This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa File: d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa (raw, json) Hash identifier: t/FKHAxzZEYVaJ21dbBaCodM50Vs8+zOFtTJmq9eqxs= Subject key identifier: 1A:83:2C:DB:8A:46:2B:42:0F:33:7C:02:85:DD:34:BE:8F:54:37:15 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DEF4E6F6CF0595649A798FD49EF3CDC1F1535EF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa Signing time: Sat 08 Nov 2025 00:10:30 +0000 ROA not before: Sat 08 Nov 2025 00:10:30 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ef:4e:6f:6c:f0:59:56:49:a7:98:fd:49:ef:3c:dc:1f:15:35:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:10:30 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=f32ed5e036233343fa713e1f3cefed155d147fa01fbbc8d361a75975c9ca43f9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:71:d0:4b:e6:33:22:d7:4c:0d:93:d8:d5: 29:37:3d:0e:9a:9f:9e:e7:28:d1:39:53:17:bd:9c: 2d:7b:93:2b:74:b2:fc:b1:c9:5c:bd:d1:8a:9a:d9: 63:69:3d:2b:69:18:9f:2c:a2:8f:23:6c:41:bf:05: c3:fe:72:9d:b6:28:65:1f:73:af:f6:b7:15:37:da: 8d:df:4b:7a:dc:62:05:70:98:90:95:b8:44:be:8e: 68:e9:5d:2b:04:38:4b:86:b4:9a:7a:eb:e1:b3:41: f9:40:82:56:d5:f8:0e:a7:51:eb:f4:e9:9f:ce:3e: 62:0c:fa:36:5f:9f:8e:3d:5d:35:37:33:70:98:fb: b3:bc:3c:4b:b3:ba:e4:46:42:b0:3e:9d:0c:88:2b: d9:80:7b:e2:6e:78:4d:b4:08:6d:cf:f5:38:d3:05: 52:6b:ce:e0:5a:39:e3:87:d6:4a:d1:ec:75:9a:c0: 15:68:a9:e2:f9:a5:87:e7:cb:6a:f7:59:ee:a6:d4: b5:ee:a8:06:88:cc:14:4e:94:42:c4:5e:72:33:8e: a7:3d:44:77:ad:53:84:5c:b5:a1:e4:f4:10:19:54: 9f:45:34:b4:2c:49:ab:c9:3d:57:e8:64:85:cf:6f: 7b:79:0d:57:a0:39:90:99:79:1e:d6:a4:33:ba:d9: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:83:2C:DB:8A:46:2B:42:0F:33:7C:02:85:DD:34:BE:8F:54:37:15 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:7000::/40 Signature Algorithm: sha256WithRSAEncryption 59:ea:9d:fd:68:63:f1:69:6b:f0:a9:84:bc:c0:de:3a:63:7b: cd:04:ae:16:47:4b:76:f3:68:9c:a1:d0:8c:b8:4e:9f:44:a6: f1:ab:ff:fc:d0:d5:f0:23:aa:86:14:3c:40:29:7c:4d:ab:fd: 70:d2:c3:14:b3:b6:96:3a:9d:5b:fb:27:4a:0b:3b:ef:d1:97: 06:cc:b7:fd:2a:6a:18:5a:9e:3a:71:78:04:a1:1b:c8:cb:08: 0d:c4:11:5c:f1:4e:19:4c:a5:80:81:fe:a7:09:35:2a:82:4c: de:5e:c1:c1:23:aa:01:76:95:56:0c:96:27:05:bd:f8:5f:27: 06:cb:c7:89:cc:2b:2f:26:c5:93:2b:0d:ef:74:d9:24:4e:4e: bb:6c:42:07:4a:41:24:53:76:a5:6d:43:9d:49:1a:15:d3:84: 10:aa:44:97:e6:20:8e:b4:e4:6b:e4:3c:fc:87:46:29:2b:42: ab:fa:fd:62:63:10:88:dd:1f:3a:db:9d:b8:a0:b2:41:e9:8b: a4:bf:bb:13:b6:c1:98:6a:dc:b8:a7:12:21:4e:02:74:22:f1: 41:4c:24:28:42:6b:76:d9:fa:c1:fa:fc:30:a8:98:0a:de:31: f8:f7:d0:46:82:65:9a:22:5c:39:56:ea:5e:58:92:4f:c9:16: a9:59:10:ae -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHe9Ob2zwWVZJp5j9Se883B8VNe8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMTAzMFoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAZjMyZWQ1ZTAzNjIzMzM0M2ZhNzEz ZTFmM2NlZmVkMTU1ZDE0N2ZhMDFmYmJjOGQzNjFhNzU5NzVjOWNhNDNmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjNx0EvmMyLXTA2T2NUpNz0Omp+e 5yjROVMXvZwte5MrdLL8sclcvdGKmtljaT0raRifLKKPI2xBvwXD/nKdtihlH3Ov 9rcVN9qN30t63GIFcJiQlbhEvo5o6V0rBDhLhrSaeuvhs0H5QIJW1fgOp1Hr9Omf zj5iDPo2X5+OPV01NzNwmPuzvDxLs7rkRkKwPp0MiCvZgHvibnhNtAhtz/U40wVS a87gWjnjh9ZK0ex1msAVaKni+aWH58tq91nuptS17qgGiMwUTpRCxF5yM46nPUR3 rVOEXLWh5PQQGVSfRTS0LEmryT1X6GSFz297eQ1XoDmQmXke1qQzutmBzQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBqDLNuKRitCDzN8AoXdNL6PVDcVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q5Mjk3MjljLWMwMTMtNDAyNC1hZDRlLTRiN2RkYmQzY2ExZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8nAwDQYJKoZIhvcNAQELBQADggEBAFnqnf1oY/Fpa/CphLzA 3jpje80ErhZHS3bzaJyh0Iy4Tp9EpvGr//zQ1fAjqoYUPEApfE2r/XDSwxSztpY6 nVv7J0oLO+/RlwbMt/0qahhanjpxeAShG8jLCA3EEVzxThlMpYCB/qcJNSqCTN5e wcEjqgF2lVYMlicFvfhfJwbLx4nMKy8mxZMrDe902SROTrtsQgdKQSRTdqVtQ51J GhXThBCqRJfmII605GvkPPyHRikrQqv6/WJjEIjdHzrbnbigskHpi6S/uxO2wZhq 3LinEiFOAnQi8UFMJChCa3bZ+sH6/DComAreMfj30EaCZZoiXDlW6l5Ykk/JFqlZ EK4= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:57 2025 by rpki-client