This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa File: 359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa (raw, json) Hash identifier: 6JtcMK1q7HKaixUFG+A2HpESMdmA69Fvcv0xRtuevNI= Subject key identifier: 41:F0:4A:BE:0C:4A:C5:A4:CD:35:1D:E2:0C:3F:F0:78:F6:FA:48:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7BD4ECE730539EC722B0528A16E0D00568485FAE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa Signing time: Thu 27 Nov 2025 00:00:51 +0000 ROA not before: Thu 27 Nov 2025 00:00:51 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d4:ec:e7:30:53:9e:c7:22:b0:52:8a:16:e0:d0:05:68:48:5f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 27 00:00:51 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=367d546e18e288d09e44abfbf4dfac7ccd8ab67b8f107d4145dda9a6cb0a76ea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:3d:1b:91:fb:92:bf:df:e8:3a:f1:23:03: 15:be:b6:8c:9f:dc:1d:1d:df:f4:ea:10:1f:93:b5: 3c:22:e7:19:2d:17:d6:17:80:49:15:6e:2b:99:7e: 39:f7:b2:88:5d:d4:d0:68:cb:15:e2:f2:5e:1e:10: 8f:b9:65:12:50:93:c3:74:f9:04:84:f4:b2:01:6b: 42:81:f0:1d:99:1e:5f:a5:46:fd:42:3b:28:7d:58: 37:31:4a:1f:29:53:9e:c9:62:d9:70:da:81:b0:7f: f2:52:cf:99:73:19:3d:dc:2b:f7:e1:b5:0f:1e:67: ca:e8:91:86:79:b0:ff:e4:4a:ef:67:51:9e:ad:eb: 5f:06:59:8c:c6:b1:8b:d1:4a:c7:dc:04:62:16:73: 40:eb:22:e1:6c:66:80:a0:cf:45:06:eb:c2:61:41: 95:fc:95:b6:7b:34:43:6e:a2:f6:6c:76:e9:84:7e: 54:2a:29:68:d4:ff:a1:6b:ef:d9:12:b6:84:e7:12: f5:c4:ce:68:86:7f:5b:78:1b:df:ce:ac:38:59:55: d0:58:fa:a6:12:ae:1b:2c:00:43:71:9e:da:88:35: 12:43:3b:56:c9:ca:bc:12:4d:8d:5f:20:fb:a7:2a: bd:9b:e0:95:7d:bd:e5:1d:12:3b:9a:96:ed:a8:55: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:4A:BE:0C:4A:C5:A4:CD:35:1D:E2:0C:3F:F0:78:F6:FA:48:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/359ec231-6db5-4986-92a6-b2cf6ca2ad72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:9000::/40 Signature Algorithm: sha256WithRSAEncryption a4:7a:b0:59:02:ae:0f:22:53:0f:5c:1e:d9:c7:ac:9b:0b:4e: 97:e8:80:44:ce:f2:04:ea:8f:ba:f6:09:42:d2:b8:3f:ee:27: 4d:f2:5d:3a:cb:48:88:32:02:e6:02:dd:8e:31:2a:2c:44:00: 67:e7:10:cc:a8:67:35:01:f8:f6:66:67:5d:4c:fb:50:e7:1f: 62:d3:4e:e3:83:71:9e:e8:b5:a3:71:3e:e7:59:66:c1:bb:ee: df:1f:6b:84:f6:14:6c:74:21:1c:aa:f2:ab:6e:d8:0d:53:da: 80:ce:c2:11:08:42:34:37:4a:85:13:32:c9:79:64:da:7b:ff: 0d:6e:21:ab:5a:e8:76:50:60:00:79:32:b1:3b:2c:3b:2f:ee: 3c:88:27:32:6d:5e:a8:b8:70:74:60:b7:9c:30:f7:1b:04:81: c9:10:eb:03:29:7a:13:f2:62:bd:a1:00:ab:f7:73:cc:f6:8d: db:a9:a9:0c:0a:aa:83:b8:28:71:52:30:5a:5e:25:fd:ed:a0: ea:b1:5f:23:9a:2e:10:04:8b:59:7b:11:ab:68:e6:41:7b:28: 5d:fd:82:18:60:50:23:38:f5:51:7d:08:6a:42:7f:77:1d:ad: c9:d8:89:5b:34:5f:c7:0c:9f:cb:45:2c:a4:50:6e:65:cd:52: ac:b9:c2:b4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUe9Ts5zBTnscisFKKFuDQBWhIX64wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNzAwMDA1MVoX DTI2MDIyNTIzNTk1OVowejFJMEcGA1UEBRNAMzY3ZDU0NmUxOGUyODhkMDllNDRh YmZiZjRkZmFjN2NjZDhhYjY3YjhmMTA3ZDQxNDVkZGE5YTZjYjBhNzZlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWQ9G5H7kr/f6DrxIwMVvraMn9wd Hd/06hAfk7U8IucZLRfWF4BJFW4rmX4597KIXdTQaMsV4vJeHhCPuWUSUJPDdPkE hPSyAWtCgfAdmR5fpUb9QjsofVg3MUofKVOeyWLZcNqBsH/yUs+Zcxk93Cv34bUP HmfK6JGGebD/5ErvZ1GeretfBlmMxrGL0UrH3ARiFnNA6yLhbGaAoM9FBuvCYUGV /JW2ezRDbqL2bHbphH5UKilo1P+ha+/ZEraE5xL1xM5ohn9beBvfzqw4WVXQWPqm Eq4bLABDcZ7aiDUSQztWycq8Ek2NXyD7pyq9m+CVfb3lHRI7mpbtqFXgIQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEHwSr4MSsWkzTUd4gw/8Hj2+kgYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM1OWVjMjMxLTZkYjUtNDk4Ni05MmE2LWIyY2Y2Y2EyYWQ3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9pAwDQYJKoZIhvcNAQELBQADggEBAKR6sFkCrg8iUw9cHtnH rJsLTpfogETO8gTqj7r2CULSuD/uJ03yXTrLSIgyAuYC3Y4xKixEAGfnEMyoZzUB +PZmZ11M+1DnH2LTTuODcZ7otaNxPudZZsG77t8fa4T2FGx0IRyq8qtu2A1T2oDO whEIQjQ3SoUTMsl5ZNp7/w1uIata6HZQYAB5MrE7LDsv7jyIJzJtXqi4cHRgt5ww 9xsEgckQ6wMpehPyYr2hAKv3c8z2jdupqQwKqoO4KHFSMFpeJf3toOqxXyOaLhAE i1l7Eato5kF7KF39ghhgUCM49VF9CGpCf3cdrcnYiVs0X8cMn8tFLKRQbmXNUqy5 wrQ= -----END CERTIFICATE-----Generated at Sat Dec 6 11:16:48 2025 by rpki-client