This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa File: 0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa (raw, json) Hash identifier: H/VdUXi+DLgr5tA335+6bjJIU2r2srOsVicG/8PmMnQ= Subject key identifier: EC:16:CD:5E:73:9C:CA:E4:AB:B0:63:21:18:EE:0E:55:BF:24:2A:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0291204D4E6EB74D67B65A72903E08E01907758F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa Signing time: Tue 02 Dec 2025 00:20:53 +0000 ROA not before: Tue 02 Dec 2025 00:20:53 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:91:20:4d:4e:6e:b7:4d:67:b6:5a:72:90:3e:08:e0:19:07:75:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:20:53 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=ad3c5da13c236011c497cce2cdb26f398de4bbeded4792fc540f144eb01a0d74, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:b1:cd:07:79:fe:d9:62:b8:3d:23:84:d4: bb:c9:5f:d3:e7:c6:1b:f5:5e:05:50:ec:b9:d1:c5: 6d:1a:93:31:63:f4:28:08:69:d7:1e:a0:d2:9c:15: f1:cb:1d:4b:cb:0f:9a:0d:bf:fc:4e:ba:c5:1c:52: 81:e4:ee:1c:50:c9:fa:12:a3:45:23:c1:e0:c9:58: da:ea:5d:6b:49:52:94:fa:5d:f3:f2:e9:67:60:ee: 24:e5:8a:8d:b5:8a:12:94:40:8c:ba:b4:66:aa:9f: 9e:97:4a:d8:18:bd:c9:ee:63:29:02:c1:97:d8:0e: 45:9d:90:cc:28:16:26:87:89:a6:a2:af:c2:37:61: e2:7d:83:15:e1:dd:d1:3c:38:31:9c:f5:dd:83:13: 8b:33:75:03:02:1b:d9:7f:f4:34:1a:3d:c4:b7:90: 2f:98:f3:43:3d:86:4d:bb:75:7a:dd:fe:57:5d:76: a9:89:89:2b:1f:86:41:b5:a8:af:71:08:6c:81:91: b5:11:4b:77:90:cf:c0:6d:d0:84:8d:58:f9:26:a7: ea:c5:90:3a:d8:0a:1c:56:66:24:5a:9a:eb:c0:97: 01:e7:85:af:f7:1a:f3:a9:22:e8:6e:85:7b:9c:14: 48:75:08:7b:4d:24:10:64:de:ee:f1:dc:46:c4:2a: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:16:CD:5E:73:9C:CA:E4:AB:B0:63:21:18:EE:0E:55:BF:24:2A:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1080::/48 Signature Algorithm: sha256WithRSAEncryption 84:d4:63:5f:2e:ad:13:e9:41:20:f6:1d:2f:9d:01:b5:8a:32: 85:bc:61:5f:80:71:4e:b5:44:e0:53:d4:c6:59:f9:42:ef:3e: d2:b3:84:79:1b:2a:b6:6d:47:74:70:d0:04:99:64:40:dc:62: 55:4b:0d:71:85:98:44:64:68:f3:e8:85:60:48:c5:23:66:82: 67:5d:33:03:b9:e3:c3:ee:af:91:a2:d7:af:7d:27:25:57:d4: 66:10:3c:10:89:63:9c:dd:11:66:91:cf:79:4d:ad:4a:33:3f: 40:b3:11:56:d5:0c:aa:f7:b7:1d:73:8a:aa:6e:30:69:48:bd: ad:55:77:20:a1:28:3b:22:48:dd:00:d2:2d:66:31:47:55:a9: 5f:42:11:16:40:8c:9e:d3:2d:df:7f:af:aa:8f:74:41:6d:74: d1:33:28:c8:25:37:d0:e3:f5:77:43:b7:95:da:c1:c9:ef:a4: b5:5b:33:37:2c:b6:37:8d:93:bc:10:f2:0e:9a:3c:bd:89:be: 44:e8:6c:85:4f:e7:32:1e:5d:53:74:0f:c0:e9:79:88:bf:a5: 5e:15:6b:ef:29:cc:c4:33:03:a5:ed:7e:ef:b7:4c:c7:a7:47: 2f:ce:9d:20:22:20:b9:bc:d7:e1:35:e1:fb:83:34:f6:a0:57: 84:96:b8:2b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUApEgTU5ut01ntlpykD4I4BkHdY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMjA1M1oX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAYWQzYzVkYTEzYzIzNjAxMWM0OTdj Y2UyY2RiMjZmMzk4ZGU0YmJlZGVkNDc5MmZjNTQwZjE0NGViMDFhMGQ3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0GxzQd5/tliuD0jhNS7yV/T58Yb 9V4FUOy50cVtGpMxY/QoCGnXHqDSnBXxyx1Lyw+aDb/8TrrFHFKB5O4cUMn6EqNF I8HgyVja6l1rSVKU+l3z8ulnYO4k5YqNtYoSlECMurRmqp+el0rYGL3J7mMpAsGX 2A5FnZDMKBYmh4mmoq/CN2HifYMV4d3RPDgxnPXdgxOLM3UDAhvZf/Q0Gj3Et5Av mPNDPYZNu3V63f5XXXapiYkrH4ZBtaivcQhsgZG1EUt3kM/AbdCEjVj5JqfqxZA6 2AocVmYkWprrwJcB54Wv9xrzqSLoboV7nBRIdQh7TSQQZN7u8dxGxCpy/wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOwWzV5znMrkq7BjIRjuDlW/JCruMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlNzRkNGZhLTI3NjgtNGFhMi1hZDVlLWU2MmVkMmI1MDg1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hCAMA0GCSqGSIb3DQEBCwUAA4IBAQCE1GNfLq0T6UEg9h0v nQG1ijKFvGFfgHFOtUTgU9TGWflC7z7Ss4R5Gyq2bUd0cNAEmWRA3GJVSw1xhZhE ZGjz6IVgSMUjZoJnXTMDuePD7q+RotevfSclV9RmEDwQiWOc3RFmkc95Ta1KMz9A sxFW1Qyq97cdc4qqbjBpSL2tVXcgoSg7IkjdANItZjFHValfQhEWQIye0y3ff6+q j3RBbXTRMyjIJTfQ4/V3Q7eV2sHJ76S1WzM3LLY3jZO8EPIOmjy9ib5E6GyFT+cy Hl1TdA/A6XmIv6VeFWvvKczEMwOl7X7vt0zHp0cvzp0gIiC5vNfhNeH7gzT2oFeE lrgr -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:00 2025 by rpki-client