This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d34cd57-c691-4e6c-b9e7-bf61e4393e5f.roa File: 7d34cd57-c691-4e6c-b9e7-bf61e4393e5f.roa (raw, json) Hash identifier: 6GGL9cfndjubJ71AOTpnFOCMSyGv+jHxrPrAKlYzWDE= Subject key identifier: 82:FA:38:F4:ED:E0:33:61:0C:2B:7C:1A:46:E8:AE:A8:99:BE:99:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0157A84AFD2BB2C4E9AF4AE930D8153FC9A94DAD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d34cd57-c691-4e6c-b9e7-bf61e4393e5f.roa Signing time: Sun 23 Nov 2025 00:00:41 +0000 ROA not before: Sun 23 Nov 2025 00:00:41 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:57:a8:4a:fd:2b:b2:c4:e9:af:4a:e9:30:d8:15:3f:c9:a9:4d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:00:41 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=149f2dbab12ee794edf9b2f1c113a86885806508f01b8f44ecd13c345f672559, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:ce:18:00:cb:f6:d3:f7:43:43:ba:60:f7: 86:cb:f2:c1:64:23:ab:85:2e:a6:1a:87:91:0b:16: 96:31:3e:aa:8d:d5:a0:76:f0:91:d1:a0:6e:0a:0f: b2:17:f7:fb:07:de:1c:6f:09:93:ab:ca:d2:2d:e0: 81:b2:9d:03:65:26:78:80:fb:ba:94:42:22:72:4c: b8:eb:30:3b:37:0e:84:55:21:e2:8a:cc:ba:91:89: 93:9f:05:a5:4f:42:4d:14:af:40:a0:f2:83:e1:47: a9:ce:49:cb:37:eb:03:2f:1d:00:c0:91:b0:6c:5d: 70:f4:a8:e3:8a:6b:3a:74:e1:ae:0b:cd:34:08:09: 3c:a0:bb:99:f1:6e:1b:30:76:14:9e:19:67:4b:d7: 4c:a8:d1:04:26:db:3f:69:61:8e:37:cf:5e:58:68: 04:d9:07:1d:69:ce:dc:ee:95:38:ed:9b:91:38:bf: 95:56:0a:9c:1a:3e:8c:c1:0c:d8:eb:5f:92:62:63: ff:84:ef:72:f4:f1:cf:58:b5:fa:a1:8b:09:bc:33: 62:2f:84:eb:38:a8:24:e2:20:82:67:25:ce:38:78: 59:66:e2:7b:4b:66:cb:64:19:6b:ec:65:58:3e:70: 80:b5:29:ab:37:af:d9:45:55:38:fe:3b:7f:ab:ee: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:38:F4:ED:E0:33:61:0C:2B:7C:1A:46:E8:AE:A8:99:BE:99:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d34cd57-c691-4e6c-b9e7-bf61e4393e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:2800::/40 Signature Algorithm: sha256WithRSAEncryption 20:fb:83:73:1a:b7:d5:61:48:dc:d4:27:a3:c6:32:3b:f3:03: 56:99:e3:39:60:28:a4:a3:fd:54:60:f4:0a:b9:e7:a1:2b:89: f8:df:40:d4:56:3d:29:ca:d5:c9:81:83:fc:75:6a:9b:90:bd: 5f:d4:02:97:07:b6:59:d2:14:86:2b:a2:15:ef:71:8e:70:ec: 41:3e:68:16:13:83:d9:63:61:9a:08:b9:fc:9a:56:b9:6e:cc: a8:eb:81:b2:84:52:1d:6b:1d:a9:ea:8c:f6:51:b1:95:2a:f3: 16:aa:b6:6d:ce:f8:fd:58:e0:85:b7:ce:74:a2:6d:5b:73:d9: 88:ee:26:54:75:62:ee:72:10:07:6a:32:ed:19:32:6d:40:8d: a0:fe:2a:59:74:39:bd:bc:f6:df:6d:f2:fe:97:1c:bf:0a:ad: 1e:eb:46:af:d1:07:13:40:a4:97:09:25:f4:2e:09:0f:b0:64: 6c:61:ab:81:34:54:dc:72:84:8f:26:77:d8:fd:9c:d9:5f:2f: dc:66:2b:81:e0:4f:b2:01:da:ca:76:bb:b4:88:bf:c6:62:59: e5:af:3d:49:32:2e:e8:cf:0f:ff:88:d5:6d:66:a1:4c:83:c7: 30:57:00:42:d4:04:25:27:c5:27:52:e1:36:02:f6:e7:af:c9: aa:4a:f9:df -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAVeoSv0rssTpr0rpMNgVP8mpTa0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMDA0MVoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAMTQ5ZjJkYmFiMTJlZTc5NGVkZjli MmYxYzExM2E4Njg4NTgwNjUwOGYwMWI4ZjQ0ZWNkMTNjMzQ1ZjY3MjU1OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUbOGADL9tP3Q0O6YPeGy/LBZCOr hS6mGoeRCxaWMT6qjdWgdvCR0aBuCg+yF/f7B94cbwmTq8rSLeCBsp0DZSZ4gPu6 lEIicky46zA7Nw6EVSHiisy6kYmTnwWlT0JNFK9AoPKD4UepzknLN+sDLx0AwJGw bF1w9Kjjims6dOGuC800CAk8oLuZ8W4bMHYUnhlnS9dMqNEEJts/aWGON89eWGgE 2Qcdac7c7pU47ZuROL+VVgqcGj6MwQzY61+SYmP/hO9y9PHPWLX6oYsJvDNiL4Tr OKgk4iCCZyXOOHhZZuJ7S2bLZBlr7GVYPnCAtSmrN6/ZRVU4/jt/q+7kkQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIL6OPTt4DNhDCt8GkborqiZvplYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkMzRjZDU3LWM2OTEtNGU2Yy1iOWU3LWJmNjFlNDM5M2U1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ygwDQYJKoZIhvcNAQELBQADggEBACD7g3Mat9VhSNzUJ6PG MjvzA1aZ4zlgKKSj/VRg9Aq556ErifjfQNRWPSnK1cmBg/x1apuQvV/UApcHtlnS FIYrohXvcY5w7EE+aBYTg9ljYZoIufyaVrluzKjrgbKEUh1rHanqjPZRsZUq8xaq tm3O+P1Y4IW3znSibVtz2YjuJlR1Yu5yEAdqMu0ZMm1AjaD+Kll0Ob289t9t8v6X HL8KrR7rRq/RBxNApJcJJfQuCQ+wZGxhq4E0VNxyhI8md9j9nNlfL9xmK4HgT7IB 2sp2u7SIv8ZiWeWvPUkyLujPD/+I1W1moUyDxzBXAELUBCUnxSdS4TYC9uevyapK +d8= -----END CERTIFICATE-----Generated at Sun Nov 23 05:41:27 2025 by rpki-client