This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa File: 0c131403-c0db-4229-b10c-238da60a9c57.roa (raw, json) Hash identifier: FUtMHpAgzA4YSwu/7DzuC1qj592+YagKipC96kT/hLc= Subject key identifier: C4:E6:70:B1:B1:2B:B2:3C:67:B7:84:7F:52:50:63:C4:24:A1:5D:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 376A3793DDFECA63C66FBD640809A99937131E12 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa Signing time: Fri 07 Nov 2025 00:00:09 +0000 ROA not before: Fri 07 Nov 2025 00:00:09 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6a:37:93:dd:fe:ca:63:c6:6f:bd:64:08:09:a9:99:37:13:1e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:09 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=bbe7e45c62d435822436927cafbead33c393bf5e71d3bcc03588007a36276493, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:4b:54:7e:ad:8d:59:86:98:63:d7:b6:d0: 48:29:63:bb:56:ea:0f:17:bb:fe:ee:13:d6:89:a9: b6:2c:58:4d:c7:a4:71:da:5c:c4:e7:94:3a:8c:44: 88:1b:3b:6b:bd:be:00:29:82:0a:0f:75:08:0f:2c: 5d:64:ce:74:16:b3:e1:f9:13:03:b2:10:9e:a9:1f: c7:98:10:72:ac:37:7c:28:38:f9:d7:f3:38:36:ae: 2d:ac:cb:c7:7f:82:a4:6e:8f:b5:8e:f1:80:3c:d7: 79:e9:e0:f4:00:54:a9:73:a4:6c:be:26:0f:67:b3: 7a:3f:d0:46:cd:9d:1a:09:c9:a1:24:a3:ff:12:5f: 80:01:f7:b7:a5:37:ed:80:d8:6a:57:1c:38:25:b9: 88:62:1b:a4:14:62:b8:48:f4:32:ed:12:ed:e4:0b: 25:1a:27:92:22:61:a6:d5:1f:24:d8:96:1c:4f:aa: e3:08:f2:a1:b8:8a:4e:81:6c:e8:2f:53:bb:89:6b: c0:6b:0d:c5:37:83:1f:26:40:ae:6b:9c:34:46:4d: 15:d9:b6:6a:bc:66:79:95:b4:83:2c:48:0a:5d:21: 46:b4:ea:dc:ab:3f:4b:f3:f8:9a:56:2d:05:98:9c: 3b:01:86:6e:9c:d6:55:11:ec:23:19:2d:d7:fe:4c: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:70:B1:B1:2B:B2:3C:67:B7:84:7F:52:50:63:C4:24:A1:5D:D1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c880::/48 Signature Algorithm: sha256WithRSAEncryption 81:57:1c:84:8c:7e:27:cf:d7:85:59:4b:ba:61:30:a0:9f:aa: 11:58:c2:74:cd:0a:05:d1:3a:fa:68:a5:8e:db:74:e8:e5:7e: 80:39:0b:10:71:3f:47:bb:38:60:2d:23:bb:a5:15:8d:e6:68: 79:5e:e6:d9:f6:91:6e:85:81:31:d0:af:4d:81:f3:2e:37:5c: 29:53:d3:86:39:b1:c5:3b:08:ab:21:0e:aa:5f:4b:e6:67:2c: b3:ac:35:37:29:3a:d8:cd:46:5f:13:1e:7d:4c:ef:83:2b:f9: d9:75:d6:cc:61:66:7b:90:36:da:68:db:3d:49:57:a0:b1:55: dc:0e:7b:8a:93:8f:4c:fc:44:45:01:f4:d8:1d:2f:78:91:06: 3c:48:65:92:78:6f:fe:37:2a:f4:f5:d5:e0:b4:2b:41:84:ce: 69:33:12:31:45:9f:22:31:9b:ab:55:bb:df:84:7c:8c:58:4c: d0:12:5c:13:52:b9:4c:31:68:a6:07:38:18:22:90:96:09:13: d3:97:9c:39:8d:f1:13:5a:5d:2c:69:f9:dd:5d:d6:19:18:da: bc:8d:24:c2:b5:e0:44:2e:79:a7:ff:17:c8:e3:00:f1:d9:1f: 8b:3a:3a:bb:3d:1b:8e:40:ea:4e:80:5c:a8:43:c4:6d:ed:80: a7:43:8e:a1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUN2o3k93+ymPGb71kCAmpmTcTHhIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDAwOVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAYmJlN2U0NWM2MmQ0MzU4MjI0MzY5 MjdjYWZiZWFkMzNjMzkzYmY1ZTcxZDNiY2MwMzU4ODAwN2EzNjI3NjQ5MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIJLVH6tjVmGmGPXttBIKWO7VuoP F7v+7hPWiam2LFhNx6Rx2lzE55Q6jESIGztrvb4AKYIKD3UIDyxdZM50FrPh+RMD shCeqR/HmBByrDd8KDj51/M4Nq4trMvHf4Kkbo+1jvGAPNd56eD0AFSpc6RsviYP Z7N6P9BGzZ0aCcmhJKP/El+AAfe3pTftgNhqVxw4JbmIYhukFGK4SPQy7RLt5Asl GieSImGm1R8k2JYcT6rjCPKhuIpOgWzoL1O7iWvAaw3FN4MfJkCua5w0Rk0V2bZq vGZ5lbSDLEgKXSFGtOrcqz9L8/iaVi0FmJw7AYZunNZVEewjGS3X/kwA4QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMTmcLGxK7I8Z7eEf1JQY8QkoV3RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBjMTMxNDAzLWMwZGItNDIyOS1iMTBjLTIzOGRhNjBhOWM1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYciAMA0GCSqGSIb3DQEBCwUAA4IBAQCBVxyEjH4nz9eFWUu6 YTCgn6oRWMJ0zQoF0Tr6aKWO23To5X6AOQsQcT9HuzhgLSO7pRWN5mh5XubZ9pFu hYEx0K9NgfMuN1wpU9OGObHFOwirIQ6qX0vmZyyzrDU3KTrYzUZfEx59TO+DK/nZ ddbMYWZ7kDbaaNs9SVegsVXcDnuKk49M/ERFAfTYHS94kQY8SGWSeG/+Nyr09dXg tCtBhM5pMxIxRZ8iMZurVbvfhHyMWEzQElwTUrlMMWimBzgYIpCWCRPTl5w5jfET Wl0safndXdYZGNq8jSTCteBELnmn/xfI4wDx2R+LOjq7PRuOQOpOgFyoQ8Rt7YCn Q46h -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:47 2025 by rpki-client