This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cb1ff-b15b-4b4e-bd7b-a532e884b784.roa File: fd1cb1ff-b15b-4b4e-bd7b-a532e884b784.roa (raw, json) Hash identifier: +nMayu7BlRJsHBZwXkPXBlwDcOD6nxukMoOYn5wsD30= Subject key identifier: 73:71:9E:A8:61:4F:1E:3C:0A:7C:5C:0A:3F:50:28:CD:1C:50:5D:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47728B29840AB7EDE92717B389E0D3A7D3BE030D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cb1ff-b15b-4b4e-bd7b-a532e884b784.roa Signing time: Sun 23 Nov 2025 00:20:08 +0000 ROA not before: Sun 23 Nov 2025 00:20:08 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:72:8b:29:84:0a:b7:ed:e9:27:17:b3:89:e0:d3:a7:d3:be:03:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:20:08 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=587a5e78c82b097102187f27ac1021105229080dd4c1eaca8256a7816f447d95, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:8d:c4:e2:b3:62:3d:02:9b:96:3b:90:6a: a7:71:ed:07:de:82:fb:65:ea:8d:5e:db:ec:cd:3e: 81:ad:57:6b:c7:b4:86:a9:16:42:12:5b:62:fe:43: df:4d:56:18:a9:73:46:1d:2f:7f:77:cc:19:6b:31: 4d:cf:56:97:71:7a:20:ab:18:25:33:3b:08:14:16: 13:41:4c:e5:02:ec:f5:52:73:e4:7b:39:8a:35:92: 8a:78:d9:76:7e:00:e0:26:4b:42:7e:14:85:0b:b7: 70:3c:71:78:c8:86:65:56:d1:0f:3a:ad:c0:40:ac: bb:6c:fc:8d:61:90:51:40:8a:dd:a8:a0:23:1c:40: 90:cd:83:0e:9f:f3:d2:60:21:1a:c2:36:f7:db:f4: 42:13:f7:92:ab:19:55:e2:f5:16:43:2f:cf:da:be: d6:d6:c4:b3:f6:54:96:bf:07:98:e7:23:20:4f:55: fe:5d:81:fd:4b:e7:0c:9e:b7:a4:c2:54:42:15:f4: c4:40:90:b0:cb:7a:b7:58:6b:8c:91:7d:03:70:c6: 46:86:0c:42:9c:77:f1:61:17:0d:76:a4:b0:ce:f9: d7:18:aa:67:cf:2b:f2:b3:1c:0b:f3:fe:72:d5:f7: 7d:8f:6c:a4:1e:2c:bd:ff:22:56:df:01:46:9c:c8: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:71:9E:A8:61:4F:1E:3C:0A:7C:5C:0A:3F:50:28:CD:1C:50:5D:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1cb1ff-b15b-4b4e-bd7b-a532e884b784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:60c0::/46 Signature Algorithm: sha256WithRSAEncryption c9:8c:ea:ac:20:d7:2d:22:78:da:ef:46:2f:af:59:87:ac:d5: 4c:93:a5:fe:8d:ef:68:b1:8a:18:dd:be:65:f2:33:7c:89:57: 75:7d:74:cc:32:8a:17:44:9d:9f:8a:9d:14:b5:22:40:cc:15: 48:b8:92:02:42:b1:8f:41:b3:26:68:27:ad:a3:cc:44:9b:84: 96:fe:2d:e4:b9:e4:f5:65:e0:6b:62:c3:cb:b1:e1:4f:eb:21: fd:5f:80:ee:13:72:26:d9:5e:57:43:1f:00:37:dc:cf:af:0a: 55:0c:5b:ea:03:6b:fb:4a:fd:47:38:89:43:1d:ec:20:b8:c1: 12:68:7c:11:50:5f:4c:47:ea:42:ef:1c:57:50:9a:22:6d:16: 18:55:a8:fa:49:ce:85:92:62:f7:91:52:84:69:49:af:5e:fc: 1a:78:3c:d3:74:bd:16:6c:e3:3d:63:46:47:ba:ff:fd:c3:b5: 26:34:61:da:fe:16:b4:ee:c2:b4:ba:fa:97:38:45:a5:d9:04: 7a:0c:e9:0d:e0:60:28:d9:8a:ff:a6:8c:aa:19:e9:84:2f:e6: d5:89:0b:b5:33:d9:fb:9b:ca:4e:e2:78:b8:e8:5a:79:ab:c8: c8:16:60:f6:96:56:03:6e:6a:b7:ba:c1:37:bf:2a:0d:20:b8: 14:0b:9e:70 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUR3KLKYQKt+3pJxezieDTp9O+Aw0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMjAwOFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNANTg3YTVlNzhjODJiMDk3MTAyMTg3 ZjI3YWMxMDIxMTA1MjI5MDgwZGQ0YzFlYWNhODI1NmE3ODE2ZjQ0N2Q5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCiNxOKzYj0Cm5Y7kGqnce0H3oL7 ZeqNXtvszT6BrVdrx7SGqRZCElti/kPfTVYYqXNGHS9/d8wZazFNz1aXcXogqxgl MzsIFBYTQUzlAuz1UnPkezmKNZKKeNl2fgDgJktCfhSFC7dwPHF4yIZlVtEPOq3A QKy7bPyNYZBRQIrdqKAjHECQzYMOn/PSYCEawjb32/RCE/eSqxlV4vUWQy/P2r7W 1sSz9lSWvweY5yMgT1X+XYH9S+cMnrekwlRCFfTEQJCwy3q3WGuMkX0DcMZGhgxC nHfxYRcNdqSwzvnXGKpnzyvysxwL8/5y1fd9j2ykHiy9/yJW3wFGnMjE0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHNxnqhhTx48CnxcCj9QKM0cUF0bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZkMWNiMWZmLWIxNWItNGI0ZS1iZDdiLWE1MzJlODg0Yjc4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba82DAMA0GCSqGSIb3DQEBCwUAA4IBAQDJjOqsINctInja70Yv r1mHrNVMk6X+je9osYoY3b5l8jN8iVd1fXTMMooXRJ2fip0UtSJAzBVIuJICQrGP QbMmaCeto8xEm4SW/i3kueT1ZeBrYsPLseFP6yH9X4DuE3Im2V5XQx8AN9zPrwpV DFvqA2v7Sv1HOIlDHewguMESaHwRUF9MR+pC7xxXUJoibRYYVaj6Sc6FkmL3kVKE aUmvXvwaeDzTdL0WbOM9Y0ZHuv/9w7UmNGHa/ha07sK0uvqXOEWl2QR6DOkN4GAo 2Yr/poyqGemEL+bViQu1M9n7m8pO4ni46Fp5q8jIFmD2llYDbmq3usE3vyoNILgU C55w -----END CERTIFICATE-----Generated at Sun Nov 23 05:41:26 2025 by rpki-client