This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa File: 31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa (raw, json) Hash identifier: npd4voXq1thpxvyxQgdIcKzVX9Xzh1BSfB86AFGmhn4= Subject key identifier: 31:27:CE:89:25:35:AC:13:04:A7:7A:F8:30:D0:B7:CC:53:13:B6:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B29435FB362C8EC0BA8BC01A32370C9699FC42C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa Signing time: Sun 23 Nov 2025 00:01:06 +0000 ROA not before: Sun 23 Nov 2025 00:01:06 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:29:43:5f:b3:62:c8:ec:0b:a8:bc:01:a3:23:70:c9:69:9f:c4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:01:06 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=49a029c69626b7ba3a14f22021290ff4865060e0c4b9f657487bf1e94128df24, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:e1:6d:79:f9:dc:39:91:e1:d3:fe:0d:d3: 23:1b:10:5a:3f:d6:13:15:05:70:89:7f:1c:f1:a4: 16:8a:07:a9:55:b4:43:7d:15:d5:2f:44:b2:ae:55: ff:f7:41:65:da:35:d8:07:a2:ca:ee:32:24:80:a7: 0a:e5:11:37:18:27:41:fd:52:ee:9e:a7:61:40:d5: ea:d2:f5:a8:32:7f:6b:76:45:24:ac:11:5d:cc:ab: 8f:44:92:64:83:a7:22:0c:e2:26:1d:8e:52:3f:a5: b2:06:6f:d9:1c:35:5a:2e:b7:bd:d3:dd:d8:13:3d: 2b:ac:96:62:cc:6e:05:e5:83:37:4e:ec:e5:b4:ee: ae:cd:92:9e:13:51:8f:d2:69:06:9c:0e:3a:9a:f9: a2:71:ae:5d:60:85:72:e9:67:11:85:ab:7b:92:54: bb:bb:ed:91:cc:5b:cb:d3:3d:a2:52:a7:ef:8f:67: 12:6d:fb:13:fa:67:82:2e:68:0f:6a:ef:9d:1d:ff: 53:fb:1d:09:2b:e3:de:2c:58:6c:47:80:96:1d:35: 6b:c2:a0:6c:53:7a:86:3b:4d:a8:44:65:d7:fa:a3: 58:0a:ac:45:e3:05:8a:4b:36:7a:8b:6e:9d:4c:d1: 3e:9e:1b:cc:03:50:08:47:96:8c:4c:fa:6a:2d:8f: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:27:CE:89:25:35:AC:13:04:A7:7A:F8:30:D0:B7:CC:53:13:B6:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31cc4837-3199-4dc0-bf9f-ce16210b6cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:40c0::/46 Signature Algorithm: sha256WithRSAEncryption 52:be:9c:8a:3c:fe:c8:ec:9e:fb:1d:8d:3d:4a:0a:ec:c6:1b: 5d:4c:fd:6c:8d:45:64:f2:07:8c:5e:89:ca:45:e6:49:16:2b: 28:b4:eb:b5:d7:36:ed:bd:35:8f:8a:bf:f3:6b:5f:4b:bf:94: de:10:d4:69:26:55:4e:2c:b7:d5:d2:c4:4d:38:44:92:7e:e2: dd:09:40:44:93:1d:18:2b:5c:ba:c6:70:b0:27:ac:26:c1:79: ce:43:0c:9e:39:b6:d9:ae:ed:28:46:f5:b3:ee:71:1b:43:52: 10:9f:64:3a:32:d6:28:5a:f2:18:7e:a1:78:3f:8b:4c:b9:9a: 39:2d:13:60:1e:c6:3c:6c:87:d1:b4:57:83:8d:35:5c:0b:50: b5:03:38:6c:d3:b2:c1:48:9f:2b:51:b2:d2:d1:6b:37:31:62: 5e:41:1e:7d:ab:90:3c:a6:8a:a3:dd:80:c2:20:2f:ee:2f:50: af:f9:a6:f6:ed:81:8a:e3:25:f6:8f:1e:29:c4:4d:bd:6c:f1: 9a:ec:90:8d:ad:ee:2f:14:8b:fa:8c:b5:30:87:66:73:86:cf: 7a:e2:a9:cd:d4:3e:a4:a2:f5:6b:f9:6a:19:b2:3c:cf:b9:c9: 5e:a1:d8:c7:18:21:e0:dd:e1:ce:77:81:79:1e:8d:46:2f:98: 48:a5:b8:ac -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSylDX7NiyOwLqLwBoyNwyWmfxCwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMDEwNloX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNANDlhMDI5YzY5NjI2YjdiYTNhMTRm MjIwMjEyOTBmZjQ4NjUwNjBlMGM0YjlmNjU3NDg3YmYxZTk0MTI4ZGYyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo27hbXn53DmR4dP+DdMjGxBaP9YT FQVwiX8c8aQWigepVbRDfRXVL0SyrlX/90Fl2jXYB6LK7jIkgKcK5RE3GCdB/VLu nqdhQNXq0vWoMn9rdkUkrBFdzKuPRJJkg6ciDOImHY5SP6WyBm/ZHDVaLre9093Y Ez0rrJZizG4F5YM3TuzltO6uzZKeE1GP0mkGnA46mvmica5dYIVy6WcRhat7klS7 u+2RzFvL0z2iUqfvj2cSbfsT+meCLmgPau+dHf9T+x0JK+PeLFhsR4CWHTVrwqBs U3qGO02oRGXX+qNYCqxF4wWKSzZ6i26dTNE+nhvMA1AIR5aMTPpqLY/B+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDEnzoklNawTBKd6+DDQt8xTE7bKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxY2M0ODM3LTMxOTktNGRjMC1iZjlmLWNlMTYyMTBiNmNjYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80DAMA0GCSqGSIb3DQEBCwUAA4IBAQBSvpyKPP7I7J77HY09 SgrsxhtdTP1sjUVk8geMXonKReZJFisotOu11zbtvTWPir/za19Lv5TeENRpJlVO LLfV0sRNOESSfuLdCUBEkx0YK1y6xnCwJ6wmwXnOQwyeObbZru0oRvWz7nEbQ1IQ n2Q6MtYoWvIYfqF4P4tMuZo5LRNgHsY8bIfRtFeDjTVcC1C1Azhs07LBSJ8rUbLS 0Ws3MWJeQR59q5A8poqj3YDCIC/uL1Cv+ab27YGK4yX2jx4pxE29bPGa7JCNre4v FIv6jLUwh2Zzhs964qnN1D6kovVr+WoZsjzPucleodjHGCHg3eHOd4F5Ho1GL5hI pbis -----END CERTIFICATE-----Generated at Sun Nov 23 05:43:52 2025 by rpki-client