This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa File: 51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa (raw, json) Hash identifier: s1qvOzrtYoB3fZcwIhXJFoX8TaavCTkD4mWyDhpNGtY= Subject key identifier: 37:1E:4F:47:38:6E:DA:3B:ED:B1:BA:97:50:E9:09:F5:F3:AC:9A:EC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5519D685D0B3903BAF5EBBADE9A4419C8E381669 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa Signing time: Fri 07 Nov 2025 00:00:46 +0000 ROA not before: Fri 07 Nov 2025 00:00:46 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:19:d6:85:d0:b3:90:3b:af:5e:bb:ad:e9:a4:41:9c:8e:38:16:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:46 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=e8e8c8952f290dde48ab239e1dd80ab31f8d349ad9f30f250481139e6045310f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:0b:67:b4:e0:32:1e:4a:00:97:9f:19:c9: 8b:df:8a:9d:a1:65:5c:16:17:68:6b:58:32:96:f9: c5:50:da:e5:af:14:c1:8f:a2:2e:03:4a:12:14:a6: 60:10:41:4e:0d:76:99:e7:a4:18:b4:03:47:22:bd: 09:2a:37:0f:a4:82:ea:0e:2c:c2:0e:25:e1:ac:b8: ab:f4:e1:de:4a:6e:68:e9:d1:6e:37:ea:64:e2:94: 8b:13:91:b2:a9:6b:58:3a:4e:9a:90:8a:7b:4d:06: ea:6c:42:a1:84:67:b1:c1:36:40:e4:fa:79:23:e3: 03:df:3f:e6:2a:1c:c6:eb:ec:9b:45:1e:f4:1d:83: bf:e9:82:a0:42:6b:af:3f:1c:08:63:f5:01:df:fb: d3:cf:f3:26:37:33:cc:e5:9e:aa:36:67:6d:df:ee: 4c:59:f3:06:93:61:1f:21:c7:10:0f:12:90:12:95: 17:3c:7c:cd:12:ec:7a:14:fa:f9:55:e3:02:2c:b6: df:22:55:67:c8:3b:ea:e5:08:25:81:ae:8f:2c:d4: a5:d0:73:09:bf:36:43:e4:e8:db:48:82:f9:7e:93: a4:7b:78:55:d7:3e:f2:71:6e:67:41:66:13:8a:7a: fe:69:37:c0:96:93:ef:f5:f3:bf:03:06:32:9a:c9: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:4F:47:38:6E:DA:3B:ED:B1:BA:97:50:E9:09:F5:F3:AC:9A:EC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6000::/40 Signature Algorithm: sha256WithRSAEncryption 84:d2:52:7b:cb:f3:f8:28:1f:4e:e1:5f:6c:7c:bb:d5:9c:07: 93:13:5d:e9:76:ca:c9:a8:be:b9:27:e0:15:1c:d7:37:cd:36: a8:38:16:a9:76:4f:7b:c1:c0:de:b4:bd:8e:89:0d:e1:1a:41: b2:25:41:1a:3b:27:77:28:73:d3:2f:77:43:55:eb:2f:80:3b: ef:3d:50:a6:94:c4:ab:1d:07:49:c6:4a:cd:19:d1:b8:bb:d7: 44:ac:bc:30:ba:ef:bd:4f:32:9b:e9:5b:b1:4e:93:52:5a:41: 22:17:81:34:6b:f9:6c:be:b3:88:92:b6:6e:0e:af:4f:3d:85: 37:1e:c4:7c:4d:98:75:a0:51:cc:94:f4:ea:47:74:aa:81:b1: 1c:b8:1f:22:98:b1:98:05:44:47:fb:cf:0f:87:c2:2b:f5:4f: 57:ca:4e:fb:4c:1e:d6:70:31:76:0a:33:82:f0:a0:ae:ed:34: 1e:b3:86:09:30:cd:a5:b0:2e:d1:2a:0d:83:0f:58:12:d0:5c: 18:03:13:a2:70:70:ee:58:54:ec:49:0f:88:d3:92:71:1c:d8: f9:f3:c9:f3:32:02:70:19:28:97:bf:ae:cc:ed:1f:b6:db:b2: a7:84:da:a7:e3:44:67:eb:96:bd:18:40:77:c5:b1:b1:21:c0: 25:01:d2:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVRnWhdCzkDuvXrut6aRBnI44FmkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDA0NloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAZThlOGM4OTUyZjI5MGRkZTQ4YWIy MzllMWRkODBhYjMxZjhkMzQ5YWQ5ZjMwZjI1MDQ4MTEzOWU2MDQ1MzEwZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMILZ7TgMh5KAJefGcmL34qdoWVc Fhdoa1gylvnFUNrlrxTBj6IuA0oSFKZgEEFODXaZ56QYtANHIr0JKjcPpILqDizC DiXhrLir9OHeSm5o6dFuN+pk4pSLE5GyqWtYOk6akIp7TQbqbEKhhGexwTZA5Pp5 I+MD3z/mKhzG6+ybRR70HYO/6YKgQmuvPxwIY/UB3/vTz/MmNzPM5Z6qNmdt3+5M WfMGk2EfIccQDxKQEpUXPHzNEux6FPr5VeMCLLbfIlVnyDvq5Qglga6PLNSl0HMJ vzZD5OjbSIL5fpOke3hV1z7ycW5nQWYTinr+aTfAlpPv9fO/AwYymsmG3QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDceT0c4bto77bG6l1DpCfXzrJrsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxYTI0MTQzLThmMTktNGYyYy04MWEwLTQwNDZmZTBkMGY2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/2AwDQYJKoZIhvcNAQELBQADggEBAITSUnvL8/goH07hX2x8 u9WcB5MTXel2ysmovrkn4BUc1zfNNqg4Fql2T3vBwN60vY6JDeEaQbIlQRo7J3co c9Mvd0NV6y+AO+89UKaUxKsdB0nGSs0Z0bi710SsvDC6771PMpvpW7FOk1JaQSIX gTRr+Wy+s4iStm4Or089hTcexHxNmHWgUcyU9OpHdKqBsRy4HyKYsZgFREf7zw+H wiv1T1fKTvtMHtZwMXYKM4LwoK7tNB6zhgkwzaWwLtEqDYMPWBLQXBgDE6JwcO5Y VOxJD4jTknEc2PnzyfMyAnAZKJe/rsztH7bbsqeE2qfjRGfrlr0YQHfFsbEhwCUB 0ig= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:59 2025 by rpki-client