This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44cc0f29-fe31-474f-8576-c1fc3e8a9358.roa File: 44cc0f29-fe31-474f-8576-c1fc3e8a9358.roa (raw, json) Hash identifier: WGabjqmqtGcd/eZ3m4W1iNEHtEgm9BTALv78o6Cvmow= Subject key identifier: 2B:59:38:0B:EE:59:15:BF:68:C2:EC:EC:EE:F6:9A:DA:35:7E:D7:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E3DB2AFDBE6D9A4E80A282381871C42CE91F49B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44cc0f29-fe31-474f-8576-c1fc3e8a9358.roa Signing time: Thu 04 Dec 2025 00:31:01 +0000 ROA not before: Thu 04 Dec 2025 00:31:01 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3d:b2:af:db:e6:d9:a4:e8:0a:28:23:81:87:1c:42:ce:91:f4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:31:01 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=28f1ce9d9c2432894f00a056faacf7869a4b60d26dbc4a285837021422b8e19f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:84:e1:f6:7c:60:62:b5:da:0a:9f:2d:78: 57:69:7a:46:ad:0d:3a:88:d5:30:6c:13:a1:cc:6b: 59:dc:bb:eb:0f:76:64:73:04:53:39:1b:ae:c2:2a: 2f:56:e8:91:e3:80:dc:a0:3e:2d:bc:76:be:25:8b: f1:48:ff:b7:d3:4f:ae:d5:da:ac:12:96:60:c2:7a: ea:9d:97:da:75:10:b2:32:64:09:91:a1:92:7e:4b: 9a:38:7a:28:08:98:48:89:29:81:7f:e4:36:44:e2: 1d:73:07:d4:0d:36:14:a8:3a:63:2f:57:5e:67:f5: 69:ba:d5:10:83:16:19:6b:4c:8a:1b:31:ba:d6:33: c6:b6:4d:0d:3d:1f:59:86:93:bb:b2:49:45:a2:79: 7c:82:77:c5:d4:dd:3a:ff:22:d1:ab:65:a7:39:dd: f7:34:b5:22:e8:55:0c:94:58:ee:c7:07:2b:e0:b4: 4a:4a:c5:8d:29:1a:93:41:7a:27:e9:79:5d:de:e6: fa:ce:16:9c:b0:70:d7:cf:bd:fa:f7:49:02:bd:c9: d9:b4:3c:93:96:59:ac:9a:be:b5:6d:0b:32:72:e1: 48:9a:a5:44:ef:3a:46:23:64:08:0c:c8:72:d5:79: 30:71:a3:a4:f6:11:14:92:c3:39:e5:04:7b:d7:0b: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:38:0B:EE:59:15:BF:68:C2:EC:EC:EE:F6:9A:DA:35:7E:D7:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44cc0f29-fe31-474f-8576-c1fc3e8a9358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:9000::/40 Signature Algorithm: sha256WithRSAEncryption af:60:55:9f:61:96:16:a2:35:02:49:bd:f1:9f:ee:4a:84:d0: b7:ee:ef:6b:a4:ec:91:51:40:5c:66:a1:e2:1c:3e:aa:35:0a: df:e3:fc:af:33:da:fe:3d:39:f9:13:9e:2e:7f:a6:ff:9f:5e: c6:10:59:58:a6:87:22:77:94:d6:61:8d:a4:d5:c4:73:74:1a: 79:9a:bd:02:77:b3:a1:05:d2:43:85:61:75:6d:15:13:52:81: 2c:d5:69:21:f1:7b:53:79:7b:ad:37:51:db:58:71:46:93:6a: 12:5c:f1:85:27:d0:54:a9:f4:49:df:5a:be:95:26:24:fb:66: e8:5c:09:13:5b:6f:18:72:81:16:44:9c:cd:a0:53:25:09:b2: 3b:f3:ba:e1:34:66:21:e7:20:8b:d1:e9:3d:77:49:e3:22:28: 0c:d1:35:30:03:df:7b:9a:bf:33:79:da:a4:7d:f8:ca:3b:ba: 7c:90:e3:f6:41:0b:7e:df:0f:84:e6:6f:b4:7b:01:26:e3:67: bf:13:88:bb:2e:5a:df:aa:43:86:ff:8d:6b:ad:02:f9:8e:39: 42:6e:cb:e7:ba:55:79:65:98:e3:8c:d9:f9:cc:dc:4d:33:60: 32:98:b7:49:c6:fc:c6:1d:29:4c:60:77:74:59:f4:94:9d:68: 5e:fe:a6:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHj2yr9vm2aToCigjgYccQs6R9JswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzEwMVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAMjhmMWNlOWQ5YzI0MzI4OTRmMDBh MDU2ZmFhY2Y3ODY5YTRiNjBkMjZkYmM0YTI4NTgzNzAyMTQyMmI4ZTE5ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHyE4fZ8YGK12gqfLXhXaXpGrQ06 iNUwbBOhzGtZ3LvrD3ZkcwRTORuuwiovVuiR44DcoD4tvHa+JYvxSP+300+u1dqs EpZgwnrqnZfadRCyMmQJkaGSfkuaOHooCJhIiSmBf+Q2ROIdcwfUDTYUqDpjL1de Z/VputUQgxYZa0yKGzG61jPGtk0NPR9ZhpO7sklFonl8gnfF1N06/yLRq2WnOd33 NLUi6FUMlFjuxwcr4LRKSsWNKRqTQXon6Xld3ub6zhacsHDXz73690kCvcnZtDyT llmsmr61bQsycuFImqVE7zpGI2QIDMhy1XkwcaOk9hEUksM55QR71wscqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCtZOAvuWRW/aMLs7O72mto1ftcmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0Y2MwZjI5LWZlMzEtNDc0Zi04NTc2LWMxZmMzZThhOTM1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacJAwDQYJKoZIhvcNAQELBQADggEBAK9gVZ9hlhaiNQJJvfGf 7kqE0Lfu72uk7JFRQFxmoeIcPqo1Ct/j/K8z2v49OfkTni5/pv+fXsYQWVimhyJ3 lNZhjaTVxHN0GnmavQJ3s6EF0kOFYXVtFRNSgSzVaSHxe1N5e603UdtYcUaTahJc 8YUn0FSp9EnfWr6VJiT7ZuhcCRNbbxhygRZEnM2gUyUJsjvzuuE0ZiHnIIvR6T13 SeMiKAzRNTAD33uavzN52qR9+Mo7unyQ4/ZBC37fD4Tmb7R7ASbjZ78TiLsuWt+q Q4b/jWutAvmOOUJuy+e6VXllmOOM2fnM3E0zYDKYt0nG/MYdKUxgd3RZ9JSdaF7+ pnU= -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:47 2025 by rpki-client