This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa File: 671d95a3-c003-4a86-88c6-405cd8ceff9e.roa (raw, json) Hash identifier: R9gc8fM7xe+2Fz38A7fmomqvdeRViVKDvU0tXdQWHXo= Subject key identifier: 01:5A:E7:9C:98:B4:6A:0B:F3:9B:44:88:26:8B:D9:BD:B0:89:79:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4582B94673D5CCDE97C8E53D6552355E930BD4D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa Signing time: Sat 15 Nov 2025 00:00:08 +0000 ROA not before: Sat 15 Nov 2025 00:00:08 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:82:b9:46:73:d5:cc:de:97:c8:e5:3d:65:52:35:5e:93:0b:d4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 15 00:00:08 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=76a2b7f9b82ecad7202c5cbae51460966f3e74545211585c3302291929357f81, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:07:4c:73:89:9e:ef:8a:d8:c0:29:2a:33: 41:51:76:6e:07:fb:1f:71:bb:01:86:d2:cf:34:84: 4a:79:97:d1:6b:a4:74:16:8f:fc:98:69:ff:b4:9d: e5:eb:14:f9:24:a3:63:16:c0:9e:ab:45:86:e8:e2: 3a:68:dd:88:66:84:3e:ed:c9:fb:d5:45:59:fa:9f: db:73:0b:48:2a:b8:70:08:3b:4d:83:64:a2:58:ac: 53:6b:6d:22:5a:b6:9b:2d:0f:78:42:2d:e4:1b:c6: 6c:62:96:d0:2e:87:13:07:66:d1:29:d7:a1:77:0a: 63:0b:ca:0b:ab:63:4a:4e:b0:86:29:70:f4:52:f4: 8d:6c:8d:41:21:af:21:14:fc:6e:cf:72:77:5d:26: 60:f1:58:57:ee:9a:12:57:65:5f:c7:4d:af:9c:6a: 3a:1b:43:79:77:c6:d0:e5:b2:a8:92:ed:15:6d:64: 75:41:f5:94:3c:08:f1:53:cf:89:fb:02:4f:f0:77: 0c:24:47:81:3e:c5:a8:9d:26:5f:21:17:49:cd:74: a5:64:c7:a6:f5:11:59:a0:ef:71:54:0f:56:6b:4a: d0:7d:2a:75:6c:26:8b:b8:49:98:b8:32:c6:a1:ab: ee:15:6d:89:b7:7e:26:42:73:b8:85:25:f0:91:3c: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:E7:9C:98:B4:6A:0B:F3:9B:44:88:26:8B:D9:BD:B0:89:79:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/671d95a3-c003-4a86-88c6-405cd8ceff9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption 93:23:7c:82:d6:7a:98:6e:ba:06:9f:d6:4e:56:3f:60:b6:b4: bb:8f:bc:22:b4:62:4c:cc:12:38:c5:a4:34:3d:eb:3a:59:01: e9:b6:e0:c2:b7:c0:40:9d:ec:49:76:90:be:16:9d:d3:e5:84: 40:a2:51:70:93:ef:8b:cc:eb:75:3e:65:11:95:3e:b0:a0:cf: 1e:ed:62:b8:2d:ea:8b:62:60:75:c0:b6:c2:48:2f:f5:d4:60: cd:37:64:be:87:21:6a:3c:a7:93:e0:d9:de:ad:46:5e:a7:f8: e9:c8:8f:bf:e8:50:1d:0c:18:12:41:ca:85:86:5a:93:c8:db: 15:d5:ad:c6:98:13:87:a0:e8:f5:da:d5:de:91:44:49:29:07: 5f:1f:72:3a:d9:27:9b:d0:52:e5:cb:3b:13:85:25:31:89:6c: ab:c6:09:58:a1:fb:36:c6:bf:83:48:0d:92:92:30:f3:74:b9: 30:69:ec:0f:25:62:8d:02:ac:13:b0:67:4b:9c:9b:ad:48:a0: 2e:6f:cb:f9:4e:fb:f6:1f:02:a5:74:46:64:81:4a:0b:d5:ae: 75:d4:fd:cc:a5:e8:d2:58:5e:a0:fd:fb:82:78:c5:66:fd:0f: 34:db:cf:4a:cb:22:6c:99:28:19:11:7a:9c:c4:cc:9e:41:99: 78:b6:23:98 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURYK5RnPVzN6XyOU9ZVI1XpML1NUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExNTAwMDAwOFoX DTI1MTIyMDIzNTk1OVowejFJMEcGA1UEBRNANzZhMmI3ZjliODJlY2FkNzIwMmM1 Y2JhZTUxNDYwOTY2ZjNlNzQ1NDUyMTE1ODVjMzMwMjI5MTkyOTM1N2Y4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4HTHOJnu+K2MApKjNBUXZuB/sf cbsBhtLPNIRKeZfRa6R0Fo/8mGn/tJ3l6xT5JKNjFsCeq0WG6OI6aN2IZoQ+7cn7 1UVZ+p/bcwtIKrhwCDtNg2SiWKxTa20iWrabLQ94Qi3kG8ZsYpbQLocTB2bRKdeh dwpjC8oLq2NKTrCGKXD0UvSNbI1BIa8hFPxuz3J3XSZg8VhX7poSV2Vfx02vnGo6 G0N5d8bQ5bKoku0VbWR1QfWUPAjxU8+J+wJP8HcMJEeBPsWonSZfIRdJzXSlZMem 9RFZoO9xVA9Wa0rQfSp1bCaLuEmYuDLGoavuFW2Jt34mQnO4hSXwkTyt5QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAFa55yYtGoL85tEiCaL2b2wiXkAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3MWQ5NWEzLWMwMDMtNGE4Ni04OGM2LTQwNWNkOGNlZmY5ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBAJMjfILWephuugaf1k5W P2C2tLuPvCK0YkzMEjjFpDQ96zpZAem24MK3wECd7El2kL4WndPlhECiUXCT74vM 63U+ZRGVPrCgzx7tYrgt6otiYHXAtsJIL/XUYM03ZL6HIWo8p5Pg2d6tRl6n+OnI j7/oUB0MGBJByoWGWpPI2xXVrcaYE4eg6PXa1d6RREkpB18fcjrZJ5vQUuXLOxOF JTGJbKvGCVih+zbGv4NIDZKSMPN0uTBp7A8lYo0CrBOwZ0ucm61IoC5vy/lO+/Yf AqV0RmSBSgvVrnXU/cyl6NJYXqD9+4J4xWb9DzTbz0rLImyZKBkRepzEzJ5BmXi2 I5g= -----END CERTIFICATE-----Generated at Sun Nov 23 05:42:55 2025 by rpki-client