This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa File: c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa (raw, json) Hash identifier: yCOBCnI+2U/IGt74VftRoFzMegkQynkN8QTKa+s5irg= Subject key identifier: 34:C7:E8:BB:8E:27:BC:4A:C0:3B:32:70:F0:2F:23:F5:50:5C:E2:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 399800222B8702AEC4A6178C544C91085291296C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa Signing time: Fri 07 Nov 2025 00:50:08 +0000 ROA not before: Fri 07 Nov 2025 00:50:08 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:98:00:22:2b:87:02:ae:c4:a6:17:8c:54:4c:91:08:52:91:29:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:50:08 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=9220d6fb76008b90d9a69f7d72cf437b7cd0b242eba0c711e52908a83772ef6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:1a:10:c0:9a:2c:45:50:15:28:ea:6a:79: 1d:f4:d9:16:88:bd:bc:ae:ae:23:26:e2:d6:63:9d: 01:99:7a:74:df:b9:26:56:ea:83:70:20:e3:d4:d0: e4:fa:81:17:4d:a8:ee:2f:be:6a:b6:4e:01:97:99: 13:48:df:d3:b6:3f:8d:e3:58:34:38:f5:aa:d1:bc: ff:54:1f:7f:66:31:b5:52:e2:57:da:6e:b6:ce:fa: 0d:c9:fb:23:5d:20:88:a1:ca:fc:ba:38:ba:60:2e: 43:2c:14:6e:02:46:07:c1:ca:ad:92:d0:7f:e6:18: 47:81:0f:4a:db:6b:6b:78:bc:f4:f2:cc:70:0f:5b: b9:5e:6b:4c:32:cb:34:80:d8:3e:8f:d9:b6:76:fa: 4b:b2:62:68:23:3f:7b:d9:a7:5b:a7:04:2e:98:f5: 98:32:64:52:35:6a:a3:6a:82:2e:44:fa:ba:1e:0f: 6d:80:07:79:85:ac:bf:ec:6e:eb:73:a4:10:50:09: 21:cb:aa:7e:8e:75:e7:b4:2f:28:4b:e0:24:9a:77: 6f:6f:a3:1d:71:93:8d:dc:86:1c:1e:a3:1b:23:ad: e3:f0:76:08:54:b4:58:af:a7:a0:05:3a:57:8a:d0: 0a:bd:12:ce:71:a8:62:a9:58:50:12:66:28:10:0d: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C7:E8:BB:8E:27:BC:4A:C0:3B:32:70:F0:2F:23:F5:50:5C:E2:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c936087d-df40-4ca4-a8f2-4bf8f6aceb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9080::/48 Signature Algorithm: sha256WithRSAEncryption be:88:b8:50:3e:86:ba:6d:f7:de:5a:72:0a:17:d1:a6:58:7c: b0:3a:ff:4b:24:66:9a:99:a4:d9:ef:41:a2:31:70:e3:93:e6: e1:f4:ae:3d:75:05:42:d4:1b:07:69:8c:10:ef:f6:1f:97:fd: ed:21:27:98:3d:a6:b0:5b:a1:c3:fa:c5:19:91:40:0d:c8:b2: e9:87:bf:57:e3:82:0a:d6:d1:bd:cb:3d:71:37:3f:d3:ea:bc: 17:a0:84:ed:29:e3:1d:21:e0:85:b9:41:6d:44:5f:00:9a:c9: 2e:64:f2:6b:f2:a3:b6:fe:26:ef:d1:6a:a1:cf:06:54:d3:2e: 0f:0e:fc:b8:66:36:0d:76:48:b5:a6:f3:e7:f5:ef:3d:20:2d: 70:81:c9:ee:8d:d2:b1:bc:df:b8:00:34:f7:fe:1f:d1:cb:ea: e1:df:f5:cc:65:71:29:85:b6:68:7a:38:bd:ef:bd:27:68:af: a2:1b:ab:ec:c0:b4:56:52:72:69:a1:b2:e8:e6:8b:0a:74:36: 4d:ef:2d:80:5e:b2:11:3b:b4:42:02:81:50:2f:4c:fd:d5:83: 73:e1:ed:bf:e5:04:2e:d6:2b:5f:c3:9a:07:32:a4:57:b7:5c: 67:f2:6a:0d:ee:97:42:d8:db:97:56:36:40:7d:d8:b2:34:11: 5d:08:d0:bc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOZgAIiuHAq7EpheMVEyRCFKRKWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNTAwOFoX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAOTIyMGQ2ZmI3NjAwOGI5MGQ5YTY5 ZjdkNzJjZjQzN2I3Y2QwYjI0MmViYTBjNzExZTUyOTA4YTgzNzcyZWY2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf8aEMCaLEVQFSjqankd9NkWiL28 rq4jJuLWY50BmXp037kmVuqDcCDj1NDk+oEXTajuL75qtk4Bl5kTSN/Ttj+N41g0 OPWq0bz/VB9/ZjG1UuJX2m62zvoNyfsjXSCIocr8uji6YC5DLBRuAkYHwcqtktB/ 5hhHgQ9K22treLz08sxwD1u5XmtMMss0gNg+j9m2dvpLsmJoIz972adbpwQumPWY MmRSNWqjaoIuRPq6Hg9tgAd5hay/7G7rc6QQUAkhy6p+jnXntC8oS+Akmndvb6Md cZON3IYcHqMbI63j8HYIVLRYr6egBTpXitAKvRLOcahiqVhQEmYoEA0E2QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDTH6LuOJ7xKwDsycPAvI/VQXOJyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5MzYwODdkLWRmNDAtNGNhNC1hOGYyLTRiZjhmNmFjZWI2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8pCAMA0GCSqGSIb3DQEBCwUAA4IBAQC+iLhQPoa6bffeWnIK F9GmWHywOv9LJGaamaTZ70GiMXDjk+bh9K49dQVC1BsHaYwQ7/Yfl/3tISeYPaaw W6HD+sUZkUANyLLph79X44IK1tG9yz1xNz/T6rwXoITtKeMdIeCFuUFtRF8Amsku ZPJr8qO2/ibv0WqhzwZU0y4PDvy4ZjYNdki1pvPn9e89IC1wgcnujdKxvN+4ADT3 /h/Ry+rh3/XMZXEphbZoeji9770naK+iG6vswLRWUnJpobLo5osKdDZN7y2AXrIR O7RCAoFQL0z91YNz4e2/5QQu1itfw5oHMqRXt1xn8moN7pdC2NuXVjZAfdiyNBFd CNC8 -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:44 2025 by rpki-client