This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/981eeaf1-dde4-476a-ab18-7f3e99c4be3d.roa File: 981eeaf1-dde4-476a-ab18-7f3e99c4be3d.roa (raw, json) Hash identifier: xuqnh9QPyNZUgCSyVRB9zyxOa26yzIJVbMw3RmRNmrU= Subject key identifier: 89:C9:AC:09:35:57:B8:D3:B1:4E:18:22:10:B8:5D:6B:47:94:B2:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18DF41856C2B862E98EE6683093EDBF624B83FD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/981eeaf1-dde4-476a-ab18-7f3e99c4be3d.roa Signing time: Tue 18 Nov 2025 00:01:04 +0000 ROA not before: Tue 18 Nov 2025 00:01:04 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da68:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Nov 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:df:41:85:6c:2b:86:2e:98:ee:66:83:09:3e:db:f6:24:b8:3f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 18 00:01:04 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=dd5040528abe3b028c8eedcbcfa3280bc45daa8c7b0e2d1bf568217a50fac894, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:80:72:95:23:15:1a:80:06:2b:5a:79:74: f1:16:af:5c:1a:17:74:95:2b:af:86:cf:6d:78:fd: 1a:92:59:86:83:16:0e:c9:3f:54:16:3e:21:f5:78: 88:fe:b8:b8:ca:b5:c9:2e:08:78:ef:1c:d0:92:ff: 5a:62:7b:00:56:e4:11:74:f9:c9:4b:ef:ae:ce:16: 48:96:8f:0e:f9:30:6c:6e:f9:16:68:81:cf:04:15: f9:34:b5:c3:e8:63:f9:90:52:bf:9d:d7:36:c3:d8: e5:e4:e2:5e:2a:9d:62:af:c3:2b:25:ec:5f:e7:0b: e4:31:93:e0:29:30:5e:78:f6:27:8a:47:5d:fa:d0: d1:89:48:5a:0e:19:c9:90:d9:01:7e:98:07:54:21: da:e2:8c:ac:cf:f6:d7:1e:45:e7:08:a2:69:34:1a: 81:48:c5:e6:d3:7b:cd:02:d1:f1:ff:9c:33:64:6a: 89:a1:a3:b0:bd:60:31:23:0b:ae:c8:af:7d:2f:a0: fb:5f:c3:bd:e9:44:09:ec:47:3d:90:bf:b2:ab:52: c0:0d:a4:b9:e6:ee:bd:5f:3e:71:f7:37:1c:58:e5: 31:90:ff:c8:48:34:c9:ae:9e:ad:eb:92:88:ca:7a: 04:a8:94:cb:06:94:78:0b:4d:c6:c2:79:fe:a1:eb: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C9:AC:09:35:57:B8:D3:B1:4E:18:22:10:B8:5D:6B:47:94:B2:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/981eeaf1-dde4-476a-ab18-7f3e99c4be3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:40c0::/46 Signature Algorithm: sha256WithRSAEncryption 40:21:e4:03:6d:52:3f:d9:df:a0:c2:ab:7c:9f:81:8e:04:03: 66:15:e8:b0:37:c0:d3:93:a2:89:78:f5:15:31:56:2d:98:2c: 93:13:05:de:fc:8a:80:d1:af:f2:a0:44:a4:b6:b6:56:06:ac: aa:77:00:e5:66:66:97:c6:f8:1c:8b:3b:b3:e3:02:dc:f7:4b: 72:33:c2:b1:55:3c:80:45:51:85:db:da:ca:bb:99:77:b8:31: 19:7b:26:6f:49:5b:a2:48:59:26:a4:65:9c:fa:9b:ab:e6:58: 73:6f:68:8d:e3:b9:79:00:fa:e2:b4:94:3f:f9:02:71:26:88: 13:61:d3:84:2f:e7:94:9e:e7:cc:c2:d5:fa:d9:2c:61:a0:b2: e2:bf:46:85:e5:ce:cf:d3:f4:0c:06:af:01:0c:ef:bb:92:9b: 95:cf:38:ff:95:cc:90:8e:0b:72:1d:1b:60:55:1a:8a:ed:5f: 4f:59:7b:3a:d5:0d:d1:47:be:fc:e3:4f:c8:dc:2a:0e:98:54: ad:5c:68:39:96:d3:e5:d5:b2:07:0b:f3:14:88:8f:93:31:56: 31:21:72:b5:0f:c9:7f:8e:27:45:06:7e:83:b4:7e:2e:cb:3e: 81:f0:b0:e1:26:85:e8:2a:f0:4c:d1:15:b2:bf:9a:b8:15:2f: db:b2:a1:18 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGN9BhWwrhi6Y7maDCT7b9iS4P9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExODAwMDEwNFoX DTI2MDIxNjIzNTk1OVowejFJMEcGA1UEBRNAZGQ1MDQwNTI4YWJlM2IwMjhjOGVl ZGNiY2ZhMzI4MGJjNDVkYWE4YzdiMGUyZDFiZjU2ODIxN2E1MGZhYzg5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssqAcpUjFRqABitaeXTxFq9cGhd0 lSuvhs9teP0aklmGgxYOyT9UFj4h9XiI/ri4yrXJLgh47xzQkv9aYnsAVuQRdPnJ S++uzhZIlo8O+TBsbvkWaIHPBBX5NLXD6GP5kFK/ndc2w9jl5OJeKp1ir8MrJexf 5wvkMZPgKTBeePYnikdd+tDRiUhaDhnJkNkBfpgHVCHa4oysz/bXHkXnCKJpNBqB SMXm03vNAtHx/5wzZGqJoaOwvWAxIwuuyK99L6D7X8O96UQJ7Ec9kL+yq1LADaS5 5u69Xz5x9zccWOUxkP/ISDTJrp6t65KIynoEqJTLBpR4C03Gwnn+oeuJkwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFInJrAk1V7jTsU4YIhC4XWtHlLJRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4MWVlYWYxLWRkZTQtNDc2YS1hYjE4LTdmM2U5OWM0YmUzZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaEDAMA0GCSqGSIb3DQEBCwUAA4IBAQBAIeQDbVI/2d+gwqt8 n4GOBANmFeiwN8DTk6KJePUVMVYtmCyTEwXe/IqA0a/yoESktrZWBqyqdwDlZmaX xvgcizuz4wLc90tyM8KxVTyARVGF29rKu5l3uDEZeyZvSVuiSFkmpGWc+pur5lhz b2iN47l5APritJQ/+QJxJogTYdOEL+eUnufMwtX62SxhoLLiv0aF5c7P0/QMBq8B DO+7kpuVzzj/lcyQjgtyHRtgVRqK7V9PWXs61Q3RR77840/I3CoOmFStXGg5ltPl 1bIHC/MUiI+TMVYxIXK1D8l/jidFBn6DtH4uyz6B8LDhJoXoKvBM0RWyv5q4FS/b sqEY -----END CERTIFICATE-----Generated at Sat Nov 22 21:32:59 2025 by rpki-client