This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa File: c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa (raw, json) Hash identifier: +gwV7WERHxuebV6Din1i6C6nNBsItzX0Qk9LOjYL8jM= Subject key identifier: F0:07:10:B4:CC:7B:82:16:D3:4A:AE:71:DB:1A:B9:18:9E:6C:3C:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 374205FA839161BC37C14A0FD9FDA33A0CB6D409 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa Signing time: Fri 07 Nov 2025 00:50:11 +0000 ROA not before: Fri 07 Nov 2025 00:50:11 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:42:05:fa:83:91:61:bc:37:c1:4a:0f:d9:fd:a3:3a:0c:b6:d4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:50:11 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=5c57b98f9abebe2014a6640366eb148cb00ef861a1574dde9910258d42a4d5cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a4:72:1b:c6:da:a8:e6:df:a9:7c:a9:67:10: 63:13:39:74:fd:09:59:4a:24:dc:61:f5:14:0f:78: a2:34:1e:ed:e4:06:98:d5:f8:88:9e:69:17:5d:88: 8d:68:be:da:f2:87:04:3b:0e:f8:7d:a1:86:f4:6e: fa:03:2c:34:39:2f:33:96:58:a5:f1:a0:64:ce:60: b7:37:5d:02:49:c8:63:7e:06:15:1b:29:87:f2:61: b9:03:73:25:b1:8a:68:89:fa:2f:0d:27:c1:a6:57: 4e:e3:30:b5:49:85:e8:f0:8c:66:b0:f4:b9:cc:34: d2:24:aa:d9:57:12:42:ad:cf:57:2a:87:9a:05:bf: 45:91:d6:e1:4b:e5:c0:29:7c:7c:9e:36:c3:d1:88: 54:ff:17:fa:0d:6f:23:58:8a:f3:ee:09:41:f6:39: 85:e9:4b:93:2f:2c:88:d5:25:9c:2f:a3:5d:85:b6: ae:eb:fd:38:93:03:4e:ea:64:29:c2:a9:6d:9e:32: b5:4b:fc:ec:28:3f:be:bd:cf:54:e6:37:b6:e7:11: 38:2d:44:70:4b:82:e7:f9:d8:7a:15:5e:c5:69:97: 56:2c:9c:ff:ad:da:b8:e7:7c:eb:cb:41:4c:c2:db: bb:15:07:57:7c:33:00:8b:19:09:93:90:d2:e4:df: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:07:10:B4:CC:7B:82:16:D3:4A:AE:71:DB:1A:B9:18:9E:6C:3C:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:800::/40 Signature Algorithm: sha256WithRSAEncryption ad:1c:f3:a2:72:5b:6d:93:eb:0e:c3:57:7b:d0:0a:1c:ff:d5: 4a:9b:e5:99:d2:80:22:c6:eb:ca:53:36:96:cd:81:8c:ab:19: db:f5:4d:6c:c4:19:e6:df:7c:6b:57:6a:e2:33:24:1a:3d:c4: 6d:50:58:ec:e7:4e:f0:b8:9e:e7:a5:8a:71:05:cb:3e:3a:e5: 91:78:dd:ae:b4:40:f2:96:5d:c9:ae:ad:e2:66:58:31:cd:df: fb:68:d0:1d:bc:7b:6f:30:46:a9:a0:b5:5e:d5:63:92:40:ad: 3c:3c:45:1c:f5:d9:69:d9:a1:82:88:8a:80:db:05:8d:f8:da: 8c:35:9a:36:c0:95:8d:58:e5:00:8e:31:93:db:cd:ea:36:23: 6d:83:41:97:8d:d3:e6:07:63:3e:8d:46:7a:97:e4:2f:62:84: 91:a5:e7:4b:8d:85:e7:b0:03:c5:a9:4f:c7:03:8b:ae:69:d3: 39:60:83:be:86:be:d6:9a:c3:80:e9:bb:8c:a9:3a:b4:65:b6: f4:cf:fa:4c:4a:f3:de:56:93:84:85:80:4f:1e:7a:41:ad:17: ec:6b:23:6e:dd:13:c8:7a:b3:c9:d7:78:c9:43:1a:c8:53:84: 96:e3:03:2c:5a:59:6e:63:55:94:6e:66:5f:f6:76:98:d4:33: 5d:eb:77:87 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN0IF+oORYbw3wUoP2f2jOgy21AkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNTAxMVoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANWM1N2I5OGY5YWJlYmUyMDE0YTY2 NDAzNjZlYjE0OGNiMDBlZjg2MWExNTc0ZGRlOTkxMDI1OGQ0MmE0ZDVjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKRyG8baqObfqXypZxBjEzl0/QlZ SiTcYfUUD3iiNB7t5AaY1fiInmkXXYiNaL7a8ocEOw74faGG9G76Ayw0OS8zllil 8aBkzmC3N10CSchjfgYVGymH8mG5A3MlsYpoifovDSfBpldO4zC1SYXo8IxmsPS5 zDTSJKrZVxJCrc9XKoeaBb9FkdbhS+XAKXx8njbD0YhU/xf6DW8jWIrz7glB9jmF 6UuTLyyI1SWcL6Ndhbau6/04kwNO6mQpwqltnjK1S/zsKD++vc9U5je25xE4LURw S4Ln+dh6FV7FaZdWLJz/rdq453zry0FMwtu7FQdXfDMAixkJk5DS5N9tdQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPAHELTMe4IW00qucdsauRiebDwPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwZDQ0MzhjLTQ4ZDMtNGU3OS04YTY0LWQxNWE0NTIxZWI3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ggwDQYJKoZIhvcNAQELBQADggEBAK0c86JyW22T6w7DV3vQ Chz/1Uqb5ZnSgCLG68pTNpbNgYyrGdv1TWzEGebffGtXauIzJBo9xG1QWOznTvC4 nuelinEFyz465ZF43a60QPKWXcmureJmWDHN3/to0B28e28wRqmgtV7VY5JArTw8 RRz12WnZoYKIioDbBY342ow1mjbAlY1Y5QCOMZPbzeo2I22DQZeN0+YHYz6NRnqX 5C9ihJGl50uNheewA8WpT8cDi65p0zlgg76Gvtaaw4Dpu4ypOrRltvTP+kxK895W k4SFgE8eekGtF+xrI27dE8h6s8nXeMlDGshThJbjAyxaWW5jVZRuZl/2dpjUM13r d4c= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:55 2025 by rpki-client