This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa File: 92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json) Hash identifier: 0O22kC1SfNuwrY6ZfzOckNkEEPLRQPdw3P+TWkj7nEk= Subject key identifier: DD:48:24:04:3E:9C:6B:AF:CB:5F:2B:08:84:E7:1E:9C:E7:48:A1:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A91F10FF12E31292DE5C84252E386A70793A047 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa Signing time: Sun 09 Nov 2025 01:00:46 +0000 ROA not before: Sun 09 Nov 2025 01:00:46 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:91:f1:0f:f1:2e:31:29:2d:e5:c8:42:52:e3:86:a7:07:93:a0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 01:00:46 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=200520f0b164446dd9cd3093f5a470a9bf54e6f981bf5ed5de2d96cdfd737122, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:ab:08:25:ca:b9:fc:89:86:ba:ef:0a:a5: ae:a6:8f:76:e4:c2:13:a0:12:14:0b:c9:d8:c9:2d: 0e:c4:83:bd:67:4b:2b:d7:b5:45:92:5e:8d:3d:e5: 96:4d:3f:35:f3:21:c8:68:a9:7e:16:9a:47:1c:20: e3:ee:2d:27:dc:d0:05:7a:ab:10:59:64:60:ae:97: ce:a3:54:29:aa:63:e9:df:c8:78:ee:93:fd:32:f8: 45:b0:14:d4:22:b0:46:33:87:ef:d7:99:1d:a9:97: fb:9e:1f:93:e9:9e:b7:85:12:07:ae:e3:d1:ef:15: a6:1e:b7:33:39:78:eb:ac:d7:d5:1b:90:5c:62:cc: e0:eb:03:c9:c0:6f:ba:8a:8a:ca:b1:6b:84:e4:7a: d6:32:98:ae:49:b3:b3:1c:8b:c6:9c:b3:61:d0:1f: b0:93:27:8f:69:52:7a:45:12:60:36:4b:02:c1:3b: b7:07:6e:d8:eb:bc:1d:d6:a0:9f:ae:fd:3c:6b:a5: 29:56:ce:50:e3:d8:1b:26:4d:60:88:75:55:4c:35: 1c:b5:13:1f:12:57:03:59:53:19:5a:bc:02:30:be: 5b:06:39:15:cf:93:62:9c:44:a5:55:08:c8:a0:e7: 90:38:6b:72:54:6e:48:94:c2:ee:2d:8d:65:2e:02: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:48:24:04:3E:9C:6B:AF:CB:5F:2B:08:84:E7:1E:9C:E7:48:A1:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:400::/38 Signature Algorithm: sha256WithRSAEncryption 9d:96:8e:7f:a6:8e:1f:74:06:11:8c:26:df:48:0d:03:ce:20: c7:08:25:75:ac:2f:4b:ac:6a:15:85:84:ed:75:2f:b3:eb:0c: 55:ca:e1:24:0a:e7:d3:9e:15:01:b4:e2:8c:4a:37:8e:34:7d: 83:e9:08:b3:cf:5d:c5:78:05:5d:91:c0:87:18:78:5b:b1:7a: 10:9b:d0:77:0d:1e:ce:e2:39:22:fe:8e:65:4d:91:1a:f7:2c: 38:71:ea:11:d0:93:22:8e:d6:5d:a3:ab:90:c0:2d:15:c1:f6: 8a:6d:91:fb:6a:e7:d2:46:0c:85:05:0e:dc:ff:43:eb:ed:13: fb:c2:d5:ba:af:9f:c8:bc:4a:e7:1f:e0:e1:f7:ed:b9:3b:a6: ed:04:46:2f:6c:bc:af:01:bb:72:b9:ce:22:44:a5:2b:e1:53: 84:36:d0:73:35:dc:ab:19:d9:9f:f8:cf:7b:b6:09:00:82:c4: 42:e7:59:bd:01:a5:33:94:4a:2f:16:fe:7a:9e:c1:5b:77:02: f0:01:2e:a4:d0:1d:55:8f:7f:04:38:e9:09:1a:7e:3e:40:10: 49:e3:ae:a9:6e:48:9c:47:32:29:f3:1b:8e:3a:2f:0b:2c:d2: d4:b3:ff:9c:ef:00:bb:41:a5:1b:4a:28:17:67:96:28:ba:02: 83:71:ff:40 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUepHxD/EuMSkt5chCUuOGpweToEcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAxMDA0NloX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMjAwNTIwZjBiMTY0NDQ2ZGQ5Y2Qz MDkzZjVhNDcwYTliZjU0ZTZmOTgxYmY1ZWQ1ZGUyZDk2Y2RmZDczNzEyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUmrCCXKufyJhrrvCqWupo925MIT oBIUC8nYyS0OxIO9Z0sr17VFkl6NPeWWTT818yHIaKl+FppHHCDj7i0n3NAFeqsQ WWRgrpfOo1QpqmPp38h47pP9MvhFsBTUIrBGM4fv15kdqZf7nh+T6Z63hRIHruPR 7xWmHrczOXjrrNfVG5BcYszg6wPJwG+6iorKsWuE5HrWMpiuSbOzHIvGnLNh0B+w kyePaVJ6RRJgNksCwTu3B27Y67wd1qCfrv08a6UpVs5Q49gbJk1giHVVTDUctRMf ElcDWVMZWrwCML5bBjkVz5NinESlVQjIoOeQOGtyVG5IlMLuLY1lLgKzWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN1IJAQ+nGuvy18rCITnHpznSKFlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyNDg4YzM5LWU5MmQtNGMyMC05NzI4LTc5NTZlODNlY2Y0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQQwDQYJKoZIhvcNAQELBQADggEBAJ2Wjn+mjh90BhGMJt9I DQPOIMcIJXWsL0usahWFhO11L7PrDFXK4SQK59OeFQG04oxKN440fYPpCLPPXcV4 BV2RwIcYeFuxehCb0HcNHs7iOSL+jmVNkRr3LDhx6hHQkyKO1l2jq5DALRXB9opt kftq59JGDIUFDtz/Q+vtE/vC1bqvn8i8Sucf4OH37bk7pu0ERi9svK8Bu3K5ziJE pSvhU4Q20HM13KsZ2Z/4z3u2CQCCxELnWb0BpTOUSi8W/nqewVt3AvABLqTQHVWP fwQ46Qkafj5AEEnjrqluSJxHMinzG446Lwss0tSz/5zvALtBpRtKKBdnlii6AoNx /0A= -----END CERTIFICATE-----Generated at Tue Nov 18 13:11:00 2025 by rpki-client