This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbed307e-fbcc-427b-978f-d6f6d64a91c6.roa File: fbed307e-fbcc-427b-978f-d6f6d64a91c6.roa (raw, json) Hash identifier: uWI4lRWfaek7jJN/BDR9YA4XquwzQHRz8hYUVOwtwP0= Subject key identifier: 07:68:BB:D8:A7:E2:0F:74:36:16:24:AF:2A:62:3F:F2:0B:79:5F:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FF4F149CFEE97F08598A41E5D918D68A2F34D5E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbed307e-fbcc-427b-978f-d6f6d64a91c6.roa Signing time: Thu 04 Dec 2025 00:00:12 +0000 ROA not before: Thu 04 Dec 2025 00:00:12 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f4:f1:49:cf:ee:97:f0:85:98:a4:1e:5d:91:8d:68:a2:f3:4d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:00:12 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=87fe7ba7fb266e2fe0a8c0917d4558e0e60f0e96da0e04f9746f7e38856a2941, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:95:4e:0e:01:63:c8:84:6b:94:93:da:e9: f6:53:f7:8d:cb:ab:24:dc:3c:3b:7e:2d:e2:fc:44: fc:63:54:09:be:68:a1:cc:d4:57:d2:00:4f:ce:da: 68:e9:a5:10:b5:e6:5f:2e:fb:81:00:1d:aa:0e:8a: 8a:c4:e4:7a:b9:cb:96:71:fd:9e:f4:09:bc:bb:03: 95:36:49:fc:c0:65:86:d1:40:3f:f7:f4:37:f0:8c: 6e:cd:dc:f9:1f:85:c0:17:66:a0:73:c7:a9:82:f9: f8:fd:43:48:09:bc:c7:0f:ef:2e:2f:3f:75:c7:ca: 14:d1:c7:29:0d:b3:49:95:ef:57:bc:08:5c:63:d6: 1d:ae:30:5b:a1:93:c2:e7:bb:06:9a:5c:e5:5a:d5: 3e:41:0b:68:7f:84:7e:6d:3c:ad:0a:f8:9a:43:58: 4c:1b:7a:d2:06:92:eb:05:c8:ac:76:d1:c6:39:15: 62:c8:0a:cd:be:1f:74:0e:a6:2c:2c:1a:bb:a7:a0: 36:9c:25:e5:79:24:56:36:75:56:b2:28:bc:0e:f8: 81:22:9d:6e:41:74:db:12:80:75:57:7c:e1:0d:65: c7:de:c4:a8:fd:eb:57:56:84:c4:1a:d7:e4:0c:cc: 13:40:82:31:a1:76:5f:3f:46:71:60:ba:c8:cb:3c: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:68:BB:D8:A7:E2:0F:74:36:16:24:AF:2A:62:3F:F2:0B:79:5F:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbed307e-fbcc-427b-978f-d6f6d64a91c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:a000::/40 Signature Algorithm: sha256WithRSAEncryption 08:6c:ba:1f:e4:98:9b:de:2c:8a:3b:50:88:74:2e:89:8a:33: 2c:f8:02:de:c5:61:14:39:99:2e:03:da:58:a5:5b:6a:ef:ae: d5:43:6f:0c:29:bb:1e:5c:1d:2e:0b:cb:6f:2e:dd:16:d9:ef: a0:ca:61:03:cf:1e:9a:95:81:03:31:d3:ea:fb:f4:de:d7:f3: d0:83:f1:a6:ed:c9:2e:97:69:93:88:46:76:0c:96:99:00:de: 12:fc:57:6b:c1:9a:92:61:ba:41:2d:c0:c0:fa:63:9d:6a:04: df:c1:2e:21:e2:f1:ee:fe:32:b2:fd:71:98:9b:8f:4b:b0:d0: 85:bf:8e:65:e6:38:6a:5c:12:0a:a3:b5:17:f9:a5:d7:77:7b: 00:16:75:b6:2a:6b:4d:0f:ae:13:f6:6f:0d:54:9e:b9:1c:b4: cc:fe:2c:f3:9f:7f:19:90:bd:7a:44:f9:0a:20:68:62:6e:3c: 5f:17:6c:6b:d7:8f:e5:25:64:fe:f5:e4:57:db:ed:1a:cf:aa: d5:96:6a:ab:2e:89:38:34:84:31:34:a0:57:29:f3:e9:1c:ff: 8a:62:26:6f:1e:dc:7c:65:52:9a:9a:95:d5:24:74:6a:28:2c: 57:00:2f:8d:2b:83:c6:aa:01:72:b9:fd:99:26:b7:db:3c:b9: fa:76:43:ee -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX/TxSc/ul/CFmKQeXZGNaKLzTV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDAxMloX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAODdmZTdiYTdmYjI2NmUyZmUwYThj MDkxN2Q0NTU4ZTBlNjBmMGU5NmRhMGUwNGY5NzQ2ZjdlMzg4NTZhMjk0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI+VTg4BY8iEa5ST2un2U/eNy6sk 3Dw7fi3i/ET8Y1QJvmihzNRX0gBPztpo6aUQteZfLvuBAB2qDoqKxOR6ucuWcf2e 9Am8uwOVNkn8wGWG0UA/9/Q38Ixuzdz5H4XAF2agc8epgvn4/UNICbzHD+8uLz91 x8oU0ccpDbNJle9XvAhcY9YdrjBboZPC57sGmlzlWtU+QQtof4R+bTytCviaQ1hM G3rSBpLrBcisdtHGORViyArNvh90DqYsLBq7p6A2nCXleSRWNnVWsii8DviBIp1u QXTbEoB1V3zhDWXH3sSo/etXVoTEGtfkDMwTQIIxoXZfP0ZxYLrIyzwG1wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAdou9in4g90NhYkrypiP/ILeV/9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiZWQzMDdlLWZiY2MtNDI3Yi05NzhmLWQ2ZjZkNjRhOTFjNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacKAwDQYJKoZIhvcNAQELBQADggEBAAhsuh/kmJveLIo7UIh0 LomKMyz4At7FYRQ5mS4D2lilW2rvrtVDbwwpux5cHS4Ly28u3RbZ76DKYQPPHpqV gQMx0+r79N7X89CD8abtyS6XaZOIRnYMlpkA3hL8V2vBmpJhukEtwMD6Y51qBN/B LiHi8e7+MrL9cZibj0uw0IW/jmXmOGpcEgqjtRf5pdd3ewAWdbYqa00PrhP2bw1U nrkctMz+LPOffxmQvXpE+QogaGJuPF8XbGvXj+UlZP715Ffb7RrPqtWWaqsuiTg0 hDE0oFcp8+kc/4piJm8e3HxlUpqaldUkdGooLFcAL40rg8aqAXK5/Zkmt9s8ufp2 Q+4= -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:00 2025 by rpki-client