This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa File: cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa (raw, json) Hash identifier: uFFgLJIYjx6fuIc2jGrBMtjhkvRdi5SlPosNPxmcy3Q= Subject key identifier: 36:DD:44:BA:E3:E9:C2:23:15:31:66:7A:16:49:BF:12:41:70:DB:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A9258CA2415E24E4AE9F64196BD05DBA304804F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa Signing time: Tue 18 Nov 2025 00:01:03 +0000 ROA not before: Tue 18 Nov 2025 00:01:03 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28:8000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:92:58:ca:24:15:e2:4e:4a:e9:f6:41:96:bd:05:db:a3:04:80:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 18 00:01:03 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=497a56c6fdd4110b347f99044b50e7b1228c8c29bbbd225b0bbdea5ef2659f1a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:29:fd:66:e2:f6:0f:f8:ac:2b:df:21:c0: 2d:42:54:e7:0a:2e:5f:39:9e:46:ce:00:f7:cc:62: 86:28:02:dd:b8:30:c7:23:43:29:ca:4f:ff:a5:2b: 3b:28:87:dd:c5:0f:d1:26:ef:1c:df:27:6e:83:10: db:a1:1d:4c:f9:b4:7d:6d:0f:fc:9e:62:2b:12:f6: d1:ee:78:66:38:a4:0c:f2:54:1e:07:cd:6b:19:a9: d2:83:33:dd:b0:37:89:fb:5d:07:5f:cd:e6:1b:11: e3:74:dc:21:a3:23:02:5b:4f:bd:23:5e:f7:6e:b9: 66:95:02:6d:7f:04:cf:ae:48:97:90:5a:3e:32:ea: 35:93:0d:7a:4b:4a:cf:b2:f7:68:ab:95:53:85:f5: 13:7a:59:bc:f1:8b:0c:70:ef:7f:f7:94:02:54:bd: 4d:5c:38:75:4d:68:43:97:f4:a0:02:04:47:9a:39: 8a:e2:11:35:9a:3b:c7:90:ab:72:b0:43:e0:50:1b: 91:6d:96:c9:92:f9:3a:55:bf:a0:a5:9c:e1:37:bd: 66:40:2d:36:99:f7:00:1b:f6:9e:43:da:cc:8b:6f: 1a:9e:e9:e3:ba:b5:71:83:9b:4f:94:3a:c4:4c:8f: fd:1e:8a:0c:c8:4c:89:15:db:af:56:09:2b:67:a7: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DD:44:BA:E3:E9:C2:23:15:31:66:7A:16:49:BF:12:41:70:DB:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc7f81a9-6f4b-42c4-80d7-ad99343f49e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28:8000::/37 Signature Algorithm: sha256WithRSAEncryption 05:81:4a:01:90:05:30:7c:a6:6c:77:db:8f:51:3f:1f:b8:e4: 79:47:91:f4:6f:3b:34:b1:8c:ea:f4:71:88:d2:1d:ec:ef:a7: ce:ee:68:a2:bc:14:13:df:ad:df:4d:3d:11:d3:72:dd:62:8c: 44:2c:49:e0:11:5c:32:aa:45:0b:85:68:c1:f6:2c:43:e0:7c: 03:b8:c8:f8:1c:aa:39:e8:a1:e1:df:b7:d6:ab:dc:82:30:08: da:d3:98:55:57:83:3a:8b:2d:63:cb:27:ca:6c:a2:18:90:0a: d5:59:79:ed:7c:0d:5d:2d:45:95:bc:21:17:57:3a:dc:e3:03: 8e:50:6e:d5:be:bc:ce:20:a5:c0:47:7a:2e:a7:db:87:e7:2e: b1:60:80:66:c0:96:ed:26:bb:ea:f8:d5:8b:4e:dc:83:7a:df: c2:d5:9c:6d:51:e3:d2:ce:44:3f:49:25:b4:0c:1b:8b:a6:28: 85:99:69:ab:b4:fe:63:33:78:23:17:d1:c2:92:70:e8:e8:99: da:c4:d2:cc:a0:76:92:23:23:de:09:01:b7:be:a5:60:27:16: a1:59:ac:3e:01:e4:44:e3:4d:75:1a:22:0b:49:b1:1b:bc:17: 1b:57:a4:7a:16:52:44:84:57:aa:b1:bf:82:b9:a6:ba:bf:4f: aa:64:47:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSpJYyiQV4k5K6fZBlr0F26MEgE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExODAwMDEwM1oX DTI2MDIxNjIzNTk1OVowejFJMEcGA1UEBRNANDk3YTU2YzZmZGQ0MTEwYjM0N2Y5 OTA0NGI1MGU3YjEyMjhjOGMyOWJiYmQyMjViMGJiZGVhNWVmMjY1OWYxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt34p/Wbi9g/4rCvfIcAtQlTnCi5f OZ5GzgD3zGKGKALduDDHI0Mpyk//pSs7KIfdxQ/RJu8c3ydugxDboR1M+bR9bQ/8 nmIrEvbR7nhmOKQM8lQeB81rGanSgzPdsDeJ+10HX83mGxHjdNwhoyMCW0+9I173 brlmlQJtfwTPrkiXkFo+Muo1kw16S0rPsvdoq5VThfUTelm88YsMcO9/95QCVL1N XDh1TWhDl/SgAgRHmjmK4hE1mjvHkKtysEPgUBuRbZbJkvk6Vb+gpZzhN71mQC02 mfcAG/aeQ9rMi28anunjurVxg5tPlDrETI/9HooMyEyJFduvVgkrZ6dXRwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDbdRLrj6cIjFTFmehZJvxJBcNvaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NjN2Y4MWE5LTZmNGItNDJjNC04MGQ3LWFkOTkzNDNmNDllMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKIAwDQYJKoZIhvcNAQELBQADggEBAAWBSgGQBTB8pmx3249R Px+45HlHkfRvOzSxjOr0cYjSHezvp87uaKK8FBPfrd9NPRHTct1ijEQsSeARXDKq RQuFaMH2LEPgfAO4yPgcqjnooeHft9ar3IIwCNrTmFVXgzqLLWPLJ8psohiQCtVZ ee18DV0tRZW8IRdXOtzjA45QbtW+vM4gpcBHei6n24fnLrFggGbAlu0mu+r41YtO 3IN638LVnG1R49LORD9JJbQMG4umKIWZaau0/mMzeCMX0cKScOjomdrE0sygdpIj I94JAbe+pWAnFqFZrD4B5ETjTXUaIgtJsRu8FxtXpHoWUkSEV6qxv4K5prq/T6pk R3g= -----END CERTIFICATE-----Generated at Sun Nov 23 05:41:27 2025 by rpki-client