This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa File: 43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa (raw, json) Hash identifier: l1Ion1wyxn0zXuxlcvRGn++MmpaEgn2dy56Py3EzO94= Subject key identifier: 65:47:F6:6C:6A:A1:DB:FA:13:E7:81:4D:C2:38:5F:24:17:DA:EC:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01E53664594610F8F63F378F0EBF6F70027FF039 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa Signing time: Wed 03 Dec 2025 00:01:15 +0000 ROA not before: Wed 03 Dec 2025 00:01:15 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e5:36:64:59:46:10:f8:f6:3f:37:8f:0e:bf:6f:70:02:7f:f0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 3 00:01:15 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=b809e54405f43e3cca0410b9aa37bf5353da19591378a293347e02783dc51bd6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8b:72:cb:b6:3b:28:d8:97:8e:a0:ad:10:9a: a3:de:92:6e:da:c7:1b:40:c0:c9:04:f1:d8:19:52: d5:71:cd:2f:72:5c:48:cd:af:9f:65:01:6e:51:4c: a1:a6:2c:b0:f9:bf:54:45:98:85:f4:a7:21:07:4d: fd:f6:63:e7:f9:99:92:10:d4:b1:18:7e:71:69:7a: f0:e8:81:16:66:30:7a:53:82:18:9d:29:7d:49:9c: 4a:94:03:4d:09:a6:ab:25:6e:99:55:62:f3:73:9a: cf:d1:6e:d7:4b:35:25:cd:db:21:8c:c7:c0:3d:0d: 0a:30:5c:8e:69:2e:c6:7e:33:e2:7f:38:cb:8b:40: 4d:ad:46:d2:7b:e6:8e:34:47:b8:6e:13:54:91:f6: 4c:4f:27:5b:6e:02:98:dc:af:99:2f:9a:32:bc:d5: 3a:e5:fb:2b:f3:a5:19:76:22:28:8c:5e:af:3f:ee: 04:95:20:93:2a:28:30:ce:cb:51:20:5e:61:68:72: 41:44:57:88:d2:2d:03:ce:ba:a5:21:4a:1e:e5:69: b0:4f:c8:b1:64:58:af:a4:2b:f7:8e:f0:13:74:3d: 82:55:49:1c:ce:98:93:3f:68:87:2f:be:03:9d:e5: 22:21:4d:78:51:f7:3e:8a:6e:e8:04:56:a8:09:58: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:47:F6:6C:6A:A1:DB:FA:13:E7:81:4D:C2:38:5F:24:17:DA:EC:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a800::/40 Signature Algorithm: sha256WithRSAEncryption 88:d8:9a:7b:ea:50:fa:62:4b:a2:03:a1:b0:e2:9c:fd:17:da: 19:74:d6:74:59:d0:ad:8c:f3:60:cf:15:1e:e8:76:8d:3b:dc: a0:3f:df:74:6a:2a:4b:de:f3:8c:62:5f:a2:f4:9c:3b:fa:8a: 57:0f:4a:01:2b:d7:e0:61:a2:e7:ab:1a:d4:cc:a0:a6:36:d6: 7b:b3:b7:fa:71:67:a5:eb:fc:17:7d:38:0d:f4:1a:51:d2:8c: 83:1e:27:f8:1c:e4:1b:3e:8c:eb:f2:4b:17:28:bc:eb:84:d0: 4c:ae:76:89:45:d2:07:7c:32:d4:ac:36:15:11:ff:cd:3d:7b: 0e:9b:1b:a1:45:83:d5:48:f8:07:33:c5:41:98:e0:98:d5:69: 63:10:38:94:b5:7a:12:96:8f:5d:8b:e2:85:75:53:02:5d:39: 6e:a3:37:d6:01:27:0e:77:2e:9c:b9:b2:60:2b:bf:21:f0:bc: 5b:b4:5b:3e:5c:fc:0d:8c:30:31:a3:f0:2f:eb:86:c0:18:a9: cc:af:67:d7:4a:15:39:cc:39:ca:77:2f:92:d4:89:c1:3d:b9: 34:42:50:5d:c1:eb:ab:a5:97:01:7e:76:ed:f3:29:57:45:a2: 7f:e4:a2:53:cd:07:16:62:d6:20:2c:25:25:e8:be:f3:08:73: 60:a5:27:82 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAeU2ZFlGEPj2PzePDr9vcAJ/8DkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMDExNVoX DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNAYjgwOWU1NDQwNWY0M2UzY2NhMDQx MGI5YWEzN2JmNTM1M2RhMTk1OTEzNzhhMjkzMzQ3ZTAyNzgzZGM1MWJkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlItyy7Y7KNiXjqCtEJqj3pJu2scb QMDJBPHYGVLVcc0vclxIza+fZQFuUUyhpiyw+b9URZiF9KchB0399mPn+ZmSENSx GH5xaXrw6IEWZjB6U4IYnSl9SZxKlANNCaarJW6ZVWLzc5rP0W7XSzUlzdshjMfA PQ0KMFyOaS7GfjPifzjLi0BNrUbSe+aONEe4bhNUkfZMTydbbgKY3K+ZL5oyvNU6 5fsr86UZdiIojF6vP+4ElSCTKigwzstRIF5haHJBRFeI0i0DzrqlIUoe5WmwT8ix ZFivpCv3jvATdD2CVUkczpiTP2iHL74DneUiIU14Ufc+im7oBFaoCVglMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGVH9mxqodv6E+eBTcI4XyQX2uzaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYTlmYjQzLTZjYzgtNDlmYy05M2Y4LTcwYzk5NDk2YzY3YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAKgwDQYJKoZIhvcNAQELBQADggEBAIjYmnvqUPpiS6IDobDi nP0X2hl01nRZ0K2M82DPFR7odo073KA/33RqKkve84xiX6L0nDv6ilcPSgEr1+Bh ouerGtTMoKY21nuzt/pxZ6Xr/Bd9OA30GlHSjIMeJ/gc5Bs+jOvySxcovOuE0Eyu dolF0gd8MtSsNhUR/809ew6bG6FFg9VI+AczxUGY4JjVaWMQOJS1ehKWj12L4oV1 UwJdOW6jN9YBJw53Lpy5smArvyHwvFu0Wz5c/A2MMDGj8C/rhsAYqcyvZ9dKFTnM Ocp3L5LUicE9uTRCUF3B66ullwF+du3zKVdFon/kolPNBxZi1iAsJSXovvMIc2Cl J4I= -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:22 2025 by rpki-client