This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa File: 794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa (raw, json) Hash identifier: GYhDwNRXarkT2L4ZpMTDNdrktQmPuuWAKI+Fa+FCpVE= Subject key identifier: 3A:D7:18:76:16:BF:49:BD:5A:8E:7E:EF:94:59:EB:73:92:7F:2A:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10FB77D718BC1508D1CA36DE3B2E9D9A9F6E1F47 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa Signing time: Sun 09 Nov 2025 00:10:25 +0000 ROA not before: Sun 09 Nov 2025 00:10:25 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fb:77:d7:18:bc:15:08:d1:ca:36:de:3b:2e:9d:9a:9f:6e:1f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:10:25 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=b22d20eee6d62bff0b8409461e2ba0a34c915e4c2a1bdb6668c6419a6ac861d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:4b:6e:d3:7e:ca:84:f6:1a:31:24:14:64: 9b:03:3e:c7:7a:4c:0b:9a:9a:2d:97:db:7a:3e:80: 02:a7:64:ba:5f:6d:89:2f:77:3f:bc:f4:38:8b:f9: 87:69:85:9f:26:e9:96:d5:82:29:e6:60:44:35:99: 31:f9:a0:d5:ad:ab:a7:eb:48:1c:af:52:a5:12:d6: 62:52:ed:d1:f8:d3:de:18:07:28:e4:4d:b3:c5:53: 21:dd:bd:cf:f7:de:70:9e:3e:4c:05:43:2c:ae:b2: 78:0b:11:cc:f6:86:ed:0d:5a:d3:b0:15:55:5a:2c: 21:39:45:66:bb:fb:24:11:fb:3a:9b:4a:3e:2c:29: 66:cc:51:ae:19:70:ab:15:82:2e:04:cc:21:5b:74: 73:e1:4c:32:11:1c:8e:6d:d8:25:cd:05:9b:40:55: 31:97:7b:d1:b8:b1:18:21:4d:34:67:df:9e:13:b5: 0f:66:7f:5f:69:bb:d7:45:f5:de:fb:24:06:d1:01: c1:7d:8d:8f:a3:33:ab:a1:5c:ab:84:ba:1c:3d:4b: 27:19:fd:4d:58:5f:0c:1e:9d:b9:68:85:6b:88:87: 9d:f6:b0:ff:d9:d3:ca:32:34:45:2a:2c:48:cd:c3: f4:84:f8:08:5b:27:86:1f:9d:e7:7d:8e:df:09:7d: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:18:76:16:BF:49:BD:5A:8E:7E:EF:94:59:EB:73:92:7F:2A:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794f94c6-a1e0-44db-ac13-0cb5d0d8bc67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a::/38 Signature Algorithm: sha256WithRSAEncryption 93:66:51:11:a0:66:b5:66:ab:28:1f:44:f2:88:69:34:5f:d7: 75:08:27:78:85:ec:7c:0e:67:45:56:31:d9:20:16:6c:cb:65: b2:c9:70:c7:60:8c:9d:13:49:3f:65:26:93:cd:01:99:57:aa: 09:b8:79:e3:77:30:92:1a:50:c8:25:53:dd:6e:9e:3d:60:0b: ce:6b:97:a6:64:d2:a7:ff:e1:5c:0b:28:d2:de:55:76:de:e5: dd:df:c1:db:52:aa:f3:ad:88:de:9c:65:4c:fb:60:82:ae:ee: d3:be:e7:ad:d2:06:e4:19:60:c6:67:b3:77:98:c2:ef:95:97: 2b:ef:87:1e:e5:78:e6:46:1a:50:4c:80:c2:c9:70:68:bc:70: ab:26:8d:60:cf:5b:a1:ff:6b:92:56:df:d8:48:c8:8f:f5:d5: 2f:17:be:7d:d0:69:89:2b:04:9f:e6:8d:12:eb:6f:6e:86:f1: c1:e2:6e:41:19:06:44:73:75:51:56:c2:ef:58:e2:a2:5e:de: c5:47:ab:62:fe:21:03:44:ff:e8:8e:e5:c6:51:90:e3:5b:c4: 05:2c:45:1d:d6:82:01:b1:e9:01:b5:e4:3e:2c:cc:43:3c:e7: 62:d1:24:a2:8d:fb:74:0f:bb:aa:d0:9d:95:d1:80:76:6b:43: eb:85:3d:47 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEPt31xi8FQjRyjbeOy6dmp9uH0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMTAyNVoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAYjIyZDIwZWVlNmQ2MmJmZjBiODQw OTQ2MWUyYmEwYTM0YzkxNWU0YzJhMWJkYjY2NjhjNjQxOWE2YWM4NjFkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuBLbtN+yoT2GjEkFGSbAz7HekwL mpotl9t6PoACp2S6X22JL3c/vPQ4i/mHaYWfJumW1YIp5mBENZkx+aDVraun60gc r1KlEtZiUu3R+NPeGAco5E2zxVMh3b3P995wnj5MBUMsrrJ4CxHM9obtDVrTsBVV WiwhOUVmu/skEfs6m0o+LClmzFGuGXCrFYIuBMwhW3Rz4UwyERyObdglzQWbQFUx l3vRuLEYIU00Z9+eE7UPZn9fabvXRfXe+yQG0QHBfY2PozOroVyrhLocPUsnGf1N WF8MHp25aIVriIed9rD/2dPKMjRFKixIzcP0hPgIWyeGH53nfY7fCX068QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDrXGHYWv0m9Wo5+75RZ63OSfyosMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5NGY5NGM2LWExZTAtNDRkYi1hYzEzLTBjYjVkMGQ4YmM2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGgAwDQYJKoZIhvcNAQELBQADggEBAJNmURGgZrVmqygfRPKI aTRf13UIJ3iF7HwOZ0VWMdkgFmzLZbLJcMdgjJ0TST9lJpPNAZlXqgm4eeN3MJIa UMglU91unj1gC85rl6Zk0qf/4VwLKNLeVXbe5d3fwdtSqvOtiN6cZUz7YIKu7tO+ 563SBuQZYMZns3eYwu+Vlyvvhx7leOZGGlBMgMLJcGi8cKsmjWDPW6H/a5JW39hI yI/11S8Xvn3QaYkrBJ/mjRLrb26G8cHibkEZBkRzdVFWwu9Y4qJe3sVHq2L+IQNE /+iO5cZRkONbxAUsRR3WggGx6QG15D4szEM852LRJKKN+3QPu6rQnZXRgHZrQ+uF PUc= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:44 2025 by rpki-client