This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040a624e-81b0-4106-99cd-427e9ebc3f62.roa File: 040a624e-81b0-4106-99cd-427e9ebc3f62.roa (raw, json) Hash identifier: o/HsmcYVKninSmfosJAidPaBbVQEPeXWll7k5hwG+NQ= Subject key identifier: 4D:4C:F4:7A:51:CB:3F:0A:4E:AF:F9:B8:23:F4:2E:D7:2A:F0:4B:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44F178DCEC78B888F575EA15E703DA6E6EB5C601 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040a624e-81b0-4106-99cd-427e9ebc3f62.roa Signing time: Sun 30 Nov 2025 00:00:11 +0000 ROA not before: Sun 30 Nov 2025 00:00:11 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f1:78:dc:ec:78:b8:88:f5:75:ea:15:e7:03:da:6e:6e:b5:c6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:00:11 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=d6b2ea36f66cab9260baa38503a3cacbe57e75f2d0c2f167e5aa53293a43c52d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:7e:e4:85:29:ba:3d:dd:a4:85:2c:19:2f: 09:0c:36:56:7e:27:84:0f:b8:bd:63:e5:dc:7a:87: a6:04:63:a2:e5:cf:a2:8b:90:d7:d6:8e:a4:cb:c7: b8:73:6b:a9:38:c9:85:6c:09:d3:05:a4:87:fb:ae: 75:cb:a6:1a:f0:dd:98:56:91:c7:e0:89:f8:cf:7e: 31:dd:57:83:4b:f3:6a:e3:6c:b4:8f:0f:ee:5a:17: fd:df:89:ca:37:7a:8b:49:d8:a7:c9:c0:e4:d3:59: 2d:62:71:9f:9f:db:ed:34:1b:fa:0f:cc:3f:1c:1e: ab:e9:d9:c3:7f:a1:f0:95:c6:56:8a:62:b6:e2:97: b3:b3:71:44:c4:da:db:27:6a:cb:a2:df:ad:e2:72: e5:73:8f:39:e3:f5:d3:63:88:5d:06:3e:37:31:59: 04:24:09:1c:ff:97:31:62:10:b3:da:8a:1d:ef:7a: 45:30:c1:59:1e:be:d8:30:17:67:10:15:cc:4f:97: c3:d3:b6:55:71:d0:d6:62:f3:74:ff:be:26:e2:e3: e9:59:33:fd:ae:fe:d3:1d:cc:65:38:88:06:f2:34: 24:c5:49:24:dd:e7:82:92:85:8f:ef:8b:8b:5b:9a: 63:0c:a2:b9:ed:15:a8:57:8b:e5:ab:84:2f:0c:6a: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:F4:7A:51:CB:3F:0A:4E:AF:F9:B8:23:F4:2E:D7:2A:F0:4B:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040a624e-81b0-4106-99cd-427e9ebc3f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption b3:f6:10:5e:3b:ad:85:ab:13:a0:f9:af:fb:e7:b8:22:a3:5f: d1:8b:45:20:99:a4:cc:29:99:ba:ea:45:8d:c9:47:be:22:63: b6:dc:80:5d:21:df:8e:63:7b:15:05:00:14:bb:e3:b1:5c:8f: ea:ca:c3:98:f9:9a:b4:8a:1f:02:dd:c8:91:cc:18:2a:06:e7: 04:0d:65:3f:86:cc:a9:bb:52:a4:2a:56:5e:bc:ea:bd:f5:51: 1b:08:0b:78:15:e3:d6:28:52:96:5f:c7:e2:c6:57:0f:c1:69: 53:d6:83:ed:76:d7:f4:9b:f2:ea:7c:26:0c:b7:0f:4d:56:48: 1e:43:a1:7a:07:fc:1b:ef:1b:83:f0:8b:0a:82:b4:5f:4d:cb: 6c:4a:a5:ac:af:4e:d1:34:77:49:0d:96:61:99:87:50:33:f6: cc:4c:b6:4e:8c:c6:34:00:88:f3:9e:32:e0:be:74:09:2a:91: 7e:bb:2a:8f:0e:89:27:4c:d1:04:10:76:33:db:22:33:99:02: 3c:5b:13:09:98:e9:9c:91:e6:0a:98:e4:a7:18:ca:a3:b6:54: 49:28:ab:2a:d2:d7:64:43:eb:53:32:ca:f1:f9:e1:8b:4f:65: 28:2e:ae:cb:67:8f:e5:a0:cd:ec:f9:84:93:84:77:4b:5a:6c: 4b:c3:86:7c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURPF43Ox4uIj1deoV5wPabm61xgEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEzMDAwMDAxMVoX DTI2MDIyODIzNTk1OVowejFJMEcGA1UEBRNAZDZiMmVhMzZmNjZjYWI5MjYwYmFh Mzg1MDNhM2NhY2JlNTdlNzVmMmQwYzJmMTY3ZTVhYTUzMjkzYTQzYzUyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5h+5IUpuj3dpIUsGS8JDDZWfieE D7i9Y+XceoemBGOi5c+ii5DX1o6ky8e4c2upOMmFbAnTBaSH+651y6Ya8N2YVpHH 4In4z34x3VeDS/Nq42y0jw/uWhf934nKN3qLSdinycDk01ktYnGfn9vtNBv6D8w/ HB6r6dnDf6HwlcZWimK24pezs3FExNrbJ2rLot+t4nLlc4854/XTY4hdBj43MVkE JAkc/5cxYhCz2ood73pFMMFZHr7YMBdnEBXMT5fD07ZVcdDWYvN0/74m4uPpWTP9 rv7THcxlOIgG8jQkxUkk3eeCkoWP74uLW5pjDKK57RWoV4vlq4QvDGqtoQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE1M9HpRyz8KTq/5uCP0Ltcq8EsNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0MGE2MjRlLTgxYjAtNDEwNi05OWNkLTQyN2U5ZWJjM2Y2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8sDAMA0GCSqGSIb3DQEBCwUAA4IBAQCz9hBeO62FqxOg+a/7 57gio1/Ri0UgmaTMKZm66kWNyUe+ImO23IBdId+OY3sVBQAUu+OxXI/qysOY+Zq0 ih8C3ciRzBgqBucEDWU/hsypu1KkKlZevOq99VEbCAt4FePWKFKWX8fixlcPwWlT 1oPtdtf0m/LqfCYMtw9NVkgeQ6F6B/wb7xuD8IsKgrRfTctsSqWsr07RNHdJDZZh mYdQM/bMTLZOjMY0AIjznjLgvnQJKpF+uyqPDoknTNEEEHYz2yIzmQI8WxMJmOmc keYKmOSnGMqjtlRJKKsq0tdkQ+tTMsrx+eGLT2UoLq7LZ4/loM3s+YSThHdLWmxL w4Z8 -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:23 2025 by rpki-client