This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa File: 35e5605c-f1af-42e1-99b5-cde6515ffeef.roa (raw, json) Hash identifier: HdN96K07GrGkNgpjvCbh6f5vfSJbQYySR8LSP/+vtW0= Subject key identifier: FE:EF:70:74:92:00:69:2B:9D:D2:47:0C:36:18:EF:62:8C:93:40:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 170F15E721029DF0C1EB93BF19EC967EC193995B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa Signing time: Sun 23 Nov 2025 00:11:13 +0000 ROA not before: Sun 23 Nov 2025 00:11:13 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:10c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0f:15:e7:21:02:9d:f0:c1:eb:93:bf:19:ec:96:7e:c1:93:99:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:11:13 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=2258abe50d79ba8543c4e50ccdad3e01d96c40f95bfc702cb5da34f646c120ae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:30:30:1f:db:47:8f:f0:70:d7:7e:e5:62: 61:11:4e:46:93:f3:54:8e:54:6b:e9:d6:90:5a:e5: 07:c3:33:13:87:ec:7c:1e:36:12:ee:bd:1d:04:29: d3:91:54:bb:90:c8:1d:4c:38:80:6d:bc:f0:7a:88: d4:09:67:e2:7b:d8:d1:f8:72:7b:76:ac:6e:ea:d4: 7a:b4:5c:31:c5:e4:98:6a:f2:96:eb:07:0f:c7:24: 97:e7:0a:9e:e3:19:b8:41:9a:3f:14:b2:d5:c6:2c: eb:eb:d1:89:12:9f:da:67:31:c4:45:04:05:e6:5a: 14:a4:9e:10:a3:62:af:ed:87:ea:f0:87:ee:6b:6e: 4d:bb:e0:cd:81:86:6f:8f:87:7f:ba:19:ad:b1:67: 8b:f0:d7:9a:7e:d1:a2:06:16:09:d7:39:01:1c:28: 00:9e:5a:9c:cf:37:60:be:1f:66:9b:f9:9b:8a:52: 09:8a:9b:d6:c6:d7:a8:3f:83:66:2e:4a:87:76:ab: 8f:7f:ba:bc:ba:8b:aa:b3:e0:5a:1d:dd:a4:6d:3c: 28:96:89:56:64:b0:ca:86:2d:63:73:f3:60:1c:52: 42:98:59:79:c9:72:71:e3:5e:fb:ed:31:84:58:4e: 1e:c9:73:75:be:66:fe:d7:c3:ec:a3:bd:2b:7a:1c: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EF:70:74:92:00:69:2B:9D:D2:47:0C:36:18:EF:62:8C:93:40:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:10c0::/46 Signature Algorithm: sha256WithRSAEncryption 84:6e:38:9a:8e:14:02:e1:14:5e:b9:73:0a:df:03:af:12:98: ad:5a:a4:b3:fc:04:b1:94:8f:1a:f3:8a:29:23:7f:84:63:fe: bf:f0:08:72:76:e7:40:e5:f3:ae:d3:da:30:f3:d2:56:49:88: 1e:89:7e:5c:d1:15:7f:79:e2:cf:02:a6:1c:d5:53:14:cf:f1: c6:03:b1:8f:4a:a0:fc:93:24:d8:77:0b:41:29:2a:b4:96:98: 90:b5:ff:42:23:e6:51:64:99:ff:d1:e0:d6:28:e3:46:95:07: 1c:07:6a:23:27:af:63:72:2d:ed:b2:04:f0:2c:63:a9:1b:64: 9f:6f:a1:03:e4:a6:23:68:25:84:80:38:45:16:bf:48:d7:48: 3c:51:ac:85:37:b7:d3:dc:e4:3f:59:4c:52:b4:d5:d0:65:13: e0:ff:ee:05:89:e8:c6:b4:d0:e4:f3:60:38:a4:13:12:9a:ac: 1b:8a:56:ef:f7:8b:85:75:51:2d:12:5b:04:2e:6f:b5:92:a8: b7:cc:c0:93:d8:f4:0a:47:6c:c6:a3:31:5c:f1:48:0d:d1:11: 56:51:12:2d:bf:95:88:ae:7f:da:bb:a2:fb:01:22:25:7d:6f: 53:0f:de:92:8d:31:0b:b6:8f:5d:77:4d:0c:1e:2c:a2:33:6b: 08:32:66:3e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFw8V5yECnfDB65O/GeyWfsGTmVswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTExM1oX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAMjI1OGFiZTUwZDc5YmE4NTQzYzRl NTBjY2RhZDNlMDFkOTZjNDBmOTViZmM3MDJjYjVkYTM0ZjY0NmMxMjBhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzycwMB/bR4/wcNd+5WJhEU5Gk/NU jlRr6daQWuUHwzMTh+x8HjYS7r0dBCnTkVS7kMgdTDiAbbzweojUCWfie9jR+HJ7 dqxu6tR6tFwxxeSYavKW6wcPxySX5wqe4xm4QZo/FLLVxizr69GJEp/aZzHERQQF 5loUpJ4Qo2Kv7Yfq8Ifua25Nu+DNgYZvj4d/uhmtsWeL8NeaftGiBhYJ1zkBHCgA nlqczzdgvh9mm/mbilIJipvWxteoP4NmLkqHdquPf7q8uouqs+BaHd2kbTwololW ZLDKhi1jc/NgHFJCmFl5yXJx41777TGEWE4eyXN1vmb+18Pso70rehwIfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP7vcHSSAGkrndJHDDYY72KMk0BIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM1ZTU2MDVjLWYxYWYtNDJlMS05OWI1LWNkZTY1MTVmZmVlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8xDAMA0GCSqGSIb3DQEBCwUAA4IBAQCEbjiajhQC4RReuXMK 3wOvEpitWqSz/ASxlI8a84opI3+EY/6/8AhydudA5fOu09ow89JWSYgeiX5c0RV/ eeLPAqYc1VMUz/HGA7GPSqD8kyTYdwtBKSq0lpiQtf9CI+ZRZJn/0eDWKONGlQcc B2ojJ69jci3tsgTwLGOpG2Sfb6ED5KYjaCWEgDhFFr9I10g8UayFN7fT3OQ/WUxS tNXQZRPg/+4FiejGtNDk82A4pBMSmqwbilbv94uFdVEtElsELm+1kqi3zMCT2PQK R2zGozFc8UgN0RFWURItv5WIrn/au6L7ASIlfW9TD96SjTELto9dd00MHiyiM2sI MmY+ -----END CERTIFICATE-----Generated at Sun Nov 23 05:42:55 2025 by rpki-client