This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa File: 9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa (raw, json) Hash identifier: /RXb/cM8BsY5r2sR1xhnn167CAagjbOtrui6Q+6O9I4= Subject key identifier: 03:89:2E:C2:E4:C0:EF:DC:58:5A:5A:C4:6F:D9:22:2B:AA:4F:DD:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1851EBA82D060211F85C84286157561FDE832475 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa Signing time: Sat 08 Nov 2025 00:20:11 +0000 ROA not before: Sat 08 Nov 2025 00:20:11 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:51:eb:a8:2d:06:02:11:f8:5c:84:28:61:57:56:1f:de:83:24:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:20:11 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=32ba56f7af37d1a15e859e4890c45c888142fc4cc12a222661969a89edc09fdc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:c5:89:ba:5b:62:3b:89:26:65:cf:3a:f1: ae:48:31:e4:6f:67:d4:ad:a9:39:8f:e1:db:ce:50: 18:05:c7:6f:15:0a:2f:c1:14:61:b4:eb:b4:90:58: 94:a3:85:0b:be:8d:00:40:68:b2:f8:b5:2d:fb:3e: 1a:cf:27:72:12:66:5b:06:1e:78:54:c0:8a:d4:7f: 77:c1:dd:81:b3:dc:31:92:4b:33:4f:75:32:a4:4d: 13:6a:5a:a8:68:9a:a1:33:12:16:6d:89:f9:af:b6: 91:23:06:3c:00:ec:65:ce:a1:33:02:95:a3:da:d8: 9c:30:7e:5c:f9:93:7b:b9:d1:07:b1:b3:2b:18:64: 80:d2:cd:8c:19:65:fd:95:ae:e1:c3:2b:48:66:42: 6b:06:6e:6c:d9:ff:4e:82:4f:51:d7:0e:e6:72:76: 4c:28:1c:6f:8f:fa:74:12:c4:3d:d9:40:a2:04:49: 68:21:c8:ac:a8:cc:3c:3b:d7:ec:fc:49:59:ad:ed: b7:01:29:ab:04:ab:58:10:e9:3e:99:01:e1:30:84: b8:2b:70:41:2a:60:69:3f:be:d0:1f:46:8f:56:92: 3b:fc:5e:68:8a:0c:1c:96:38:8c:40:31:56:e4:22: d1:4f:5e:4d:f0:1c:ba:08:b4:63:bb:23:f8:78:fe: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:89:2E:C2:E4:C0:EF:DC:58:5A:5A:C4:6F:D9:22:2B:AA:4F:DD:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:70c0::/48 Signature Algorithm: sha256WithRSAEncryption b0:31:41:97:f4:9b:e8:88:5f:6c:75:a4:69:ef:d9:c2:94:88: a2:e5:f0:3e:d1:7b:2c:70:8f:ed:4a:dc:55:6f:07:98:97:62: b3:b2:21:a4:d5:90:d0:41:27:65:f6:34:e6:96:5d:31:b4:17: df:f5:67:28:00:79:13:22:42:63:58:b3:8e:84:bb:c1:22:b0: 6d:10:82:ba:8c:28:78:46:3a:50:53:a2:af:5e:ea:4d:f6:d2: 48:e4:e1:5c:1d:ff:50:16:56:9d:95:39:ec:bc:cb:05:db:ee: 0a:2a:e6:d4:49:69:a6:41:2b:dc:2c:4b:02:a0:00:d8:8a:6a: 85:7a:15:9b:24:f8:07:0e:ea:8d:36:42:c8:30:ed:87:be:5b: 61:ee:d2:06:c6:be:37:c3:86:a7:20:54:e3:f3:e9:c9:e7:7a: bb:ce:a3:f7:f0:a8:b0:dd:77:f8:ed:31:0f:35:76:5d:f1:f7: 81:8d:e0:aa:ca:21:4a:ae:fe:91:6a:9d:5e:7b:b3:40:d1:02: 0c:8f:92:9a:8d:84:fe:43:75:70:7c:45:e1:65:b5:be:ac:35: c6:d0:e6:7d:6b:92:0b:09:0a:b1:17:88:38:1d:12:cd:ed:85: a1:1c:86:b5:99:97:fb:84:7e:0e:4e:8b:2d:25:f1:2a:65:cf: 86:47:20:70 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGFHrqC0GAhH4XIQoYVdWH96DJHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMjAxMVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAMzJiYTU2ZjdhZjM3ZDFhMTVlODU5 ZTQ4OTBjNDVjODg4MTQyZmM0Y2MxMmEyMjI2NjE5NjlhODllZGMwOWZkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS7FibpbYjuJJmXPOvGuSDHkb2fU rak5j+HbzlAYBcdvFQovwRRhtOu0kFiUo4ULvo0AQGiy+LUt+z4azydyEmZbBh54 VMCK1H93wd2Bs9wxkkszT3UypE0TalqoaJqhMxIWbYn5r7aRIwY8AOxlzqEzApWj 2ticMH5c+ZN7udEHsbMrGGSA0s2MGWX9la7hwytIZkJrBm5s2f9Ogk9R1w7mcnZM KBxvj/p0EsQ92UCiBEloIcisqMw8O9fs/ElZre23ASmrBKtYEOk+mQHhMIS4K3BB KmBpP77QH0aPVpI7/F5oigwcljiMQDFW5CLRT15N8By6CLRjuyP4eP6eCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAOJLsLkwO/cWFpaxG/ZIiuqT93/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMWFiYzJlLWQzMDUtNDIxNi04MWQ4LTNkMGY3OTJkNzljNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAHDAMA0GCSqGSIb3DQEBCwUAA4IBAQCwMUGX9JvoiF9sdaRp 79nClIii5fA+0XsscI/tStxVbweYl2KzsiGk1ZDQQSdl9jTmll0xtBff9WcoAHkT IkJjWLOOhLvBIrBtEIK6jCh4RjpQU6KvXupN9tJI5OFcHf9QFladlTnsvMsF2+4K KubUSWmmQSvcLEsCoADYimqFehWbJPgHDuqNNkLIMO2Hvlth7tIGxr43w4anIFTj 8+nJ53q7zqP38Kiw3Xf47TEPNXZd8feBjeCqyiFKrv6Rap1ee7NA0QIMj5KajYT+ Q3VwfEXhZbW+rDXG0OZ9a5ILCQqxF4g4HRLN7YWhHIa1mZf7hH4OTostJfEqZc+G RyBw -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:52 2025 by rpki-client