This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa File: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (raw, json) Hash identifier: yWi4vmYUMO0k3bGWU58+1DwpumVOkC/H5jR6owzOWJE= Subject key identifier: 1F:17:12:79:92:64:4D:70:C0:DE:43:46:E7:08:0A:47:1A:67:11:9F Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 20CC2E3305D85115EA60206F7735A4315581E8F4 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa Signing time: Sat 06 Dec 2025 00:00:06 +0000 ROA not before: Sat 06 Dec 2025 00:00:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:cc:2e:33:05:d8:51:15:ea:60:20:6f:77:35:a4:31:55:81:e8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 6 00:00:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=20240db022530d8b48b25c5298fcc5245ac5e0d511d9955d99b2ace59dd4f134, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:7c:94:3a:9d:22:a9:b3:f0:86:da:9f:af: 30:98:46:f4:28:f6:6c:2f:ab:d5:53:11:37:bc:1b: 0c:e5:2c:02:55:3f:c2:4a:e3:0f:de:5d:16:fa:94: 40:18:c7:96:82:e9:cd:f1:05:5a:36:2d:93:d6:5b: 99:48:12:05:72:50:84:09:37:5f:d5:90:0c:6a:6c: 98:8c:a6:f7:81:91:74:8a:69:a6:4a:68:c6:eb:4e: 7c:d4:21:fc:07:bd:84:ce:0b:dd:f6:34:c0:91:45: 07:8b:24:cc:a1:c5:44:42:bc:68:b3:a6:25:70:88: e6:cc:9b:91:1c:76:f3:b5:1c:12:d8:f1:3b:00:c8: f8:38:1e:83:c4:7e:23:4e:72:33:24:59:aa:5b:5c: 2c:ac:87:53:4c:75:fc:c8:a9:99:dc:c3:66:fa:0c: a0:08:b1:9d:75:7e:23:84:75:9d:a9:d3:06:7e:8e: 9b:b5:7d:4f:6a:b5:a8:54:0a:df:aa:59:77:4c:aa: b0:a5:ee:81:c6:11:07:04:b7:82:2e:2b:5a:5d:a8: ae:14:7b:49:89:13:b8:e5:8e:1c:0b:10:6c:44:b1: d2:77:49:9a:d6:8f:7b:5e:b5:1d:51:e3:dc:e3:a5: f9:a0:0f:07:b3:53:02:0d:44:22:4d:b7:a3:13:ac: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:17:12:79:92:64:4D:70:C0:DE:43:46:E7:08:0A:47:1A:67:11:9F X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.128.0/18 Signature Algorithm: sha256WithRSAEncryption d8:55:cd:09:98:15:cb:a8:6b:7d:a5:63:96:1f:01:11:00:8a: 4a:b7:79:5a:2b:df:67:3d:3f:0b:21:99:ba:be:18:77:d3:28: 80:2b:f2:f5:40:a6:e2:1e:44:5f:80:17:3d:5e:8e:e4:bc:ac: 11:8e:47:a4:bd:62:15:f2:ce:49:ec:78:53:ff:10:e6:5b:0c: a9:70:d5:53:38:31:28:43:fc:86:34:74:d1:e0:ec:a6:1c:9d: 1e:da:f8:d7:18:01:89:77:3d:e6:db:fb:17:4e:01:52:91:1b: 74:d7:d9:e2:40:5a:58:93:04:10:f1:40:b2:72:88:e4:bb:36: f3:3c:7d:5c:9a:2b:11:a4:7c:43:fc:09:61:3a:c9:40:57:a4: 17:3d:ad:79:db:80:67:a2:4c:6e:47:eb:55:49:70:bd:34:a7: 11:d5:cb:15:41:af:cc:18:0f:7a:66:df:cf:fd:1f:f5:80:6d: 88:c2:ef:06:fe:53:05:06:53:04:1d:4d:19:07:bd:cf:fd:3a: fb:dd:00:ac:4c:78:fc:89:f8:c1:27:42:59:e3:26:b3:4e:71: db:1f:4f:0d:06:e8:10:ea:32:e6:0c:14:2f:e0:6b:eb:8b:b7: 64:49:9c:e1:e9:59:44:29:b8:2d:c4:12:35:0c:8d:41:e5:b7: 97:ae:6b:82 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUIMwuMwXYURXqYCBvdzWkMVWB6PQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNjAwMDAwNloX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAMjAyNDBkYjAyMjUzMGQ4YjQ4YjI1 YzUyOThmY2M1MjQ1YWM1ZTBkNTExZDk5NTVkOTliMmFjZTU5ZGQ0ZjEzNDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmB8lDqdIqmz8Iban68wmEb0KPZs L6vVUxE3vBsM5SwCVT/CSuMP3l0W+pRAGMeWgunN8QVaNi2T1luZSBIFclCECTdf 1ZAMamyYjKb3gZF0immmSmjG60581CH8B72Ezgvd9jTAkUUHiyTMocVEQrxos6Yl cIjmzJuRHHbztRwS2PE7AMj4OB6DxH4jTnIzJFmqW1wsrIdTTHX8yKmZ3MNm+gyg CLGddX4jhHWdqdMGfo6btX1ParWoVArfqll3TKqwpe6BxhEHBLeCLitaXaiuFHtJ iRO45Y4cCxBsRLHSd0ma1o97XrUdUePc46X5oA8Hs1MCDUQiTbejE6wOEQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFB8XEnmSZE1wwN5DRucICkcaZxGfMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzllMzdmODU1LTQ4YmYtNDIwYS1hODZjLTVlZWI0ZmMxZjc5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGrymAMA0GCSqGSIb3DQEBCwUAA4IBAQDYVc0JmBXLqGt9pWOWHwER AIpKt3laK99nPT8LIZm6vhh30yiAK/L1QKbiHkRfgBc9Xo7kvKwRjkekvWIV8s5J 7HhT/xDmWwypcNVTODEoQ/yGNHTR4OymHJ0e2vjXGAGJdz3m2/sXTgFSkRt019ni QFpYkwQQ8UCycojkuzbzPH1cmisRpHxD/AlhOslAV6QXPa1524BnokxuR+tVSXC9 NKcR1csVQa/MGA96Zt/P/R/1gG2Iwu8G/lMFBlMEHU0ZB73P/Tr73QCsTHj8ifjB J0JZ4yazTnHbH08NBugQ6jLmDBQv4Gvri7dkSZzh6VlEKbgtxBI1DI1B5beXrmuC -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:26 2025 by rpki-client