This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa File: 8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa (raw, json) Hash identifier: TOP0Cv+RVtI3VAU/qLE2iXIPHkRTTvoeKxU0GkNQgQk= Subject key identifier: F3:EC:32:0F:25:4B:67:3A:1A:F8:28:16:1F:0F:04:D7:B9:08:68:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C3378F40CF0A77176318CA0C0E995BD7E46DA18 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa Signing time: Sat 08 Nov 2025 00:01:12 +0000 ROA not before: Sat 08 Nov 2025 00:01:12 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:33:78:f4:0c:f0:a7:71:76:31:8c:a0:c0:e9:95:bd:7e:46:da:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:01:12 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=39ea4af51385d94ff6fe457b0155915b8488472beedb147cbd921574fa3fcfba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:ff:d4:f3:f3:2a:d2:1d:fb:8c:7c:26:1d: cc:61:2b:0f:77:e3:40:53:37:eb:4d:9a:cd:b3:71: d3:09:f6:4c:a4:47:da:01:d8:90:ef:7d:52:b5:7b: 39:d9:ff:63:43:62:23:9d:de:a9:52:b8:8a:f4:eb: 4c:96:ba:05:82:cb:5a:8a:56:86:e3:75:dc:7a:bf: d3:83:4b:4a:ca:1f:8d:f9:24:3e:eb:14:77:c6:5e: fd:d1:9e:e4:ad:41:62:28:3e:78:cf:3a:0f:53:c2: 34:fc:4e:d8:1b:dc:52:6c:f1:9f:4f:89:9f:83:41: e2:db:98:19:89:f9:b8:3a:aa:19:6d:dd:ac:66:8c: c8:a1:b4:a4:38:61:40:29:20:2d:6c:c9:91:ce:c1: 7d:f6:09:4f:8c:31:17:cd:d1:9b:5a:e7:c1:48:ab: 5a:d9:e3:9f:02:66:01:08:cc:42:c7:21:19:ff:27: 47:b7:3e:ce:2f:be:9d:ce:23:f8:45:ed:61:b0:af: d9:59:cf:0f:48:a2:71:78:3b:ce:ef:ef:79:0b:a0: b2:d1:40:2a:c0:c7:8e:1d:da:2f:79:1e:ad:1b:26: 16:f3:4a:2a:6e:12:da:bd:d9:00:7b:df:f7:da:92: 02:a3:94:c2:7e:ed:42:f1:26:04:51:bd:01:3b:91: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EC:32:0F:25:4B:67:3A:1A:F8:28:16:1F:0F:04:D7:B9:08:68:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bc7f9b2-dbc3-4b20-a592-a46685e789c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c000::/40 Signature Algorithm: sha256WithRSAEncryption 30:c6:64:5c:9f:69:69:25:51:f8:8a:d9:dd:11:4f:9e:6a:60: 1f:9b:6a:71:bd:58:2f:9e:55:c0:f9:11:e7:f3:31:58:d8:ea: 4e:3f:f6:fa:61:4c:1f:31:d7:36:ac:a1:3c:50:51:5a:79:5b: c7:60:d9:83:6b:02:45:4f:a1:50:8f:13:8e:3e:4c:3d:36:9f: 56:be:94:76:cc:f2:aa:6e:09:bd:14:09:c7:fb:e2:46:9d:82: 25:33:f2:ca:30:f6:28:14:4f:aa:b2:df:4f:f1:1b:b1:d3:a1: a1:bc:99:d7:1b:58:98:4f:15:0f:47:57:a8:d0:c3:98:80:c9: 6a:11:c1:5f:e0:66:f6:68:99:ac:c3:6a:15:77:fc:62:cd:22: 21:ff:17:b7:ab:4b:e1:e9:f0:1a:a0:30:22:50:0b:6d:a8:8d: 8e:7f:7e:b0:8c:f2:99:29:86:07:fd:9b:1a:69:ca:24:f8:58: 55:49:c8:ad:42:b6:c2:76:78:c6:3a:52:91:66:85:49:b9:59: 81:c6:48:81:8a:c8:92:46:7a:0d:7f:ac:2f:c7:86:0f:07:59: 99:22:28:6c:4f:32:e8:37:6d:e7:28:a9:23:f0:6d:d9:9f:a3: 79:92:29:6a:76:cc:e2:28:1c:84:d8:fe:f4:45:bf:60:b6:b7: ed:ea:8a:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPDN49Azwp3F2MYygwOmVvX5G2hgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDExMloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAMzllYTRhZjUxMzg1ZDk0ZmY2ZmU0 NTdiMDE1NTkxNWI4NDg4NDcyYmVlZGIxNDdjYmQ5MjE1NzRmYTNmY2ZiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JX/1PPzKtId+4x8Jh3MYSsPd+NA UzfrTZrNs3HTCfZMpEfaAdiQ731StXs52f9jQ2Ijnd6pUriK9OtMlroFgstailaG 43Xcer/Tg0tKyh+N+SQ+6xR3xl790Z7krUFiKD54zzoPU8I0/E7YG9xSbPGfT4mf g0Hi25gZifm4OqoZbd2sZozIobSkOGFAKSAtbMmRzsF99glPjDEXzdGbWufBSKta 2eOfAmYBCMxCxyEZ/ydHtz7OL76dziP4Re1hsK/ZWc8PSKJxeDvO7+95C6Cy0UAq wMeOHdoveR6tGyYW80oqbhLavdkAe9/32pICo5TCfu1C8SYEUb0BO5G4bwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPPsMg8lS2c6GvgoFh8PBNe5CGgnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiYzdmOWIyLWRiYzMtNGIyMC1hNTkyLWE0NjY4NWU3ODljNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+8AwDQYJKoZIhvcNAQELBQADggEBADDGZFyfaWklUfiK2d0R T55qYB+banG9WC+eVcD5EefzMVjY6k4/9vphTB8x1zasoTxQUVp5W8dg2YNrAkVP oVCPE44+TD02n1a+lHbM8qpuCb0UCcf74kadgiUz8sow9igUT6qy30/xG7HToaG8 mdcbWJhPFQ9HV6jQw5iAyWoRwV/gZvZomazDahV3/GLNIiH/F7erS+Hp8BqgMCJQ C22ojY5/frCM8pkphgf9mxppyiT4WFVJyK1CtsJ2eMY6UpFmhUm5WYHGSIGKyJJG eg1/rC/Hhg8HWZkiKGxPMug3becoqSPwbdmfo3mSKWp2zOIoHITY/vRFv2C2t+3q ivU= -----END CERTIFICATE-----Generated at Sun Nov 23 05:41:36 2025 by rpki-client