This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/43fd8687-12d4-49b5-9958-8536ce8160b4.roa File: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (raw, json) Hash identifier: ZYZG8cDggGOScTpdb7p8ZIw+Y1ZbbJ0TIUBkEXnJp1Y= Subject key identifier: 13:D4:72:2C:F5:FF:C6:44:18:D4:4D:88:1B:80:D3:75:C0:B9:B4:90 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 4772579B389816850827825F9C02D10B111A2EDA Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/43fd8687-12d4-49b5-9958-8536ce8160b4.roa Signing time: Sat 06 Dec 2025 00:00:07 +0000 ROA not before: Sat 06 Dec 2025 00:00:07 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:72:57:9b:38:98:16:85:08:27:82:5f:9c:02:d1:0b:11:1a:2e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 6 00:00:07 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=a6bc56a1a886daabab647c9dffaceb6ffe704f272b89c2b8056f2112793cedb4, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:8f:1b:58:e7:cc:66:98:c2:0e:6a:ab:cd: 95:bd:54:17:b4:dc:3b:6e:2c:cc:4b:dd:16:50:32: 5c:bf:4c:0a:f0:e7:af:f0:34:2b:35:d9:af:7a:8e: dc:eb:cf:c1:c9:c8:75:f5:f5:8c:49:61:1f:46:c3: e5:82:43:1f:42:84:1f:20:f3:dd:14:74:3e:e3:f3: 1d:09:22:1b:8c:8e:4d:b7:bf:a1:db:c9:7a:f2:cc: 5b:59:db:43:62:b4:83:85:c7:8a:84:0c:ef:4e:38: cb:c1:41:f9:0a:d4:a9:a8:38:0d:8f:c1:a7:8d:04: d8:9b:61:c3:b8:fc:ad:72:9a:51:0a:ff:6b:9c:bf: a9:52:85:6c:e4:49:f1:5e:7e:17:27:63:65:ef:d8: 5b:7d:8d:92:72:f7:ef:13:c6:ed:59:78:bd:2a:46: 8a:8e:ad:e2:f3:98:f1:b3:0d:ec:96:e9:f8:7d:72: 40:18:f9:36:ed:e4:d4:8b:78:f0:d1:36:a7:c7:7e: ca:b2:bb:62:6b:06:bc:4f:a7:c5:f1:9c:60:00:49: 2d:33:0a:f1:af:d5:bc:42:ba:46:96:85:18:0a:b0: 75:43:54:ea:0f:ab:a7:3a:dd:8e:60:e7:f3:3d:46: 62:6a:2e:92:26:a6:78:4c:10:f9:eb:d4:72:1d:aa: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:72:2C:F5:FF:C6:44:18:D4:4D:88:1B:80:D3:75:C0:B9:B4:90 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/43fd8687-12d4-49b5-9958-8536ce8160b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.160.0/19 Signature Algorithm: sha256WithRSAEncryption 76:d1:22:ec:f9:77:e5:3a:82:64:10:24:5a:04:7a:b0:e4:2c: b5:f1:ec:84:29:b7:0b:a5:89:13:f9:cf:7d:a0:bf:5e:29:b8: c5:28:e8:10:b9:ed:87:76:de:c0:70:a9:23:de:0e:27:b3:02: c9:44:40:b7:e1:74:41:5c:f1:59:f8:5c:26:45:64:58:c8:dd: 55:01:29:7d:51:ce:d0:c2:00:52:d3:28:ee:52:e7:9c:71:62: 1f:55:81:9d:c5:46:28:b5:b1:4f:6d:70:61:71:75:71:08:b9: f1:f0:d9:6b:25:75:d0:77:95:23:48:3f:e9:61:fc:27:29:04: 09:91:94:c7:d5:b9:37:f3:eb:61:c4:a0:5f:0b:59:b7:5c:1e: 6a:3d:ce:8d:7a:63:0c:05:7e:6f:15:31:c3:d2:79:2a:04:04: 4a:13:6b:dd:b9:69:aa:b4:4e:f4:80:c8:a0:77:9c:d6:33:1c: af:8e:35:a2:64:42:c0:3b:a5:8e:23:2e:c7:4d:78:41:1f:ea: 3a:5e:16:38:30:27:53:af:82:9d:c9:67:c9:aa:da:e5:81:55: 0f:7a:d2:2c:1f:48:e7:c7:f4:32:42:85:82:f6:da:f1:ba:ee: d4:e6:2f:e0:94:cb:a6:5e:c7:05:f0:7c:8b:9e:09:12:10:a3: 09:42:59:f8 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUR3JXmziYFoUIJ4JfnALRCxEaLtowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNjAwMDAwN1oX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAYTZiYzU2YTFhODg2ZGFhYmFiNjQ3 YzlkZmZhY2ViNmZmZTcwNGYyNzJiODljMmI4MDU2ZjIxMTI3OTNjZWRiNDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpmPG1jnzGaYwg5qq82VvVQXtNw7 bizMS90WUDJcv0wK8Oev8DQrNdmveo7c68/Bych19fWMSWEfRsPlgkMfQoQfIPPd FHQ+4/MdCSIbjI5Nt7+h28l68sxbWdtDYrSDhceKhAzvTjjLwUH5CtSpqDgNj8Gn jQTYm2HDuPytcppRCv9rnL+pUoVs5EnxXn4XJ2Nl79hbfY2ScvfvE8btWXi9KkaK jq3i85jxsw3slun4fXJAGPk27eTUi3jw0Tanx37Ksrtiawa8T6fF8ZxgAEktMwrx r9W8QrpGloUYCrB1Q1TqD6unOt2OYOfzPUZiai6SJqZ4TBD569RyHaoVTwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBPUciz1/8ZEGNRNiBuA03XAubSQMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzQzZmQ4Njg3LTEyZDQtNDliNS05OTU4LTg1MzZjZTgxNjBiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFrymgMA0GCSqGSIb3DQEBCwUAA4IBAQB20SLs+XflOoJkECRaBHqw 5Cy18eyEKbcLpYkT+c99oL9eKbjFKOgQue2Hdt7AcKkj3g4nswLJREC34XRBXPFZ +FwmRWRYyN1VASl9Uc7QwgBS0yjuUueccWIfVYGdxUYotbFPbXBhcXVxCLnx8Nlr JXXQd5UjSD/pYfwnKQQJkZTH1bk38+thxKBfC1m3XB5qPc6NemMMBX5vFTHD0nkq BARKE2vduWmqtE70gMigd5zWMxyvjjWiZELAO6WOIy7HTXhBH+o6XhY4MCdTr4Kd yWfJqtrlgVUPetIsH0jnx/QyQoWC9trxuu7U5i/glMumXscF8HyLngkSEKMJQln4 -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:49 2025 by rpki-client