea: ee:a2:78:80:7b:0e:8d:f8:d1:0e:33:94:31:50:85:b2:30:7d: b5:f8:ac:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUA2HJGjTU/OHFADFo0dm0BY7jCJUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzA0MFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAZTYyNzZiNThiYjY0NDkyNGU0OGNh ZGY4NTJhMTM1ZGU1MzcxNTA5OTgxOTRlZGQzOTFjN2Q0MmM1MGI1Zjk4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9lVGj5A4Zhx2gMSH37e+fEeFPMZ 6CMJLSxj4g1PUzwwftfCh5xGCYWW8Irpg8olA4uuXrv8qJz6FMTH++ExYYRU/0rW 7dIbGYcRteZLZWVArAqJtASWLFFgsNlL7WhGVFYxZNeR51Ex6dcE3WOIhJxTP4lK hBZzVOg9FdcXoim1EyZrlpWcbTD3e1RaZHM3kS5XNrsrtTjSaOZXF8vnZFmhHaqt uPPaSfX5haL1TgRJrWrGgAT+OjajNdfxuX1HJX748yzSXXgn0ntedjpj6p12MQKD jFQZLadh2jNa7rY6l9brhBgXHfSnuQNh+CK645oQdav5ybPavzY6YJAzYwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP6rkrLuX9eDlwwqW+/nefA4UPkKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiYmI3OGUwLTk2ODktNDA0ZS04NzNiLWI2ZTE3OTdkNTA3OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHgAwDQYJKoZIhvcNAQELBQADggEBAKSLbXP7dpioY83f0zfm ptJZ7bNIDtoFuhSxXugc/DDCCy/U+D8pap0fBR3LhG8qeMmX6AV1TKYT4zIPXbGW WhjrwBSSs1a6gjpCIufl7NNMjNBQTyNqh90w3yMQ35wOF85Cca25Mjm555hG2JcW hD6qHKGVvMQkWzNkbbjgyniK2y0a4yntXMC0MsWMkB1GnWbwZ+JIyESfF5/kKkbm RKN6F9bsl7264rJxtKJ8w4QSv/9GoLCl3mRFAh9bQitPBRfcHaWmPAh/Xv+VTqDp KWstUbaDMke7jNJuaeZ0NjM93GTbngtdOmC/6u6ieIB7Do340Q4zlDFQhbIwfbX4 rPU= -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:45 2025 by rpki-client