This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa File: 22707524-2248-48ea-815f-578f49b19436.roa (raw, json) Hash identifier: A3EMEtAoLbWvo2+AU4wcz5LV+4FiZiLxrLSRIqLxB1Y= Subject key identifier: 70:13:85:9A:44:4C:61:41:47:70:A0:9D:25:EC:9B:88:3E:B9:C6:91 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 3865A9D416E48E4CEFD0B6582BB6644838DC4123 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa Signing time: Sat 06 Dec 2025 00:00:10 +0000 ROA not before: Sat 06 Dec 2025 00:00:10 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:65:a9:d4:16:e4:8e:4c:ef:d0:b6:58:2b:b6:64:48:38:dc:41:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 6 00:00:10 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=aa35ca482f91f28e26b059a97d85f43a7d2f45696f5721da0e4a8f1a90ce518f, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:98:07:24:63:86:50:9c:0f:22:89:92:92: 1d:86:7d:c5:76:19:f5:f2:09:18:28:95:35:60:cf: 5b:e1:9f:cd:42:cc:7a:d2:0b:52:9a:c8:78:78:dd: 3d:db:00:d5:e5:d4:fb:6b:08:5f:75:08:0a:66:6f: 19:71:1b:d6:61:92:c4:28:4a:1a:40:23:b9:dd:b7: fc:89:6b:6d:23:80:6e:bb:ee:4f:a9:31:09:ea:93: bc:51:eb:b7:dc:64:92:bc:0f:0b:9b:01:29:50:86: 9e:41:13:10:9a:ec:ed:3b:d9:29:ae:8b:ea:2c:20: 26:3e:b2:2e:6d:0c:2c:e7:c4:0d:22:65:97:59:85: 70:48:a4:b6:e9:b3:d4:1b:14:a5:1f:db:bb:4e:60: 5e:32:6a:41:c9:1e:c6:25:e6:3f:e4:93:dc:12:e2: b8:b8:9a:a1:8f:05:27:14:3e:2c:00:0f:6f:f6:5f: 73:8f:cc:fd:42:d3:70:7f:df:14:d5:48:3f:23:14: c6:e8:ec:52:19:88:a1:5c:44:20:99:43:f5:b9:64: 64:ae:74:e7:ac:11:89:8c:9d:86:61:34:ef:61:87: 7d:f3:c5:ae:a8:f2:c5:be:25:9d:f8:91:38:5d:08: d6:c4:63:1d:88:a2:ef:7c:4e:33:aa:50:fb:f5:cc: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:13:85:9A:44:4C:61:41:47:70:A0:9D:25:EC:9B:88:3E:B9:C6:91 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.150.0/24 Signature Algorithm: sha256WithRSAEncryption 29:4c:1f:71:86:b0:2b:f6:32:a3:00:d8:ca:d6:6a:2d:81:ae: e4:b7:3b:dc:5c:4d:67:83:0b:f1:6a:b4:00:87:61:c4:f8:77: a9:49:d4:31:10:fd:85:52:af:ac:08:94:6b:0f:8e:ac:a7:99: 7c:5f:d1:1c:a9:dd:d0:58:ec:a9:81:d9:48:95:6b:c2:9c:08: 15:8c:b3:82:af:46:97:55:47:4a:18:7b:62:77:7c:6e:85:cc: 50:8c:5b:98:f2:73:cb:da:b7:fb:17:63:ac:e1:e1:31:ae:b7: ec:47:bf:b2:6e:ab:09:e2:49:c4:ca:7a:f4:28:2f:dd:19:d0: 24:5b:22:16:21:58:e0:fd:01:85:d6:af:eb:4e:25:18:1b:47: 33:08:f7:c7:ba:cd:ca:b4:d5:86:9a:bd:f0:76:9a:99:a4:a1: 0d:22:92:d5:d1:a7:d4:84:c9:37:44:6a:33:88:b6:ed:dc:a4: f4:3b:1b:0d:55:b3:e4:40:04:b6:01:c2:2a:bc:a0:2d:d4:d1: 90:eb:94:42:fb:06:df:37:db:e5:aa:33:97:68:a4:8c:6e:e7: b5:3e:1e:48:a8:8b:9b:6a:1d:c7:e7:06:24:18:be:d9:bf:88: 9e:10:10:e4:ce:b8:95:6b:2d:0e:3a:46:ea:cd:57:97:46:79: ac:9e:7b:bf -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUOGWp1Bbkjkzv0LZYK7ZkSDjcQSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNjAwMDAxMFoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAYWEzNWNhNDgyZjkxZjI4ZTI2YjA1 OWE5N2Q4NWY0M2E3ZDJmNDU2OTZmNTcyMWRhMGU0YThmMWE5MGNlNTE4ZjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuCYByRjhlCcDyKJkpIdhn3Fdhn1 8gkYKJU1YM9b4Z/NQsx60gtSmsh4eN092wDV5dT7awhfdQgKZm8ZcRvWYZLEKEoa QCO53bf8iWttI4Buu+5PqTEJ6pO8Ueu33GSSvA8LmwEpUIaeQRMQmuztO9kprovq LCAmPrIubQws58QNImWXWYVwSKS26bPUGxSlH9u7TmBeMmpByR7GJeY/5JPcEuK4 uJqhjwUnFD4sAA9v9l9zj8z9QtNwf98U1Ug/IxTG6OxSGYihXEQgmUP1uWRkrnTn rBGJjJ2GYTTvYYd988WuqPLFviWd+JE4XQjWxGMdiKLvfE4zqlD79cxJAwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHAThZpETGFBR3CgnSXsm4g+ucaRMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzIyNzA3NTI0LTIyNDgtNDhlYS04MTVmLTU3OGY0OWIxOTQzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArymWMA0GCSqGSIb3DQEBCwUAA4IBAQApTB9xhrAr9jKjANjK1mot ga7ktzvcXE1ngwvxarQAh2HE+HepSdQxEP2FUq+sCJRrD46sp5l8X9Ecqd3QWOyp gdlIlWvCnAgVjLOCr0aXVUdKGHtid3xuhcxQjFuY8nPL2rf7F2Os4eExrrfsR7+y bqsJ4knEynr0KC/dGdAkWyIWIVjg/QGF1q/rTiUYG0czCPfHus3KtNWGmr3wdpqZ pKENIpLV0afUhMk3RGoziLbt3KT0OxsNVbPkQAS2AcIqvKAt1NGQ65RC+wbfN9vl qjOXaKSMbue1Ph5IqIubah3H5wYkGL7Zv4ieEBDkzriVay0OOkbqzVeXRnmsnnu/ -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:01 2025 by rpki-client