This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa File: 3537691c-1a10-4699-a8a0-4cec50a35534.roa (raw, json) Hash identifier: JYuqYwyOWn/0bWGN95GQ8nu7277OxE0/7xb5VRTWm08= Subject key identifier: C2:B2:B9:F3:86:58:17:35:6D:77:10:00:DE:64:DB:FA:F8:F3:23:F2 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 2714D64A1A9877B65E24FAB75B086FFAB04F30E4 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa Signing time: Sat 06 Dec 2025 00:10:05 +0000 ROA not before: Sat 06 Dec 2025 00:10:05 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fa:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:14:d6:4a:1a:98:77:b6:5e:24:fa:b7:5b:08:6f:fa:b0:4f:30:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Dec 6 00:10:05 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=4552cfcacc54a4e619ccd349fdf891d0d2f78a3f1a9451e8ca260bf91039b8e6, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:e9:69:41:8b:df:08:34:27:0c:c7:fb:f1: 9d:41:05:26:2f:f0:82:1b:12:bf:9c:5b:6a:47:4c: 81:84:c1:c2:b1:f6:ad:30:a4:7d:3b:00:ba:29:20: ec:61:f9:65:fc:1e:0a:37:a9:51:c3:87:b2:34:2f: 2d:a5:93:a6:3f:2c:99:e8:3d:34:6e:93:8c:b2:85: 4c:91:7f:47:15:ba:91:74:ce:88:3c:c9:bf:c4:4f: 61:e9:76:db:5f:50:ef:ca:a6:fc:07:a7:92:00:fa: 1b:b4:a0:49:1a:e9:7a:9b:31:59:64:b9:be:7d:c6: 47:1f:de:78:18:81:fe:7d:3b:6d:d7:e7:c5:24:de: 4b:08:a1:38:7e:00:11:56:63:fb:ec:35:d7:f6:67: 1c:37:ef:9a:63:39:ce:5e:78:00:87:ee:0c:8e:5d: 23:f4:c2:39:ae:c1:51:b7:d7:9e:4f:08:e2:a2:96: fe:a7:1a:a3:eb:92:36:54:73:df:0c:63:e9:d2:ec: 27:ee:b2:8e:00:a1:c6:02:fc:a9:96:5b:55:02:6f: fd:10:30:a7:6d:ef:7a:6f:d9:18:21:23:71:c5:28: 74:c6:f2:54:3e:cf:b2:c5:b1:b8:78:cb:1b:f4:d3: 77:10:6d:03:c5:87:46:29:28:81:7f:05:71:b1:a7: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:B9:F3:86:58:17:35:6D:77:10:00:DE:64:DB:FA:F8:F3:23:F2 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fa:8000::/40 Signature Algorithm: sha256WithRSAEncryption 7a:5b:01:e3:2b:51:5e:ed:15:17:ed:ec:a4:29:ab:a8:d2:32: 9a:48:69:f8:74:8a:53:24:ca:b5:34:3d:fc:a3:70:36:89:3a: db:b6:e1:4f:67:ad:a7:8d:bb:0d:e6:ce:33:13:db:a0:a7:93: 53:32:6d:eb:a8:b6:40:8f:2e:87:dd:a7:2c:fa:3f:2a:00:ab: 32:3e:b7:d5:ae:a5:78:21:ba:09:d8:9e:67:71:5a:cb:65:19: 5f:5d:c5:63:f9:73:f9:23:5f:63:92:60:c4:71:e4:5e:15:5d: a0:8a:db:d2:49:3d:f0:50:26:2b:9e:18:93:70:1b:d7:9b:f1: b6:61:18:e2:f1:6d:86:c8:71:91:21:f1:c8:e9:e7:1b:78:07: ee:c7:a9:e0:c9:e4:3a:ea:9c:ff:93:e3:bb:cd:3c:cc:5a:09: d8:78:64:c9:a7:de:c2:a3:e0:8f:9a:42:90:f4:d3:8d:ee:97: 21:7d:5d:36:b3:43:8c:a9:71:8a:d0:42:08:64:6e:53:ea:80: 95:96:ac:4f:21:b7:0b:40:55:c8:a4:e1:bd:b1:02:94:dc:34: 32:e7:7f:5b:e5:57:14:a3:84:b5:b2:c1:5c:41:d9:4e:16:f1: 6d:80:01:8d:0a:ca:1a:46:64:86:93:42:ea:95:87:84:24:ab: 0e:53:b3:f8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJxTWShqYd7ZeJPq3Wwhv+rBPMOQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MTIwNjAwMTAwNVoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNANDU1MmNmY2FjYzU0YTRlNjE5Y2Nk MzQ5ZmRmODkxZDBkMmY3OGEzZjFhOTQ1MWU4Y2EyNjBiZjkxMDM5YjhlNjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BfpaUGL3wg0JwzH+/GdQQUmL/CC GxK/nFtqR0yBhMHCsfatMKR9OwC6KSDsYfll/B4KN6lRw4eyNC8tpZOmPyyZ6D00 bpOMsoVMkX9HFbqRdM6IPMm/xE9h6XbbX1Dvyqb8B6eSAPobtKBJGul6mzFZZLm+ fcZHH954GIH+fTtt1+fFJN5LCKE4fgARVmP77DXX9mccN++aYznOXngAh+4Mjl0j 9MI5rsFRt9eeTwjiopb+pxqj65I2VHPfDGPp0uwn7rKOAKHGAvyplltVAm/9EDCn be96b9kYISNxxSh0xvJUPs+yxbG4eMsb9NN3EG0DxYdGKSiBfwVxsaedrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMKyufOGWBc1bXcQAN5k2/r48yPyMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzM1Mzc2OTFjLTFhMTAtNDY5OS1hOGEwLTRjZWM1MGEzNTUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+oAwDQYJKoZIhvcNAQELBQADggEBAHpbAeMrUV7tFRft7KQp q6jSMppIafh0ilMkyrU0PfyjcDaJOtu24U9nraeNuw3mzjMT26Cnk1MybeuotkCP Lofdpyz6PyoAqzI+t9WupXghugnYnmdxWstlGV9dxWP5c/kjX2OSYMRx5F4VXaCK 29JJPfBQJiueGJNwG9eb8bZhGOLxbYbIcZEh8cjp5xt4B+7HqeDJ5DrqnP+T47vN PMxaCdh4ZMmn3sKj4I+aQpD0043ulyF9XTazQ4ypcYrQQghkblPqgJWWrE8htwtA Vcik4b2xApTcNDLnf1vlVxSjhLWywVxB2U4W8W2AAY0KyhpGZIaTQuqVh4Qkqw5T s/g= -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:51 2025 by rpki-client