This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd3366c-489c-4afe-af18-d26b5824bd0e.roa File: 8bd3366c-489c-4afe-af18-d26b5824bd0e.roa (raw, json) Hash identifier: nYShIcVziu6voPNrPVvnvV5vMwvMagkDq0jWcbDPNDY= Subject key identifier: 2B:06:2D:5D:E3:93:95:BA:A6:A2:E4:DE:7C:6D:08:71:C6:48:EB:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10F0AD5ACBB1333A595F2064BC6E7E9662E2B0C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd3366c-489c-4afe-af18-d26b5824bd0e.roa Signing time: Fri 07 Nov 2025 00:40:12 +0000 ROA not before: Fri 07 Nov 2025 00:40:12 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f0:ad:5a:cb:b1:33:3a:59:5f:20:64:bc:6e:7e:96:62:e2:b0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:40:12 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=ea1506a77f19f86864aac995f5ee63255d6419968549bca818bce0be30ad69dc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:ba:d7:a3:89:ed:4d:99:51:af:7f:e0:e7: f9:86:da:ca:3c:65:bb:be:3c:be:5d:09:9c:1c:f8: 4d:35:e7:2f:89:00:3c:ec:43:d4:14:5f:94:a5:29: 75:f0:96:99:66:d9:ee:6f:62:14:e2:b2:1b:2d:7b: 8f:d1:21:8c:9e:9b:a0:cd:10:c2:6b:1d:c7:65:52: 43:a1:09:91:e2:9f:2c:55:15:9e:17:32:8f:d5:ab: 56:1a:ca:6a:a4:a5:c1:9e:c0:01:6b:4c:ab:d1:ac: 64:d8:bd:9c:b5:eb:f0:06:20:a9:86:07:72:04:8a: 54:6a:c8:ac:0a:7e:bf:50:1b:1b:a4:85:77:0e:87: f5:f8:38:54:a6:23:26:df:55:cc:0c:7e:33:ce:c0: 16:f5:1a:43:f8:e6:00:37:19:f7:4f:27:7b:28:0a: cf:4e:2c:8d:19:72:cf:90:bd:8a:72:34:06:13:77: 8a:7f:5b:1f:ac:6a:b2:9c:98:3a:b8:b2:fc:ba:4d: 5f:5a:40:6f:37:52:af:e2:cb:f5:10:e6:e1:3f:6a: 1d:7d:4f:58:30:6f:e5:07:01:c7:4b:ee:38:8f:e2: 15:fb:be:8c:17:c8:df:97:8b:05:c3:82:05:88:d8: 91:22:37:24:e8:fc:a6:0a:f8:99:79:ab:8d:8c:81: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:2D:5D:E3:93:95:BA:A6:A2:E4:DE:7C:6D:08:71:C6:48:EB:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bd3366c-489c-4afe-af18-d26b5824bd0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9040::/48 Signature Algorithm: sha256WithRSAEncryption 9e:37:7c:ed:f7:5d:31:d1:7b:81:8c:5b:21:02:5e:1c:a0:9d: f6:61:7a:91:5a:9d:3d:3e:71:60:8f:5e:f4:e9:4d:17:2c:3b: e1:a9:41:e9:05:b9:96:f0:97:a9:d8:88:39:5a:df:dd:e2:88: f3:f4:85:ec:8f:1f:d5:81:a0:57:42:8f:33:28:5d:1a:4b:bf: de:45:03:9b:70:06:2b:2d:21:77:f9:2b:0d:21:08:29:b3:44: a2:87:5c:4e:1a:1a:c8:ad:58:14:2a:48:41:0d:ad:96:ab:bf: a1:1b:33:09:91:76:6a:17:f7:bc:e7:10:bc:97:84:bb:c2:4b: ab:ad:9a:ce:42:3c:17:4f:83:c9:a6:7a:a7:2c:99:6d:4c:e1: 85:34:61:f2:be:2e:ea:72:d1:4d:42:3b:53:45:1c:8a:90:57: d3:1f:ec:5a:f4:e2:59:0c:5e:32:a1:74:16:be:b8:f6:95:2f: b6:95:e3:b0:f1:de:63:41:9c:5d:42:48:c0:eb:e6:db:7f:9d: 79:df:7b:5e:59:fb:f6:db:f4:4e:f8:30:85:63:f4:56:ea:af: 5e:c6:d7:2b:f5:f5:b2:5a:d7:bd:58:02:c7:4a:be:38:8f:cb: 58:90:d3:32:fa:dd:06:9e:7c:b1:5e:64:f3:d8:1d:76:87:e6: 07:c8:38:f2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEPCtWsuxMzpZXyBkvG5+lmLisMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNDAxMloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAZWExNTA2YTc3ZjE5Zjg2ODY0YWFj OTk1ZjVlZTYzMjU1ZDY0MTk5Njg1NDliY2E4MThiY2UwYmUzMGFkNjlkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbG616OJ7U2ZUa9/4Of5htrKPGW7 vjy+XQmcHPhNNecviQA87EPUFF+UpSl18JaZZtnub2IU4rIbLXuP0SGMnpugzRDC ax3HZVJDoQmR4p8sVRWeFzKP1atWGspqpKXBnsABa0yr0axk2L2ctevwBiCphgdy BIpUasisCn6/UBsbpIV3Dof1+DhUpiMm31XMDH4zzsAW9RpD+OYANxn3Tyd7KArP TiyNGXLPkL2KcjQGE3eKf1sfrGqynJg6uLL8uk1fWkBvN1Kv4sv1EObhP2odfU9Y MG/lBwHHS+44j+IV+76MF8jfl4sFw4IFiNiRIjck6PymCviZeauNjIGPdwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCsGLV3jk5W6pqLk3nxtCHHGSOvDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiZDMzNjZjLTQ4OWMtNGFmZS1hZjE4LWQyNmI1ODI0YmQwZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8pBAMA0GCSqGSIb3DQEBCwUAA4IBAQCeN3zt910x0XuBjFsh Al4coJ32YXqRWp09PnFgj1706U0XLDvhqUHpBbmW8Jep2Ig5Wt/d4ojz9IXsjx/V gaBXQo8zKF0aS7/eRQObcAYrLSF3+SsNIQgps0Sih1xOGhrIrVgUKkhBDa2Wq7+h GzMJkXZqF/e85xC8l4S7wkurrZrOQjwXT4PJpnqnLJltTOGFNGHyvi7qctFNQjtT RRyKkFfTH+xa9OJZDF4yoXQWvrj2lS+2leOw8d5jQZxdQkjA6+bbf51533teWfv2 2/RO+DCFY/RW6q9extcr9fWyWte9WALHSr44j8tYkNMy+t0GnnyxXmTz2B12h+YH yDjy -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:57 2025 by rpki-client