This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa File: 8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa (raw, json) Hash identifier: O84KtW2B3IacMzL3DwxVu1LJCVpf0lf41IsmfeGEDno= Subject key identifier: DD:E3:07:F7:A6:9C:E6:08:3F:D4:A3:57:B5:04:3B:A3:40:45:B9:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0874B10682D8CFEA4E27834C2C13DCF5E42D8BB9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa Signing time: Fri 07 Nov 2025 00:00:47 +0000 ROA not before: Fri 07 Nov 2025 00:00:47 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:74:b1:06:82:d8:cf:ea:4e:27:83:4c:2c:13:dc:f5:e4:2d:8b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:47 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=d25e4aa01c7c9f819ae90e2582dca6692f540bf98882ab9f8c2bf67a4e32bfd2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:cc:18:35:26:9d:52:1f:33:d4:e9:81:05: e6:66:85:4a:f9:38:14:24:40:5d:56:4f:c6:16:79: 59:95:ca:44:fe:be:df:96:29:8a:ad:3d:80:37:da: 6c:8b:42:83:45:04:a4:02:b6:bf:a1:1a:b8:06:e1: c3:6e:27:a2:e6:eb:1b:08:2a:c4:7d:59:fb:22:ec: 5b:48:48:a9:37:aa:80:4e:32:ca:5f:34:23:e0:bf: 49:b2:87:29:f7:cc:c2:1e:e8:46:72:33:62:3e:06: ec:bc:51:d3:82:fb:17:ca:43:87:58:a8:e4:28:29: c2:0d:69:9a:0f:7c:d3:21:33:ee:e3:a6:b9:a4:9f: 2b:9c:51:4d:59:cb:00:8c:d2:d6:d8:ee:c8:7f:2c: 63:29:96:18:1e:7c:d2:39:8f:a0:52:95:69:7e:b7: e3:8c:c6:e4:dd:c7:27:0d:e1:c2:98:e6:36:1a:24: 91:2d:dc:06:8e:ed:17:ab:1c:8a:de:7c:b1:ba:f9: 57:e4:b9:4c:79:b5:a2:0f:a8:8f:9b:5c:c2:6b:88: 03:5e:ce:11:88:4d:61:b0:98:01:e8:88:03:8d:01: 44:f2:8b:92:64:86:64:76:d2:f3:b3:c1:71:c7:e5: ee:64:ea:32:5c:3b:46:22:55:3b:f3:c5:1f:40:6b: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E3:07:F7:A6:9C:E6:08:3F:D4:A3:57:B5:04:3B:A3:40:45:B9:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8800::/40 Signature Algorithm: sha256WithRSAEncryption 62:8b:48:37:37:46:f9:12:2b:1d:9b:5c:83:1f:a5:19:ec:15: 95:42:38:d7:aa:0e:f5:fd:e0:9b:36:06:e9:a7:1e:57:c6:e4: 2c:16:b2:c0:0c:11:29:01:ba:2f:fc:55:cb:ee:81:b3:b2:aa: 8d:e2:00:30:f6:f1:3c:1d:d6:ef:bf:24:f7:6b:be:37:fd:34: 3e:d3:98:68:8a:43:28:59:39:75:66:37:0c:4b:2e:c6:99:ff: 0e:e5:37:fd:5c:22:e8:4b:0c:c2:78:74:08:50:3c:ef:bd:b8: 19:8d:38:3a:65:f2:77:f9:77:d2:43:67:e8:0c:93:0a:9f:75: f1:bf:70:ce:d9:f6:b9:93:03:92:36:03:d5:6b:88:55:90:a3: 84:06:fe:3f:57:e4:50:43:8e:e5:89:77:f0:fb:fb:80:14:1b: 62:76:34:0f:85:34:f7:c7:d1:e8:3d:3f:41:b6:76:8a:e8:02: 51:f2:0b:61:3f:b4:9e:70:ef:b0:fe:d8:34:aa:8a:26:79:0a: f6:0e:8a:c7:8c:ea:5e:af:51:43:9e:15:a0:f3:ba:4f:74:a5: 12:c7:3b:09:03:35:bc:7e:c4:b6:5c:7f:ca:a1:ce:e3:e9:d4: c6:e5:65:1c:fa:cf:b2:01:60:9f:86:e2:17:21:d9:ac:6b:0a: 0b:2d:49:cb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCHSxBoLYz+pOJ4NMLBPc9eQti7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDA0N1oX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAZDI1ZTRhYTAxYzdjOWY4MTlhZTkw ZTI1ODJkY2E2NjkyZjU0MGJmOTg4ODJhYjlmOGMyYmY2N2E0ZTMyYmZkMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW/MGDUmnVIfM9TpgQXmZoVK+TgU JEBdVk/GFnlZlcpE/r7flimKrT2AN9psi0KDRQSkAra/oRq4BuHDbiei5usbCCrE fVn7IuxbSEipN6qATjLKXzQj4L9Jsocp98zCHuhGcjNiPgbsvFHTgvsXykOHWKjk KCnCDWmaD3zTITPu46a5pJ8rnFFNWcsAjNLW2O7IfyxjKZYYHnzSOY+gUpVpfrfj jMbk3ccnDeHCmOY2GiSRLdwGju0XqxyK3nyxuvlX5LlMebWiD6iPm1zCa4gDXs4R iE1hsJgB6IgDjQFE8ouSZIZkdtLzs8Fxx+XuZOoyXDtGIlU788UfQGvIhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN3jB/emnOYIP9SjV7UEO6NARbmGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmZDNmMzlmLTQyYTYtNDBmZi04ZWZkLTc3OGJjODIzZjNkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ogwDQYJKoZIhvcNAQELBQADggEBAGKLSDc3RvkSKx2bXIMf pRnsFZVCONeqDvX94Js2BumnHlfG5CwWssAMESkBui/8VcvugbOyqo3iADD28Twd 1u+/JPdrvjf9ND7TmGiKQyhZOXVmNwxLLsaZ/w7lN/1cIuhLDMJ4dAhQPO+9uBmN ODpl8nf5d9JDZ+gMkwqfdfG/cM7Z9rmTA5I2A9VriFWQo4QG/j9X5FBDjuWJd/D7 +4AUG2J2NA+FNPfH0eg9P0G2doroAlHyC2E/tJ5w77D+2DSqiiZ5CvYOiseM6l6v UUOeFaDzuk90pRLHOwkDNbx+xLZcf8qhzuPp1MblZRz6z7IBYJ+G4hch2axrCgst Scs= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:57 2025 by rpki-client