This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d857c82f-a402-44db-b300-f24b347c61d1.roa File: d857c82f-a402-44db-b300-f24b347c61d1.roa (raw, json) Hash identifier: SC2/WQJCfqZrFPH1Eyv0oVx4P+OR+x/2hW4orG9AJPk= Subject key identifier: D0:E1:04:5D:A7:E9:17:A5:9A:95:41:DF:2C:25:E0:E1:BB:A9:28:D4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 546D425484CA4279834D2B3D18D682123E19708B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d857c82f-a402-44db-b300-f24b347c61d1.roa Signing time: Sun 09 Nov 2025 00:30:33 +0000 ROA not before: Sun 09 Nov 2025 00:30:33 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6d:42:54:84:ca:42:79:83:4d:2b:3d:18:d6:82:12:3e:19:70:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:30:33 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=cba3a9a5af010bdce6cb95cedb6e052d9dfd07666dcb82d1f6a658f6ee733553, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:16:f8:6b:5d:49:df:b7:b9:ba:c1:9f:4c: 3a:b2:5c:2e:55:85:d6:27:86:61:0c:63:4f:c2:71: 0d:34:d2:bf:f6:cb:b5:90:49:08:83:4b:1d:98:9c: cb:75:b2:a7:f6:d1:cd:63:be:e1:2e:3a:b6:8e:4b: 5c:39:48:6e:4c:da:52:78:43:12:fc:88:5c:e9:c7: 72:61:49:77:05:11:07:05:16:5f:dc:8f:e7:35:9c: c3:12:e5:b5:8d:55:e9:d5:6b:69:3c:d4:a2:e3:60: 04:ef:13:98:03:1b:11:cc:4e:db:a8:6c:c5:f1:49: 61:67:1f:39:72:c1:ef:b0:40:a2:85:69:b3:e9:c9: 47:61:07:be:5f:68:3d:83:01:9f:1e:8a:e2:8c:cf: dc:44:0e:40:a1:7a:c7:bb:4b:ba:11:3a:06:d0:4e: 21:af:bf:e4:04:14:8e:d0:eb:68:da:53:b7:50:c1: bc:01:53:40:a4:c5:cf:34:81:f2:d4:52:7d:1e:12: 7c:36:79:cf:48:e3:99:a2:95:7f:39:66:76:90:23: 4d:12:b9:45:45:40:91:cb:07:ea:72:14:d9:ef:81: 04:5d:bf:ca:0b:a7:4c:ae:35:36:db:a3:ff:1e:b4: eb:82:b4:ca:47:7b:55:45:76:74:0a:4e:12:13:09: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E1:04:5D:A7:E9:17:A5:9A:95:41:DF:2C:25:E0:E1:BB:A9:28:D4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d857c82f-a402-44db-b300-f24b347c61d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:c00::/38 Signature Algorithm: sha256WithRSAEncryption 0a:e5:d5:5a:c9:18:51:82:89:d0:11:4e:42:94:06:8f:4e:df: 50:32:60:06:4f:c7:a7:5e:32:27:ec:79:c8:ae:17:4a:d0:b1: a4:ff:b4:b9:1e:ce:c0:78:9a:f5:42:5c:18:5d:d4:28:a8:c2: ea:d5:bf:b7:8a:ba:4d:2d:57:87:2c:a3:88:34:2e:22:12:fa: d6:b9:c9:c2:b5:59:74:a2:7f:28:dc:9d:c8:2a:10:3f:d2:3b: d0:e3:02:e8:3a:83:67:0f:16:52:22:e0:17:36:fe:e7:62:37: a2:e8:b3:9f:2e:a5:ed:9d:51:9c:61:89:9a:65:a1:34:6e:1b: 2d:d6:6e:04:db:12:ac:a6:e6:42:d6:2e:cf:59:c7:e4:dc:96: b2:5a:2e:2f:dd:91:56:ef:3e:2d:50:82:fd:b4:0c:d2:b4:42: a5:85:dc:05:0a:a5:ca:61:65:56:c5:24:c6:a3:d7:41:e7:5e: cf:47:f9:6a:42:b7:62:20:21:16:27:f0:b7:da:9a:0b:33:6a: 0e:1a:d1:13:4f:8c:a1:48:29:fd:5a:46:5f:13:4f:a3:bd:14: bd:f3:98:4a:5e:27:99:e6:60:b6:46:9e:87:17:21:c9:07:d2: 62:81:60:a9:8a:ad:32:2e:da:90:c3:d4:bc:3d:9f:ac:3e:28: f9:6a:71:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVG1CVITKQnmDTSs9GNaCEj4ZcIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMzAzM1oX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAY2JhM2E5YTVhZjAxMGJkY2U2Y2I5 NWNlZGI2ZTA1MmQ5ZGZkMDc2NjZkY2I4MmQxZjZhNjU4ZjZlZTczMzU1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaAW+GtdSd+3ubrBn0w6slwuVYXW J4ZhDGNPwnENNNK/9su1kEkIg0sdmJzLdbKn9tHNY77hLjq2jktcOUhuTNpSeEMS /Ihc6cdyYUl3BREHBRZf3I/nNZzDEuW1jVXp1WtpPNSi42AE7xOYAxsRzE7bqGzF 8UlhZx85csHvsECihWmz6clHYQe+X2g9gwGfHorijM/cRA5AoXrHu0u6EToG0E4h r7/kBBSO0Oto2lO3UMG8AVNApMXPNIHy1FJ9HhJ8NnnPSOOZopV/OWZ2kCNNErlF RUCRywfqchTZ74EEXb/KC6dMrjU226P/HrTrgrTKR3tVRXZ0Ck4SEwnuJQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNDhBF2n6RelmpVB3ywl4OG7qSjUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4NTdjODJmLWE0MDItNDRkYi1iMzAwLWYyNGIzNDdjNjFkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAwwDQYJKoZIhvcNAQELBQADggEBAArl1VrJGFGCidARTkKU Bo9O31AyYAZPx6deMifseciuF0rQsaT/tLkezsB4mvVCXBhd1CiowurVv7eKuk0t V4cso4g0LiIS+ta5ycK1WXSifyjcncgqED/SO9DjAug6g2cPFlIi4Bc2/udiN6Lo s58upe2dUZxhiZploTRuGy3WbgTbEqym5kLWLs9Zx+TclrJaLi/dkVbvPi1Qgv20 DNK0QqWF3AUKpcphZVbFJMaj10HnXs9H+WpCt2IgIRYn8Lfamgszag4a0RNPjKFI Kf1aRl8TT6O9FL3zmEpeJ5nmYLZGnocXIckH0mKBYKmKrTIu2pDD1Lw9n6w+KPlq cWQ= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:45 2025 by rpki-client