This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa File: d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa (raw, json) Hash identifier: +XvrcPHDP7S69U1OCcsnBQnLzbyOuvyeUko7zfREp1s= Subject key identifier: 82:34:9D:E2:23:4A:1D:3B:8E:73:63:9C:17:85:AE:9E:F1:58:2F:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0F36A1CFDD34D93D9B81E33CEFF95E20A8C0505A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa Signing time: Fri 07 Nov 2025 00:41:06 +0000 ROA not before: Fri 07 Nov 2025 00:41:06 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:36:a1:cf:dd:34:d9:3d:9b:81:e3:3c:ef:f9:5e:20:a8:c0:50:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:41:06 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=9ba4c138c043077794638de835987df1e94c2e0ba15686bf7b7c89f32f21840a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:21:f7:44:65:b9:24:48:ad:04:e0:a9:59: ea:33:0e:48:48:f3:45:cc:ba:b9:36:56:32:f0:73: c4:cb:38:35:8b:2a:9e:fc:fe:eb:85:54:c5:c8:86: 61:d2:ee:2b:7d:13:f1:8c:7e:d2:0a:55:3a:f1:93: ac:35:ac:39:94:54:f7:88:d9:2b:e6:f5:a0:da:0e: 98:88:ea:cd:3e:aa:6c:79:34:bc:ee:07:f2:0f:83: 11:16:21:d2:e4:c6:c3:1a:14:85:e0:30:e6:c5:17: 4e:62:fa:cf:50:46:1a:bf:4f:00:cd:cb:66:fe:40: 07:f4:d6:35:20:bc:ae:ff:23:6a:c0:07:9b:95:27: 0b:28:67:2f:bb:3a:65:79:fe:33:01:45:99:71:10: 8c:38:84:53:18:c7:cd:c1:f1:41:3b:c7:de:33:d5: e1:69:b2:10:d3:4f:2a:46:64:62:64:fb:16:81:60: 8f:32:7b:b7:d3:35:7b:63:3b:e9:16:70:9d:56:48: 36:9b:2f:37:d3:50:2e:ed:90:28:f6:e2:d3:ac:21: 4b:58:29:11:1d:50:9d:2a:50:9c:df:83:8a:cf:5f: 5a:b8:b1:6e:55:9c:ec:39:db:00:66:60:85:2d:a5: a0:a2:82:b1:0a:78:38:66:e7:99:0e:5a:bc:90:4d: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:34:9D:E2:23:4A:1D:3B:8E:73:63:9C:17:85:AE:9E:F1:58:2F:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8880::/48 Signature Algorithm: sha256WithRSAEncryption 9c:5d:56:cd:59:04:8b:f9:a3:d3:b8:4a:f5:8b:99:0e:17:4a: ac:6f:c3:fc:24:a6:3f:3c:b7:c2:6a:a6:bd:23:76:5d:47:48: 89:71:b8:26:32:0f:59:0e:f4:76:21:18:b5:44:f2:c4:76:c3: 26:51:1e:43:e6:3b:bc:db:2f:11:31:ba:a6:de:50:50:92:bf: 65:81:00:b9:50:72:b6:de:c1:ba:9b:57:a4:b6:dc:46:f4:ae: 73:01:59:df:d5:60:23:a8:74:a3:89:db:f7:89:f4:13:52:32: 10:d4:62:cf:fa:6a:82:9b:0e:88:97:ea:e8:4e:30:e6:a9:2e: 47:3d:f6:40:4f:01:3b:82:77:ea:cb:72:9b:59:39:a7:4b:01: 8b:03:09:e4:ed:8e:87:fb:7f:1c:d4:6d:ea:b7:55:dc:af:16: f4:5e:0b:15:18:c8:63:d8:5c:ce:b5:56:5c:6b:51:70:4e:a0: da:4a:f9:42:49:12:8e:33:ec:aa:08:fa:ad:bb:66:5c:2e:7d: 04:fd:4e:18:df:ef:ac:3a:14:4b:11:6b:55:29:00:f5:3b:a2: 99:98:a9:f0:69:ca:e9:07:b9:d8:e0:fe:24:35:61:22:76:a6: 43:46:f4:1b:b3:a6:91:8b:8c:35:34:68:26:7c:e6:0a:2e:93: 75:77:ec:65 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDzahz9002T2bgeM87/leIKjAUFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwNDEwNloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNAOWJhNGMxMzhjMDQzMDc3Nzk0NjM4 ZGU4MzU5ODdkZjFlOTRjMmUwYmExNTY4NmJmN2I3Yzg5ZjMyZjIxODQwYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv74h90RluSRIrQTgqVnqMw5ISPNF zLq5NlYy8HPEyzg1iyqe/P7rhVTFyIZh0u4rfRPxjH7SClU68ZOsNaw5lFT3iNkr 5vWg2g6YiOrNPqpseTS87gfyD4MRFiHS5MbDGhSF4DDmxRdOYvrPUEYav08Azctm /kAH9NY1ILyu/yNqwAeblScLKGcvuzplef4zAUWZcRCMOIRTGMfNwfFBO8feM9Xh abIQ008qRmRiZPsWgWCPMnu30zV7YzvpFnCdVkg2my8301Au7ZAo9uLTrCFLWCkR HVCdKlCc34OKz19auLFuVZzsOdsAZmCFLaWgooKxCng4ZueZDlq8kE1ogQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFII0neIjSh07jnNjnBeFrp7xWC+jMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1MWY2YTg2LWQzZTMtNDQ2Yy1hNTM4LTQ2ZjJhN2U3NzI0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYiAMA0GCSqGSIb3DQEBCwUAA4IBAQCcXVbNWQSL+aPTuEr1 i5kOF0qsb8P8JKY/PLfCaqa9I3ZdR0iJcbgmMg9ZDvR2IRi1RPLEdsMmUR5D5ju8 2y8RMbqm3lBQkr9lgQC5UHK23sG6m1ekttxG9K5zAVnf1WAjqHSjidv3ifQTUjIQ 1GLP+mqCmw6Il+roTjDmqS5HPfZATwE7gnfqy3KbWTmnSwGLAwnk7Y6H+38c1G3q t1Xcrxb0XgsVGMhj2FzOtVZca1FwTqDaSvlCSRKOM+yqCPqtu2ZcLn0E/U4Y3++s OhRLEWtVKQD1O6KZmKnwacrpB7nY4P4kNWEidqZDRvQbs6aRi4w1NGgmfOYKLpN1 d+xl -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:52 2025 by rpki-client