This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa File: 4f190963-16ca-4ba3-9370-65813f5adc68.roa (raw, json) Hash identifier: 6UMkQZIbhhMnQ0LMw4XKHDmPaYBYqY3MTRtsO0Hp3w8= Subject key identifier: 76:6E:03:BE:F0:C3:54:1A:13:3E:15:42:40:AE:00:61:5A:8C:8B:F0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D0EECED849552803DB2F8BF2DB00129C91F197E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa Signing time: Sun 09 Nov 2025 00:10:27 +0000 ROA not before: Sun 09 Nov 2025 00:10:27 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Nov 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0e:ec:ed:84:95:52:80:3d:b2:f8:bf:2d:b0:01:29:c9:1f:19:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:10:27 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=a691654d1232ffe5f971234003af52bf8e9d998365cb608498e389be62edede5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:f9:89:db:db:09:fc:b5:89:b8:06:af:14: a6:30:ee:29:d5:2e:b8:8b:76:6d:d2:a1:cc:51:be: 0e:7e:8a:a2:13:0d:91:3d:3d:37:4c:0f:9b:6e:d6: a6:00:91:95:e2:d6:ee:f3:1a:5d:ab:f9:91:c0:11: 27:2d:fb:9e:f8:1d:50:60:8a:e0:97:57:69:26:2b: 81:f4:64:61:2f:ab:2a:39:80:c2:88:79:0c:b1:c8: 75:80:b4:6c:88:0e:25:a0:d4:6a:f5:30:e9:07:52: f1:cc:f7:d5:d9:96:89:7e:9c:74:29:75:48:6e:ec: 95:e9:67:6f:2b:ec:c2:af:e8:da:e2:31:75:63:2f: d1:11:c0:55:e4:61:7f:c4:55:34:14:c4:36:8d:cc: b2:a1:ef:d4:26:74:56:23:19:2a:1f:47:96:92:cd: 06:b4:c1:fb:93:72:81:0e:97:a9:27:b3:26:db:f0: dd:a0:eb:bb:65:c3:27:4f:6c:23:7d:30:77:43:6b: 2f:43:38:74:ec:01:2a:2e:58:73:f0:f4:4a:89:31: a5:62:ca:4a:93:ec:c2:4c:8a:2a:6b:a1:5c:ce:78: b6:c7:51:fd:aa:de:27:a5:a1:64:4d:9a:0f:19:13: c7:b6:c7:6d:cc:a5:2d:d2:bd:16:1e:33:8a:fe:67: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6E:03:BE:F0:C3:54:1A:13:3E:15:42:40:AE:00:61:5A:8C:8B:F0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 4e:ab:d2:f4:d1:74:7c:1f:95:1b:4d:66:18:0b:6e:c0:e4:38: 7c:f5:d1:26:31:c9:68:02:e6:62:34:33:68:fa:c5:7e:6a:c7: a9:d1:e5:8d:7c:65:c5:16:c6:ef:8d:72:f4:28:be:6d:75:65: a5:aa:30:33:81:25:81:0b:6d:fc:1e:5e:7f:ab:99:7a:ed:24: 06:b2:50:1e:4f:ea:53:6e:9f:6b:83:7c:1f:27:9e:2e:98:e7: 64:45:2b:56:97:b5:87:0f:d9:c7:ff:ae:78:f3:e2:8a:64:31: 84:48:a4:9a:48:ca:c2:50:43:51:fb:b9:be:d9:e0:cd:f2:87: bc:6a:b9:aa:8e:74:38:b4:72:48:2b:cb:6a:36:fd:d3:99:a6: 40:4e:95:5a:17:53:4f:e9:9e:c7:a9:cd:3d:c5:a3:11:20:a8: b0:a6:6b:fa:55:59:6c:b6:88:d9:c2:e6:40:73:6a:7a:36:f6: d4:62:56:69:db:50:a5:b8:33:44:59:fa:36:01:af:19:63:fd: 21:46:b9:de:4c:99:3e:7e:77:91:9f:85:5f:32:7a:d3:43:52: 93:4f:e4:53:53:3c:ed:c7:0f:30:53:70:5d:82:96:18:55:6d: 48:b2:a5:6e:a0:d9:ad:10:a8:b6:65:59:e8:f5:b7:78:19:12: 05:dc:7a:44 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHQ7s7YSVUoA9svi/LbABKckfGX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMTAyN1oX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAYTY5MTY1NGQxMjMyZmZlNWY5NzEy MzQwMDNhZjUyYmY4ZTlkOTk4MzY1Y2I2MDg0OThlMzg5YmU2MmVkZWRlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSD5idvbCfy1ibgGrxSmMO4p1S64 i3Zt0qHMUb4OfoqiEw2RPT03TA+bbtamAJGV4tbu8xpdq/mRwBEnLfue+B1QYIrg l1dpJiuB9GRhL6sqOYDCiHkMsch1gLRsiA4loNRq9TDpB1LxzPfV2ZaJfpx0KXVI buyV6WdvK+zCr+ja4jF1Yy/REcBV5GF/xFU0FMQ2jcyyoe/UJnRWIxkqH0eWks0G tMH7k3KBDpepJ7Mm2/DdoOu7ZcMnT2wjfTB3Q2svQzh07AEqLlhz8PRKiTGlYspK k+zCTIoqa6Fczni2x1H9qt4npaFkTZoPGRPHtsdtzKUt0r0WHjOK/mcjawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHZuA77ww1QaEz4VQkCuAGFajIvwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmMTkwOTYzLTE2Y2EtNGJhMy05MzcwLTY1ODEzZjVhZGM2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSAwDQYJKoZIhvcNAQELBQADggEBAE6r0vTRdHwflRtNZhgL bsDkOHz10SYxyWgC5mI0M2j6xX5qx6nR5Y18ZcUWxu+NcvQovm11ZaWqMDOBJYEL bfweXn+rmXrtJAayUB5P6lNun2uDfB8nni6Y52RFK1aXtYcP2cf/rnjz4opkMYRI pJpIysJQQ1H7ub7Z4M3yh7xquaqOdDi0ckgry2o2/dOZpkBOlVoXU0/pnsepzT3F oxEgqLCma/pVWWy2iNnC5kBzano29tRiVmnbUKW4M0RZ+jYBrxlj/SFGud5MmT5+ d5GfhV8yetNDUpNP5FNTPO3HDzBTcF2ClhhVbUiypW6g2a0QqLZlWej1t3gZEgXc ekQ= -----END CERTIFICATE-----Generated at Sat Nov 22 20:43:35 2025 by rpki-client