This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b3c2b9b-025c-44df-bdca-4a903df0156c.roa File: 4b3c2b9b-025c-44df-bdca-4a903df0156c.roa (raw, json) Hash identifier: KjI7/pNEmQ14aLDtI4w7sRdk7fqiK0oqk5KCqFd8Yd0= Subject key identifier: 47:27:78:D7:10:5A:D5:19:35:23:45:6E:08:AE:55:47:AD:DB:E0:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23FFB82B2B93B34B7CF582A9DF318EBD1B2141E2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b3c2b9b-025c-44df-bdca-4a903df0156c.roa Signing time: Sun 09 Nov 2025 00:50:54 +0000 ROA not before: Sun 09 Nov 2025 00:50:54 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ff:b8:2b:2b:93:b3:4b:7c:f5:82:a9:df:31:8e:bd:1b:21:41:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:50:54 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=7f47c9bf0d16b6d28a7d9a219a44644cd4e91fcbd3aff50592fc5978ce55ca87, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:06:6c:91:93:eb:da:af:fe:8e:df:15:b5: 44:6e:07:8a:be:8e:05:91:29:0e:a9:b0:61:5d:47: 97:41:09:0f:7e:dc:e8:c7:23:e9:9e:9a:6c:56:b5: 97:df:06:bd:29:82:bc:95:74:51:9d:5e:0e:ca:5a: da:0c:60:8a:84:4b:21:44:4d:7b:88:48:c8:a0:34: fd:7f:a3:1d:78:ba:19:ea:2a:94:f6:56:7c:e0:4f: c2:dd:74:f7:f9:67:6b:ca:10:32:43:b7:9e:51:88: 75:e5:c6:0c:c3:b7:68:4b:51:8c:2a:1a:9b:cb:b0: 19:f4:d2:63:87:3f:91:c2:16:85:c8:01:69:25:16: 46:4b:94:04:5c:44:38:d4:83:11:5e:f8:cf:43:9a: e8:23:cb:21:2e:b9:ae:1a:0f:4b:d7:a7:bb:d3:3e: 55:04:50:d2:47:9e:8b:8f:0b:bd:5a:2f:41:f7:89: f2:eb:5d:b7:25:61:55:d6:15:bb:0b:46:4e:ff:10: 62:6c:5d:6c:e7:e9:37:41:af:b1:5c:58:54:fe:98: dd:08:73:ae:43:80:40:7c:c6:4f:5b:fc:5f:a1:46: 18:01:94:28:f5:be:d4:93:5d:7d:2f:7e:2b:aa:31: ff:9d:7c:02:6f:45:03:0f:25:24:60:10:a8:95:1a: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:27:78:D7:10:5A:D5:19:35:23:45:6E:08:AE:55:47:AD:DB:E0:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b3c2b9b-025c-44df-bdca-4a903df0156c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.67.0/24 Signature Algorithm: sha256WithRSAEncryption a1:dd:f3:fb:23:4a:9b:b1:1f:d2:db:53:2b:93:d6:8a:31:d7: 2e:7b:e3:a5:7d:e6:0e:58:d7:81:2f:90:64:5c:52:75:2b:63: 0d:1d:a4:1d:2b:1b:a6:72:fb:44:e5:d6:f6:df:92:79:b5:1c: 43:6c:36:af:5e:18:86:4c:ab:8b:ab:9a:57:22:36:9f:78:35: ca:92:26:a0:16:9e:de:ad:35:29:34:21:08:f0:eb:4a:e1:bb: 00:3c:d9:f5:8a:5e:13:08:52:6e:1c:81:af:ab:62:b5:2e:90: 99:f4:71:fa:29:7f:a3:d6:1d:62:be:fd:df:2d:b3:b8:71:45: d1:e6:21:35:20:cc:c8:98:57:19:d1:be:fc:68:26:79:cd:02: b1:8a:ce:76:8d:15:e7:cc:0c:95:bc:2f:34:a1:27:34:67:56: 5c:9a:1f:b7:35:e2:3c:ac:dc:69:86:19:df:48:68:38:af:0b: e1:0e:9b:a4:a8:95:78:79:74:59:2d:8a:ab:f4:2c:59:74:12: 7c:72:e6:3c:87:d5:15:12:ff:9a:7e:50:0e:5d:5c:66:d5:0e: bb:25:95:8d:4d:40:0d:12:f5:76:9b:58:e6:9b:60:ea:ed:bb: ae:05:26:83:64:26:ab:91:63:d0:f1:7f:70:af:62:72:db:a6: 3c:a3:79:f9 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUI/+4KyuTs0t89YKp3zGOvRshQeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwNTA1NFoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAN2Y0N2M5YmYwZDE2YjZkMjhhN2Q5 YTIxOWE0NDY0NGNkNGU5MWZjYmQzYWZmNTA1OTJmYzU5NzhjZTU1Y2E4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqREGbJGT69qv/o7fFbVEbgeKvo4F kSkOqbBhXUeXQQkPftzoxyPpnppsVrWX3wa9KYK8lXRRnV4OylraDGCKhEshRE17 iEjIoDT9f6MdeLoZ6iqU9lZ84E/C3XT3+WdryhAyQ7eeUYh15cYMw7doS1GMKhqb y7AZ9NJjhz+RwhaFyAFpJRZGS5QEXEQ41IMRXvjPQ5roI8shLrmuGg9L16e70z5V BFDSR56Ljwu9Wi9B94ny6123JWFV1hW7C0ZO/xBibF1s5+k3Qa+xXFhU/pjdCHOu Q4BAfMZPW/xfoUYYAZQo9b7Uk119L34rqjH/nXwCb0UDDyUkYBColRoCzQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEcneNcQWtUZNSNFbgiuVUet2+DKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiM2MyYjliLTAyNWMtNDRkZi1iZGNhLTRhOTAzZGYwMTU2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9RDMA0GCSqGSIb3DQEBCwUAA4IBAQCh3fP7I0qbsR/S21Mrk9aK Mdcue+OlfeYOWNeBL5BkXFJ1K2MNHaQdKxumcvtE5db235J5tRxDbDavXhiGTKuL q5pXIjafeDXKkiagFp7erTUpNCEI8OtK4bsAPNn1il4TCFJuHIGvq2K1LpCZ9HH6 KX+j1h1ivv3fLbO4cUXR5iE1IMzImFcZ0b78aCZ5zQKxis52jRXnzAyVvC80oSc0 Z1Zcmh+3NeI8rNxphhnfSGg4rwvhDpukqJV4eXRZLYqr9CxZdBJ8cuY8h9UVEv+a flAOXVxm1Q67JZWNTUANEvV2m1jmm2Dq7buuBSaDZCarkWPQ8X9wr2Jy26Y8o3n5 -----END CERTIFICATE-----Generated at Tue Nov 18 13:11:00 2025 by rpki-client