This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18380aa7-2186-4203-a5bc-3e944eecd5f9.roa File: 18380aa7-2186-4203-a5bc-3e944eecd5f9.roa (raw, json) Hash identifier: syEPZZT+1txW+uP+S2eqL0AX1+KVb+FiA9DSLUeQVMg= Subject key identifier: 2C:FA:01:F3:B5:44:38:76:5C:65:58:36:01:F6:02:CB:1F:D9:05:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4386ED6847E2D0A44E2A5F97EA188324A3559D64 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18380aa7-2186-4203-a5bc-3e944eecd5f9.roa Signing time: Sun 23 Nov 2025 00:20:07 +0000 ROA not before: Sun 23 Nov 2025 00:20:07 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:86:ed:68:47:e2:d0:a4:4e:2a:5f:97:ea:18:83:24:a3:55:9d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:20:07 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=517a2d1e62f7cd1e139d92e1f04156ba705dcb1346b83ca7e9032fca4f36071f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:83:cf:92:07:e9:ea:08:6c:03:26:1e:b9: 65:c5:2f:8f:b9:f3:92:f0:5e:38:ec:43:67:e4:5f: b8:3d:70:70:04:db:82:ce:5b:25:d2:f6:c3:8b:53: 44:e4:b7:a7:63:e1:4d:d0:17:5b:70:d7:c9:e2:5a: a4:ce:7b:fc:b1:f7:b7:cf:09:fa:4b:4c:45:d0:47: a6:e5:c3:bb:d2:8f:9e:15:4a:ee:2d:5e:a2:8d:b0: d6:43:9b:15:bb:11:c0:b9:db:7a:60:35:af:22:96: 09:4e:4f:2a:3c:32:04:28:03:5f:7c:40:11:a8:31: a4:4f:14:80:c2:e0:76:b7:a9:03:09:02:6a:c9:9f: 22:a1:a5:f6:23:2f:e8:e2:42:a1:70:29:11:72:21: 23:c3:79:eb:4c:a0:8c:94:0d:d1:67:73:ad:53:0e: 1b:7d:8e:85:f0:62:af:bc:64:a1:4e:0b:5c:d4:eb: bd:a5:74:84:8a:d3:19:9a:6c:09:46:f9:0b:11:4c: 43:11:5d:45:83:35:a0:24:45:db:34:67:1f:19:b0: ad:f7:c6:f5:2e:ff:32:03:75:db:b7:29:b6:a8:8f: 52:44:36:bb:f1:30:16:94:ce:fa:de:02:72:cd:78: aa:89:6a:e4:fb:67:99:8e:ed:5a:b2:22:15:f6:89: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FA:01:F3:B5:44:38:76:5C:65:58:36:01:F6:02:CB:1F:D9:05:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/18380aa7-2186-4203-a5bc-3e944eecd5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:0a:b8:fa:02:c8:1d:0c:31:e5:98:c4:ff:d0:31:d1:89:e0: b1:ad:18:8e:c3:d8:50:44:86:3d:74:76:22:2a:2a:fd:91:9d: ae:27:bf:ef:8c:35:8a:f4:f1:2a:66:1c:22:ed:24:5f:03:b3: 2e:e4:6e:85:5e:30:d3:4a:72:ec:b4:2c:92:a4:24:27:52:5d: a8:3a:7d:05:93:86:04:b0:5f:9a:a8:ad:11:4c:3c:4a:0f:4c: 75:1b:f6:22:84:e8:0e:ff:78:17:ad:0f:d6:d1:10:74:2e:cc: e5:cb:3c:60:11:4c:6c:65:17:a7:e7:bb:89:b6:b7:0f:ca:13: d3:32:ae:bc:09:e1:db:79:a4:06:9e:50:10:18:f5:25:cf:60: 2a:37:53:cc:43:5a:33:39:ff:5f:ec:d3:0a:db:c2:a6:b2:12: 85:19:d6:81:80:44:4b:7d:3c:97:3b:6d:2a:93:31:00:7f:b8: 0c:3b:4d:e8:0c:39:f7:fe:21:09:21:1a:f4:8c:6e:5d:92:33: 94:b1:f8:5f:71:fe:af:63:31:22:dc:8e:09:9d:c6:ee:1b:05: 44:13:fc:af:be:78:1d:cc:45:fa:1e:f2:05:6b:dc:de:cb:8c: 64:22:76:05:61:eb:69:d2:29:06:c7:1d:ee:80:81:05:80:f2: 76:55:1c:54 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQ4btaEfi0KROKl+X6hiDJKNVnWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMjAwN1oX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNANTE3YTJkMWU2MmY3Y2QxZTEzOWQ5 MmUxZjA0MTU2YmE3MDVkY2IxMzQ2YjgzY2E3ZTkwMzJmY2E0ZjM2MDcxZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RGDz5IH6eoIbAMmHrllxS+PufOS 8F447ENn5F+4PXBwBNuCzlsl0vbDi1NE5LenY+FN0BdbcNfJ4lqkznv8sfe3zwn6 S0xF0Eem5cO70o+eFUruLV6ijbDWQ5sVuxHAudt6YDWvIpYJTk8qPDIEKANffEAR qDGkTxSAwuB2t6kDCQJqyZ8ioaX2Iy/o4kKhcCkRciEjw3nrTKCMlA3RZ3OtUw4b fY6F8GKvvGShTgtc1Ou9pXSEitMZmmwJRvkLEUxDEV1FgzWgJEXbNGcfGbCt98b1 Lv8yA3Xbtym2qI9SRDa78TAWlM763gJyzXiqiWrk+2eZju1asiIV9okkEQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCz6AfO1RDh2XGVYNgH2Assf2QWmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE4MzgwYWE3LTIxODYtNDIwMy1hNWJjLTNlOTQ0ZWVjZDVmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6iDAMA0GCSqGSIb3DQEBCwUAA4IBAQAdCrj6AsgdDDHlmMT/ 0DHRieCxrRiOw9hQRIY9dHYiKir9kZ2uJ7/vjDWK9PEqZhwi7SRfA7Mu5G6FXjDT SnLstCySpCQnUl2oOn0Fk4YEsF+aqK0RTDxKD0x1G/YihOgO/3gXrQ/W0RB0Lszl yzxgEUxsZRen57uJtrcPyhPTMq68CeHbeaQGnlAQGPUlz2AqN1PMQ1ozOf9f7NMK 28KmshKFGdaBgERLfTyXO20qkzEAf7gMO03oDDn3/iEJIRr0jG5dkjOUsfhfcf6v YzEi3I4JncbuGwVEE/yvvngdzEX6HvIFa9zey4xkInYFYetp0ikGxx3ugIEFgPJ2 VRxU -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:11 2025 by rpki-client