This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa File: 964875b1-60c6-4631-a709-ba5faa0c06e7.roa (raw, json) Hash identifier: QDzf0xDrddBANdsNiFTOUPQ5A6PzDrJCmk1Hxq8JwKQ= Subject key identifier: 55:A2:F5:88:3A:66:6D:1D:F8:AC:10:98:56:C6:2C:DB:BB:D8:C0:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1711ED18EF6E6FF8D7303E493BEE07C9EE5485D6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa Signing time: Sat 08 Nov 2025 00:00:43 +0000 ROA not before: Sat 08 Nov 2025 00:00:43 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:11:ed:18:ef:6e:6f:f8:d7:30:3e:49:3b:ee:07:c9:ee:54:85:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:00:43 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=758fb3a712a407a0bddd9456cf419f95d921bc17cb792f206c1ceaeb5288a261, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:d8:b7:5e:05:9b:c3:2b:04:e1:4a:50:52: c1:b7:19:d2:02:0f:30:75:67:b0:e6:a3:a2:97:52: f5:d3:ec:68:e4:4f:92:9b:c4:4a:51:81:6b:8a:6b: b9:ce:90:c5:31:56:9a:7d:8f:46:94:9a:78:01:78: 94:3f:d3:f9:06:b3:82:b7:46:1a:75:d5:2c:da:1f: 12:37:e5:8b:b6:aa:d2:36:3b:16:3c:df:02:a4:26: 6c:50:55:35:32:dc:16:38:38:ff:fb:1e:9b:9b:21: 10:99:ae:cb:9d:d1:e1:50:1c:ed:6c:5c:c7:65:8c: 56:23:52:2d:61:23:ba:3a:40:35:6d:4b:cd:87:37: 56:43:63:ba:c0:ac:b7:bf:73:39:68:c8:cd:c7:7f: 9b:d9:1a:1f:b9:f3:9a:70:77:f6:98:33:a3:08:3d: 3e:45:ca:54:14:58:a4:bb:a2:35:e5:3a:06:38:81: 55:b5:55:11:b5:64:6d:ef:5a:40:20:19:7e:d3:a9: 18:bb:07:50:cb:59:64:44:2b:ef:e0:22:f6:a4:f7: 55:88:ab:d3:92:66:3a:31:0e:34:e9:b5:c4:31:91: 4c:d7:2f:c8:2c:0b:df:99:c6:1f:1f:b9:2b:ce:35: 95:e4:d0:b8:f6:ce:d0:fa:c7:4c:01:08:95:73:bd: 7b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:F5:88:3A:66:6D:1D:F8:AC:10:98:56:C6:2C:DB:BB:D8:C0:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:2000::/40 Signature Algorithm: sha256WithRSAEncryption 38:0a:f9:92:42:1a:b8:1a:b1:5e:0b:ce:cd:70:eb:dc:0f:d1: 8f:19:f7:a3:c0:03:08:a5:fb:a2:6e:83:57:69:05:70:24:93: 0d:9f:f2:f8:c9:8e:f3:e8:6b:7a:92:e5:24:e1:38:ca:d4:34: 78:b6:f0:95:2b:ee:5f:24:7d:6e:0e:11:87:da:37:36:57:39: 8a:df:aa:2a:d2:9f:0a:93:43:48:a3:c6:04:92:10:73:5e:5a: 90:f6:a9:c0:0d:ca:2c:4a:e2:2f:7c:bc:65:12:c5:81:a1:86: e2:29:13:ce:40:a2:1b:73:62:b9:ac:3c:17:14:e4:36:a4:2f: 81:34:a4:02:71:1c:34:9e:f4:37:33:8e:d7:58:16:91:da:af: 17:7e:0d:24:67:aa:3f:1e:b9:bd:b0:e5:20:8d:80:d7:84:96: eb:11:fb:04:28:1b:69:7b:1c:ec:34:28:d8:89:f6:b2:cb:87: 46:18:92:5b:bc:e3:92:c6:b1:64:33:40:a0:69:46:39:94:f0: be:5f:52:7d:92:3e:4a:58:f8:d9:0c:f3:7c:47:de:57:6d:0e: 38:e9:df:2c:42:68:71:25:07:e1:85:f5:88:19:94:f9:db:c3: b2:ed:b4:cd:d1:7a:83:fc:f8:f4:3c:7c:56:f7:98:36:ff:87: 2a:f3:86:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFxHtGO9ub/jXMD5JO+4Hye5UhdYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDA0M1oX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNANzU4ZmIzYTcxMmE0MDdhMGJkZGQ5 NDU2Y2Y0MTlmOTVkOTIxYmMxN2NiNzkyZjIwNmMxY2VhZWI1Mjg4YTI2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoybYt14Fm8MrBOFKUFLBtxnSAg8w dWew5qOil1L10+xo5E+Sm8RKUYFrimu5zpDFMVaafY9GlJp4AXiUP9P5BrOCt0Ya ddUs2h8SN+WLtqrSNjsWPN8CpCZsUFU1MtwWODj/+x6bmyEQma7LndHhUBztbFzH ZYxWI1ItYSO6OkA1bUvNhzdWQ2O6wKy3v3M5aMjNx3+b2RofufOacHf2mDOjCD0+ RcpUFFiku6I15ToGOIFVtVURtWRt71pAIBl+06kYuwdQy1lkRCvv4CL2pPdViKvT kmY6MQ406bXEMZFM1y/ILAvfmcYfH7krzjWV5NC49s7Q+sdMAQiVc717owIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFWi9Yg6Zm0d+KwQmFbGLNu72MCLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk2NDg3NWIxLTYwYzYtNDYzMS1hNzA5LWJhNWZhYTBjMDZlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+yAwDQYJKoZIhvcNAQELBQADggEBADgK+ZJCGrgasV4Lzs1w 69wP0Y8Z96PAAwil+6Jug1dpBXAkkw2f8vjJjvPoa3qS5SThOMrUNHi28JUr7l8k fW4OEYfaNzZXOYrfqirSnwqTQ0ijxgSSEHNeWpD2qcANyixK4i98vGUSxYGhhuIp E85AohtzYrmsPBcU5DakL4E0pAJxHDSe9DczjtdYFpHarxd+DSRnqj8eub2w5SCN gNeElusR+wQoG2l7HOw0KNiJ9rLLh0YYklu845LGsWQzQKBpRjmU8L5fUn2SPkpY +NkM83xH3ldtDjjp3yxCaHElB+GF9YgZlPnbw7LttM3ReoP8+PQ8fFb3mDb/hyrz hgM= -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:59 2025 by rpki-client