This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa File: 03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa (raw, json) Hash identifier: gUKu381c2ASQmIqxvVEQk5h+Psjfh/sRGSpmS9CFh1U= Subject key identifier: 24:FE:ED:7B:E3:EA:ED:5D:2A:B3:94:92:50:B7:F6:DA:2C:25:B3:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04AEC452A7BF2294CF99E30C6DCC3A427AFFDD4D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa Signing time: Thu 11 Dec 2025 00:00:36 +0000 ROA not before: Thu 11 Dec 2025 00:00:36 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ae:c4:52:a7:bf:22:94:cf:99:e3:0c:6d:cc:3a:42:7a:ff:dd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 11 00:00:36 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=a754d9ed84a63e75524e077c94b237d34ef866c1b8eafc9d8cb1d8c6050732f8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:3e:3f:82:75:de:5c:f3:87:64:49:33:4a: a0:91:8d:89:75:4a:c6:8b:01:3b:7a:41:28:c3:f7: 34:d8:0f:f6:6e:5d:37:aa:34:c2:eb:cf:f3:4c:e1: fa:1b:ca:4b:fe:79:a0:0a:66:1e:95:cd:f2:d6:df: 84:2d:f2:87:9d:c4:cf:b8:1c:3c:cc:a8:3a:04:29: 29:dd:20:22:3b:a6:ae:de:57:bd:3a:8d:9f:85:16: 5f:ea:8b:7d:68:06:d2:d3:57:c3:ae:26:0a:e6:ca: ac:d8:3f:42:43:2b:25:28:43:81:9a:17:65:dc:3e: fe:29:87:a5:1b:df:eb:c4:57:70:6f:db:51:13:6e: b4:67:ab:1a:03:c0:e2:cb:c6:f6:d4:1b:3a:fe:3f: 63:d6:c5:a7:e7:08:99:43:30:5e:ba:3c:25:58:40: 49:e4:21:7d:8d:1f:93:cd:e2:87:89:c2:46:29:5b: 66:31:3f:e1:12:5c:ab:c9:2e:48:54:5e:96:dc:4d: 17:51:4c:28:2d:ae:ca:6c:88:b2:97:cd:75:c7:00: 39:7f:6f:8b:39:c5:17:7f:2a:47:73:4c:48:34:1d: d7:c5:11:66:11:c0:0f:f9:4a:7e:ff:b2:a7:9b:0c: a5:f4:3c:60:c9:3b:8e:80:f0:4b:28:c4:d6:9d:a9: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FE:ED:7B:E3:EA:ED:5D:2A:B3:94:92:50:B7:F6:DA:2C:25:B3:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03ad2b77-3143-43df-9d1e-acbaa4d2d2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:8800::/48 Signature Algorithm: sha256WithRSAEncryption 4a:a3:8a:73:b4:29:7a:d4:6a:9a:0c:e7:15:0f:95:02:4b:18: 19:de:af:e7:2a:ee:0c:11:5a:bf:84:50:61:08:e7:14:39:4a: 60:cc:42:eb:6d:21:a4:c3:00:d2:68:2d:0a:6e:64:60:63:68: ba:8f:db:a3:30:bc:69:07:b3:73:92:a9:0f:0d:cd:45:b3:e3: bb:c5:16:a4:bd:ba:3e:5e:b8:c4:a3:1e:53:76:1a:0f:22:46: e0:40:e1:d5:7e:5a:d3:c4:9f:8d:55:c9:0c:07:da:4d:b6:6e: 1d:11:a8:d4:32:c1:b8:82:00:bf:d3:6c:d0:4b:04:49:67:4b: 3b:f9:11:94:5c:67:7b:78:14:53:14:95:79:3b:f3:a3:65:7c: 4c:ff:e2:56:54:cd:4d:ef:bd:0d:62:8d:93:96:3b:21:c5:dc: fb:72:aa:54:d8:e0:c5:8e:07:77:f8:b3:e9:af:8c:b2:1a:13: 01:2b:7e:7e:61:89:7c:4a:13:95:df:b0:70:de:df:6c:af:ff: 4f:ff:83:24:5e:43:19:fa:5d:97:06:61:7e:06:38:29:eb:4f: 78:0f:ed:5f:b8:b3:7e:9c:20:80:ac:1a:cd:26:84:5c:27:6f: ef:ca:82:25:8d:c8:c6:5a:c8:2a:b5:ae:8b:4f:cc:15:87:2a: 09:7f:18:df -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBK7EUqe/IpTPmeMMbcw6Qnr/3U0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIxMTAwMDAzNloX DTI2MDMxMTIzNTk1OVowejFJMEcGA1UEBRNAYTc1NGQ5ZWQ4NGE2M2U3NTUyNGUw NzdjOTRiMjM3ZDM0ZWY4NjZjMWI4ZWFmYzlkOGNiMWQ4YzYwNTA3MzJmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KE+P4J13lzzh2RJM0qgkY2JdUrG iwE7ekEow/c02A/2bl03qjTC68/zTOH6G8pL/nmgCmYelc3y1t+ELfKHncTPuBw8 zKg6BCkp3SAiO6au3le9Oo2fhRZf6ot9aAbS01fDriYK5sqs2D9CQyslKEOBmhdl 3D7+KYelG9/rxFdwb9tRE260Z6saA8Diy8b21Bs6/j9j1sWn5wiZQzBeujwlWEBJ 5CF9jR+TzeKHicJGKVtmMT/hElyryS5IVF6W3E0XUUwoLa7KbIiyl811xwA5f2+L OcUXfypHc0xINB3XxRFmEcAP+Up+/7Knmwyl9DxgyTuOgPBLKMTWnanJTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCT+7Xvj6u1dKrOUklC39tosJbOOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzYWQyYjc3LTMxNDMtNDNkZi05ZDFlLWFjYmFhNGQyZDJlOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7IgAMA0GCSqGSIb3DQEBCwUAA4IBAQBKo4pztCl61GqaDOcV D5UCSxgZ3q/nKu4MEVq/hFBhCOcUOUpgzELrbSGkwwDSaC0KbmRgY2i6j9ujMLxp B7NzkqkPDc1Fs+O7xRakvbo+XrjEox5TdhoPIkbgQOHVflrTxJ+NVckMB9pNtm4d EajUMsG4ggC/02zQSwRJZ0s7+RGUXGd7eBRTFJV5O/OjZXxM/+JWVM1N770NYo2T ljshxdz7cqpU2ODFjgd3+LPpr4yyGhMBK35+YYl8ShOV37Bw3t9sr/9P/4MkXkMZ +l2XBmF+Bjgp6094D+1fuLN+nCCArBrNJoRcJ2/vyoIljcjGWsgqta6LT8wVhyoJ fxjf -----END CERTIFICATE-----Generated at Mon Dec 22 00:46:04 2025 by rpki-client