This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52492709-13d7-43b7-9adc-acc005f9da81.roa File: 52492709-13d7-43b7-9adc-acc005f9da81.roa (raw, json) Hash identifier: dab3TNwZ0ut11MOMuzD+YCVO07pjhrI5fH2LlDKUdzU= Subject key identifier: 47:05:67:9F:51:FE:20:E3:B2:79:D1:93:7F:8F:9B:36:FA:78:F5:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17DF42E5F4D90163493B9976383D1ED66EED9EF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52492709-13d7-43b7-9adc-acc005f9da81.roa Signing time: Mon 10 Nov 2025 16:20:45 +0000 ROA not before: Mon 10 Nov 2025 16:20:45 +0000 ROA not after: Mon 15 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:df:42:e5:f4:d9:01:63:49:3b:99:76:38:3d:1e:d6:6e:ed:9e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 10 16:20:45 2025 GMT Not After : Dec 15 23:59:59 2025 GMT Subject: serialNumber=8ee2c493270f13897d912bcbe71e9f747e94d46467ffa89749c0a499134820af, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:f9:b8:b8:2b:2e:f6:e8:2f:55:2d:bc:5e: ad:11:f0:a6:13:0f:1b:0b:9c:80:b5:2c:91:6c:93: b3:3f:c0:ae:64:e1:aa:ba:fe:0f:58:f9:e1:90:4e: fd:ac:bb:c2:d4:48:c3:19:a5:59:d7:2b:59:17:80: 9c:1d:4e:d8:f2:0c:87:ea:02:05:9e:b5:80:71:dd: 8b:70:1d:a3:81:d3:68:0c:66:6d:01:54:ab:5c:71: bb:3d:d9:6f:4e:28:1b:67:30:d9:8a:59:b5:cf:af: 1e:9c:83:b7:2a:b7:db:3b:73:73:93:d5:b4:0d:ca: ca:c4:16:66:5b:54:26:8b:d8:d3:3d:11:ef:fb:06: 8d:e0:05:1f:76:59:f1:fc:f1:e2:e2:f5:6e:89:02: 25:cb:68:d3:bf:7e:31:27:cd:18:cc:f6:50:cc:64: 0a:62:db:67:62:2c:96:43:2e:6f:9f:5b:d1:fb:6f: fe:76:d5:ef:38:48:ae:2d:6a:68:58:66:eb:53:43: d1:d0:35:b2:fa:54:2b:2a:0f:3b:11:90:ac:8f:99: b3:70:1f:24:15:74:17:a3:c3:99:05:0b:fe:83:b7: 7a:c0:83:bc:33:44:f8:24:31:87:4c:51:f9:66:0b: 10:e8:5a:e2:a6:9f:85:dc:70:64:9f:12:e1:0f:09: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:67:9F:51:FE:20:E3:B2:79:D1:93:7F:8F:9B:36:FA:78:F5:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52492709-13d7-43b7-9adc-acc005f9da81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:c00::/38 Signature Algorithm: sha256WithRSAEncryption b7:b1:f6:30:d8:56:66:4c:f2:71:57:2c:09:8b:6a:07:10:a0: 10:ac:24:35:37:3b:fd:3e:00:82:a6:9c:98:3a:80:ba:7d:cf: 05:bf:a7:f2:4a:bd:83:2a:1c:37:d6:15:14:ec:c7:86:96:76: ad:c0:bb:52:be:4e:30:d7:c0:05:b1:4f:56:9b:ce:d3:19:24: d3:ce:8b:d8:4e:81:10:4f:09:62:17:bb:8a:fa:d2:4d:2f:fb: d8:0c:49:b8:b7:0e:00:24:2b:94:1b:79:6e:ec:67:4e:29:64: 72:6d:58:a4:6b:85:ea:e3:4a:38:95:26:02:c3:c3:44:6f:25: 4f:c8:61:3a:85:b9:a2:a9:db:39:2b:d4:86:44:13:05:c8:97: ab:70:77:45:4c:13:4f:50:ed:bd:b1:24:6d:6c:1b:37:3e:3d: cd:d2:a1:76:8f:b3:7b:52:48:5e:9b:93:18:38:e4:e2:bc:ce: 1c:99:31:ea:43:0b:36:cc:e1:9e:af:2c:cc:6c:13:55:aa:d3: 4d:ad:f3:4f:bd:3e:bc:f4:5f:56:c5:41:ab:71:df:e7:15:75: 64:71:6d:b5:4e:67:b0:f1:33:63:22:5f:24:72:84:d6:54:b3: 77:8c:6d:a7:d4:9b:ba:27:67:62:eb:8a:45:8a:20:0f:b2:9f: 58:79:82:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF99C5fTZAWNJO5l2OD0e1m7tnvgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMDE2MjA0NVoX DTI1MTIxNTIzNTk1OVowejFJMEcGA1UEBRNAOGVlMmM0OTMyNzBmMTM4OTdkOTEy YmNiZTcxZTlmNzQ3ZTk0ZDQ2NDY3ZmZhODk3NDljMGE0OTkxMzQ4MjBhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcX5uLgrLvboL1UtvF6tEfCmEw8b C5yAtSyRbJOzP8CuZOGquv4PWPnhkE79rLvC1EjDGaVZ1ytZF4CcHU7Y8gyH6gIF nrWAcd2LcB2jgdNoDGZtAVSrXHG7PdlvTigbZzDZilm1z68enIO3KrfbO3Nzk9W0 DcrKxBZmW1Qmi9jTPRHv+waN4AUfdlnx/PHi4vVuiQIly2jTv34xJ80YzPZQzGQK YttnYiyWQy5vn1vR+2/+dtXvOEiuLWpoWGbrU0PR0DWy+lQrKg87EZCsj5mzcB8k FXQXo8OZBQv+g7d6wIO8M0T4JDGHTFH5ZgsQ6Fripp+F3HBknxLhDwk2jwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEcFZ59R/iDjsnnRk3+Pmzb6ePU8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNDkyNzA5LTEzZDctNDNiNy05YWRjLWFjYzAwNWY5ZGE4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGgwwDQYJKoZIhvcNAQELBQADggEBALex9jDYVmZM8nFXLAmL agcQoBCsJDU3O/0+AIKmnJg6gLp9zwW/p/JKvYMqHDfWFRTsx4aWdq3Au1K+TjDX wAWxT1abztMZJNPOi9hOgRBPCWIXu4r60k0v+9gMSbi3DgAkK5QbeW7sZ04pZHJt WKRrherjSjiVJgLDw0RvJU/IYTqFuaKp2zkr1IZEEwXIl6twd0VME09Q7b2xJG1s Gzc+Pc3SoXaPs3tSSF6bkxg45OK8zhyZMepDCzbM4Z6vLMxsE1Wq002t80+9Prz0 X1bFQatx3+cVdWRxbbVOZ7DxM2MiXyRyhNZUs3eMbafUm7onZ2LrikWKIA+yn1h5 gqo= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:53 2025 by rpki-client