This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa File: 422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa (raw, json) Hash identifier: OcC/cUnkYGcjSW3xqx1Cabnkem6tD/397QJ1IdNxU20= Subject key identifier: 35:B8:71:72:F8:BB:26:EB:9B:58:5D:9F:AA:CC:88:0A:CF:E0:E5:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 407C60E7671D7EC37FF6765CAA0B4052686DE37E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa Signing time: Sat 08 Nov 2025 00:20:12 +0000 ROA not before: Sat 08 Nov 2025 00:20:12 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7c:60:e7:67:1d:7e:c3:7f:f6:76:5c:aa:0b:40:52:68:6d:e3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:20:12 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=5ce2737076562ce9622ab81227df5e91e1246a0d0a37b4dd312462b22d43409d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:b6:56:44:b0:6e:c0:50:7e:35:c5:9c:4d: dd:46:ed:13:c2:ad:71:ce:43:1d:c6:93:da:23:e6: c4:f0:bd:42:9c:9d:c7:67:62:f8:5b:7b:ec:d3:be: 63:49:64:73:bd:88:49:b1:25:b6:ad:19:8a:40:c1: 96:c9:cd:0a:e7:15:5f:c1:4f:c9:65:e0:01:f2:32: b0:2d:46:b4:16:41:ac:2d:45:a3:e8:45:97:df:55: 5d:38:02:8a:fd:31:4e:12:4d:8a:9b:79:79:90:28: d8:11:4d:0b:dd:e5:97:af:45:be:c4:ba:b4:5c:f2: ba:4a:c3:c6:c4:46:ad:c4:72:ea:a4:d0:21:59:15: 59:0f:cc:f5:5b:74:fa:63:90:bf:f9:a6:5f:c3:0c: a5:80:a1:3b:25:69:a9:ea:3c:8a:3d:05:75:2b:90: 04:b4:cf:bc:6f:80:90:84:23:a2:bd:f4:22:13:fd: e9:6d:36:d5:d7:91:23:65:57:e0:b9:31:2a:ea:33: 50:6e:e4:f6:ca:56:86:d5:41:5f:56:79:f1:74:c5: 2b:f3:da:23:a0:cc:fd:0c:07:0d:4d:b5:1e:fc:cf: ce:46:fa:a7:74:6e:34:b7:3d:a1:db:c1:a0:ae:8e: a5:b1:00:21:dd:72:d9:70:10:01:1d:23:12:31:30: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:71:72:F8:BB:26:EB:9B:58:5D:9F:AA:CC:88:0A:CF:E0:E5:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 8e:20:1e:e2:60:be:1c:ab:26:65:8c:09:36:aa:62:c8:4d:dd: 34:57:96:81:3d:4c:ce:4b:f9:86:91:cf:90:b1:d5:17:59:df: 3b:e2:01:55:57:f1:b0:03:8d:86:2d:ae:ff:60:c3:d2:49:81: 45:e7:2a:82:72:c6:02:db:71:1b:a0:54:70:12:5e:29:e2:41: 5a:00:f5:93:3b:ce:07:32:f5:3a:72:1f:8b:4b:cf:b5:05:6e: b6:03:68:4d:89:20:28:a2:ac:ea:9a:b0:a6:62:43:1a:b8:af: cc:4e:b2:d1:be:e8:6a:30:25:7b:4a:9c:19:fd:5a:5b:4d:41: bc:07:b8:0b:98:48:e5:f7:4a:85:23:8f:d7:b3:03:ea:4b:93: 62:0b:45:7b:d2:12:53:92:0c:0d:11:bf:51:35:23:5f:f9:da: d9:4e:87:07:03:c6:41:62:1c:2e:20:e0:56:c9:70:68:cd:c8: f6:e3:63:44:e3:65:ed:4b:7c:d3:23:a0:33:91:79:7b:bb:d0: 26:77:c1:06:4d:30:f3:d2:0a:a0:89:2a:9a:26:b5:1e:c7:f2: 82:92:c4:af:9f:5d:f0:a3:e7:03:c8:77:78:c5:f7:a6:c2:20: 5d:57:cc:5e:08:c5:1c:86:4b:cc:06:bf:6a:40:9a:35:71:dc: ad:9f:1e:6b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQHxg52cdfsN/9nZcqgtAUmht434wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMjAxMloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNANWNlMjczNzA3NjU2MmNlOTYyMmFi ODEyMjdkZjVlOTFlMTI0NmEwZDBhMzdiNGRkMzEyNDYyYjIyZDQzNDA5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVu2VkSwbsBQfjXFnE3dRu0Twq1x zkMdxpPaI+bE8L1CnJ3HZ2L4W3vs075jSWRzvYhJsSW2rRmKQMGWyc0K5xVfwU/J ZeAB8jKwLUa0FkGsLUWj6EWX31VdOAKK/TFOEk2Km3l5kCjYEU0L3eWXr0W+xLq0 XPK6SsPGxEatxHLqpNAhWRVZD8z1W3T6Y5C/+aZfwwylgKE7JWmp6jyKPQV1K5AE tM+8b4CQhCOivfQiE/3pbTbV15EjZVfguTEq6jNQbuT2ylaG1UFfVnnxdMUr89oj oMz9DAcNTbUe/M/ORvqndG40tz2h28Ggro6lsQAh3XLZcBABHSMSMTDvtQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDW4cXL4uybrm1hdn6rMiArP4OXIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyMmIyY2M3LThjZmUtNDEyMC04M2U5LTk3MWJkOWIwM2YyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEDAMA0GCSqGSIb3DQEBCwUAA4IBAQCOIB7iYL4cqyZljAk2 qmLITd00V5aBPUzOS/mGkc+QsdUXWd874gFVV/GwA42GLa7/YMPSSYFF5yqCcsYC 23EboFRwEl4p4kFaAPWTO84HMvU6ch+LS8+1BW62A2hNiSAooqzqmrCmYkMauK/M TrLRvuhqMCV7SpwZ/VpbTUG8B7gLmEjl90qFI4/XswPqS5NiC0V70hJTkgwNEb9R NSNf+drZTocHA8ZBYhwuIOBWyXBozcj242NE42XtS3zTI6AzkXl7u9Amd8EGTTDz 0gqgiSqaJrUex/KCksSvn13wo+cDyHd4xfemwiBdV8xeCMUchkvMBr9qQJo1cdyt nx5r -----END CERTIFICATE-----Generated at Tue Nov 18 14:37:32 2025 by rpki-client