This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa File: 49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa (raw, json) Hash identifier: FzjX0cFBfwSDSD7Z7NrMqneDHPscwtS3uHEJY+cTOxM= Subject key identifier: 68:1B:9E:9B:CB:22:8C:1B:C2:26:86:54:48:71:6F:7B:CC:C8:91:B1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7330DA1442E99AEEE6184784497614004329C103 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa Signing time: Thu 04 Dec 2025 00:30:10 +0000 ROA not before: Thu 04 Dec 2025 00:30:10 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:30:da:14:42:e9:9a:ee:e6:18:47:84:49:76:14:00:43:29:c1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:30:10 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=d4090c0ab49af1ac1f615d03cbdf7570f8661db158573fbca096dedf82653547, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:3a:26:ec:6b:c5:6f:e6:f8:35:15:a6:41: 33:d6:51:ad:82:99:2c:33:59:6c:96:e9:e1:94:ed: dd:88:27:f2:a1:76:73:97:91:65:2a:d7:11:48:77: da:3c:31:5c:0d:b2:6b:d7:8f:ce:a4:ac:6a:09:98: 7f:ff:72:9a:3c:76:46:63:4e:17:91:00:40:ef:ec: cf:b0:0b:97:9c:0f:be:3c:f2:08:2b:98:d4:dd:38: b6:41:b2:bf:2a:89:61:40:0f:1a:16:4c:d3:04:eb: cf:11:ca:d4:eb:a9:06:32:5d:da:98:13:3e:c8:2a: 0a:a7:40:b8:94:4d:d4:ed:69:8f:b5:f7:20:4c:5a: c8:a4:5e:af:85:cc:11:31:04:44:0e:48:06:79:8f: d2:05:62:70:e3:94:2e:44:31:57:d6:52:41:01:48: b9:07:53:0d:c2:0e:1b:32:a3:46:8e:c7:19:e4:ff: d4:b5:e4:91:d6:c2:0a:57:ae:c9:f6:af:3f:ab:78: fb:84:25:d4:8d:ec:c5:b3:11:8e:34:34:70:c9:b7: 78:fb:8f:47:63:13:2e:c8:56:f5:37:63:f6:f0:17: 3a:c3:9e:9c:fa:f2:2b:cc:b6:52:6f:e6:44:95:63: 93:35:7f:59:d6:c6:17:82:21:17:29:5a:32:2f:1f: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1B:9E:9B:CB:22:8C:1B:C2:26:86:54:48:71:6F:7B:CC:C8:91:B1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49c7ee93-3655-4ca9-8897-c8e3d1d0f9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:4800::/40 Signature Algorithm: sha256WithRSAEncryption 32:a3:1a:6e:1b:55:d3:c2:55:91:9e:1e:9a:bd:d4:e8:e6:ec: 19:d3:4b:fe:62:b0:82:8e:22:62:c3:64:29:42:82:44:61:e6: b0:2a:22:14:61:76:38:02:d0:bb:6c:23:82:a4:89:04:f7:f6: 88:92:ee:9c:af:06:50:45:ef:7e:e5:e8:41:0e:03:cf:8b:4b: 78:99:61:78:c6:f3:ba:c0:c4:68:0a:fb:cb:0a:d1:5a:ea:67: 8a:ce:ea:1e:92:81:af:ab:3e:19:8e:3c:1f:6e:5a:e7:30:55: 6e:ee:43:eb:83:59:fb:90:17:4b:87:8c:17:3f:aa:85:9b:5a: 06:bf:28:cc:84:ce:af:c4:b6:c0:cc:8e:3f:21:09:7d:0f:43: a7:03:be:34:48:4e:3d:b3:f5:5f:f2:7b:d3:e1:8f:f2:19:15: 95:d3:c3:42:f4:1c:98:6e:c2:bd:c2:f1:a5:9a:fb:49:70:e3: 6f:94:4a:36:5a:b2:3e:d3:5c:f1:10:86:5b:ca:89:af:b8:92: 22:95:00:89:91:43:56:9f:79:72:1d:31:c2:3e:b8:89:7c:97: ef:e8:46:7d:de:f0:5f:ff:37:2b:ad:5c:f8:c5:ee:e5:41:24: a9:3d:69:f7:22:dd:ff:22:99:ba:7a:3e:0d:ef:31:ee:bc:5f: 0b:81:8a:12 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUczDaFELpmu7mGEeESXYUAEMpwQMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzAxMFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAZDQwOTBjMGFiNDlhZjFhYzFmNjE1 ZDAzY2JkZjc1NzBmODY2MWRiMTU4NTczZmJjYTA5NmRlZGY4MjY1MzU0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrI6JuxrxW/m+DUVpkEz1lGtgpks M1lslunhlO3diCfyoXZzl5FlKtcRSHfaPDFcDbJr14/OpKxqCZh//3KaPHZGY04X kQBA7+zPsAuXnA++PPIIK5jU3Ti2QbK/KolhQA8aFkzTBOvPEcrU66kGMl3amBM+ yCoKp0C4lE3U7WmPtfcgTFrIpF6vhcwRMQREDkgGeY/SBWJw45QuRDFX1lJBAUi5 B1MNwg4bMqNGjscZ5P/UteSR1sIKV67J9q8/q3j7hCXUjezFsxGONDRwybd4+49H YxMuyFb1N2P28Bc6w56c+vIrzLZSb+ZElWOTNX9Z1sYXgiEXKVoyLx9fxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGgbnpvLIowbwiaGVEhxb3vMyJGxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ5YzdlZTkzLTM2NTUtNGNhOS04ODk3LWM4ZTNkMWQwZjllYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9kgwDQYJKoZIhvcNAQELBQADggEBADKjGm4bVdPCVZGeHpq9 1Ojm7BnTS/5isIKOImLDZClCgkRh5rAqIhRhdjgC0LtsI4KkiQT39oiS7pyvBlBF 737l6EEOA8+LS3iZYXjG87rAxGgK+8sK0VrqZ4rO6h6Sga+rPhmOPB9uWucwVW7u Q+uDWfuQF0uHjBc/qoWbWga/KMyEzq/EtsDMjj8hCX0PQ6cDvjRITj2z9V/ye9Ph j/IZFZXTw0L0HJhuwr3C8aWa+0lw42+USjZasj7TXPEQhlvKia+4kiKVAImRQ1af eXIdMcI+uIl8l+/oRn3e8F//NyutXPjF7uVBJKk9afci3f8imbp6Pg3vMe68XwuB ihI= -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:40 2025 by rpki-client