This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa File: 445d78ad-29c7-49fd-ad71-7cd16140cfce.roa (raw, json) Hash identifier: cjTlynfqv1sScya+6wOMO68/xAZiEjDxjUqTpm+Oj0U= Subject key identifier: 8A:AF:B9:4C:98:3A:D9:33:E7:25:B7:D1:3D:47:29:A4:90:A1:F0:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 32A5AF71EBFC8EE21BA45F26240128FB6810E2D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa Signing time: Sat 15 Nov 2025 00:00:55 +0000 ROA not before: Sat 15 Nov 2025 00:00:55 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Nov 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a5:af:71:eb:fc:8e:e2:1b:a4:5f:26:24:01:28:fb:68:10:e2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 15 00:00:55 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=f609792a9123c32bd0976e544ba2685a3bf8c97a2c7bbf71317f2c6e99e29889, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:45:4a:f2:61:62:b6:98:33:8a:9c:19:27: c1:4a:41:e7:61:c4:1c:99:ad:fb:d6:d4:08:c1:1e: fe:ce:30:61:6e:83:00:4b:44:1e:7d:b1:ce:71:62: 85:01:b8:a8:82:97:e8:8b:72:e6:b1:c1:ce:1d:85: b2:88:23:c9:e5:73:26:2c:ae:9f:40:17:23:d7:84: 5a:cf:4e:24:ca:3a:44:45:b9:b9:9c:5c:e2:d7:f2: 45:f3:65:22:c4:51:54:81:19:46:08:b2:04:fa:55: e9:a3:46:67:4e:55:a3:aa:a3:98:a6:d3:1e:07:43: bd:fc:16:35:f7:de:5f:d6:59:34:e4:da:3b:e0:b5: 4b:49:47:ae:44:e1:2d:9d:03:a7:c0:10:2f:b3:8f: 21:db:82:1a:2b:47:47:37:39:2c:08:a5:ba:d0:0c: f5:57:e7:85:60:ec:4d:7f:77:98:f7:78:8f:0e:46: 2f:ea:21:40:e2:27:49:c3:30:63:ae:66:71:46:4f: 49:ef:ec:21:a0:2b:d6:fe:2f:25:ce:e2:ce:0d:82: 9d:8c:9d:a9:33:38:e3:d6:01:6a:c3:c7:9c:c5:78: ca:4e:19:12:97:3f:2e:e9:71:40:eb:f3:50:1b:01: bb:d2:bc:55:ac:d1:31:26:8c:e3:e6:32:58:5d:7d: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AF:B9:4C:98:3A:D9:33:E7:25:B7:D1:3D:47:29:A4:90:A1:F0:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:6000::/40 Signature Algorithm: sha256WithRSAEncryption 4a:7d:c4:4b:32:dc:d5:2f:1b:c1:23:1e:da:10:4e:de:3e:35: f7:ab:55:6c:08:27:29:32:cd:fc:db:d7:d1:fd:66:cf:b2:43: f2:4d:86:77:80:03:ba:81:fd:9b:db:09:93:fb:c3:fc:64:ee: 7c:49:a8:bd:ff:66:59:5c:a2:9f:20:64:d4:30:1d:8a:50:5d: 58:f4:8e:da:4b:4d:09:93:01:73:5a:fd:9b:91:d6:fd:42:a7: 37:3e:8f:18:a6:5f:90:cb:78:d1:4b:83:0f:d0:ce:34:e2:5c: 30:c4:8f:8f:ec:60:28:29:24:d9:45:31:09:02:23:94:b5:97: e3:9e:e8:bf:63:55:1f:7c:78:bc:b1:a2:48:dc:44:12:9b:24: 10:e1:8d:00:d9:cc:53:b4:32:52:4f:05:50:d2:1c:ca:99:7a: 06:74:26:55:98:05:4a:a0:67:ce:30:7b:b2:69:b1:8f:f7:60: b0:1a:2f:58:0c:f6:0a:81:a4:a4:9b:4e:73:9d:97:35:dd:6c: a5:8d:22:4c:a9:ce:d0:0c:40:9e:54:1d:3b:45:cc:81:5f:df: 7a:cf:cf:74:d1:46:cc:f6:a3:2b:c2:e1:20:09:25:47:ec:34: f3:34:c9:7b:f7:36:f3:ae:06:80:ff:d0:ca:27:b9:fe:39:12: e3:87:52:bc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMqWvcev8juIbpF8mJAEo+2gQ4tcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExNTAwMDA1NVoX DTI1MTIyMDIzNTk1OVowejFJMEcGA1UEBRNAZjYwOTc5MmE5MTIzYzMyYmQwOTc2 ZTU0NGJhMjY4NWEzYmY4Yzk3YTJjN2JiZjcxMzE3ZjJjNmU5OWUyOTg4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp39FSvJhYraYM4qcGSfBSkHnYcQc ma371tQIwR7+zjBhboMAS0QefbHOcWKFAbiogpfoi3LmscHOHYWyiCPJ5XMmLK6f QBcj14Raz04kyjpERbm5nFzi1/JF82UixFFUgRlGCLIE+lXpo0ZnTlWjqqOYptMe B0O9/BY1995f1lk05No74LVLSUeuROEtnQOnwBAvs48h24IaK0dHNzksCKW60Az1 V+eFYOxNf3eY93iPDkYv6iFA4idJwzBjrmZxRk9J7+whoCvW/i8lzuLODYKdjJ2p Mzjj1gFqw8ecxXjKThkSlz8u6XFA6/NQGwG70rxVrNExJozj5jJYXX03BQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIqvuUyYOtkz5yW30T1HKaSQofBlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NWQ3OGFkLTI5YzctNDlmZC1hZDcxLTdjZDE2MTQwY2ZjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba72AwDQYJKoZIhvcNAQELBQADggEBAEp9xEsy3NUvG8EjHtoQ Tt4+NferVWwIJykyzfzb19H9Zs+yQ/JNhneAA7qB/ZvbCZP7w/xk7nxJqL3/Zllc op8gZNQwHYpQXVj0jtpLTQmTAXNa/ZuR1v1Cpzc+jximX5DLeNFLgw/QzjTiXDDE j4/sYCgpJNlFMQkCI5S1l+Oe6L9jVR98eLyxokjcRBKbJBDhjQDZzFO0MlJPBVDS HMqZegZ0JlWYBUqgZ84we7JpsY/3YLAaL1gM9gqBpKSbTnOdlzXdbKWNIkypztAM QJ5UHTtFzIFf33rPz3TRRsz2oyvC4SAJJUfsNPM0yXv3NvOuBoD/0Monuf45EuOH Urw= -----END CERTIFICATE-----Generated at Sat Nov 22 21:30:20 2025 by rpki-client