This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa File: 4f190963-16ca-4ba3-9370-65813f5adc68.roa (raw, json) Hash identifier: x82rNSGFXVaDdOQEo/ZZnYeMCxs5chdIsCakuyJukvQ= Subject key identifier: 48:E9:AA:D3:4C:AB:4C:9E:53:DE:88:04:40:63:91:B7:88:8A:88:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 099CFE8A603EFB825EABDA07BDE6FABFC58676EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa Signing time: Thu 04 Dec 2025 00:00:41 +0000 ROA not before: Thu 04 Dec 2025 00:00:41 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9c:fe:8a:60:3e:fb:82:5e:ab:da:07:bd:e6:fa:bf:c5:86:76:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:00:41 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=2eaf301297d027f6cb6d3e788c4f12eb54c9f8e0f1f1b0f30405c6ada6c0e2c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:90:31:e8:3d:4b:e1:42:a5:5c:d4:97:07: eb:9b:d8:23:a9:ab:f8:bb:89:3e:ca:12:59:10:81: d2:5f:a0:f3:bf:76:a9:ee:9b:2c:49:ee:a0:8c:87: 52:af:37:89:8a:1c:b4:3e:d5:4e:4c:dc:8c:b6:fc: eb:ad:25:5a:80:f8:f5:cc:bb:ae:e9:ea:24:a8:00: 2e:42:28:f2:a7:f9:41:5d:b1:86:82:09:94:d9:69: 13:e9:ba:6d:8e:a0:f2:ce:e1:2d:bc:e6:aa:81:16: 23:11:1b:1c:fe:97:46:24:46:9b:05:61:c2:bf:a1: d8:83:a7:f8:80:61:5c:c8:4a:ff:d2:92:c4:45:bb: a6:1f:0d:26:54:06:71:ae:2a:6d:37:28:d6:3a:2c: 24:26:cf:c6:95:6e:86:1f:82:b3:b4:18:93:b3:62: 4e:d4:da:e0:c7:2d:f7:ca:ee:15:fa:a1:8c:d0:39: 3e:50:c0:00:16:cd:0f:8d:c0:6f:82:c9:c2:c8:96: 9c:ce:8a:8d:4a:3c:29:01:fa:ad:a8:2c:e4:44:ae: e9:90:df:0a:c4:0d:37:f0:2e:24:be:b5:cf:cd:db: 61:3e:79:17:8d:c1:b9:50:a6:2a:c1:86:ad:3a:c4: b8:c7:ba:42:71:2e:a0:4c:9d:42:aa:94:7c:19:22: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E9:AA:D3:4C:AB:4C:9E:53:DE:88:04:40:63:91:B7:88:8A:88:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 51:c5:6b:77:28:26:63:f9:9f:91:c0:9c:e4:43:82:b7:86:7f: 9c:df:3d:27:b2:f6:c2:07:ef:83:e5:8c:d3:2e:9d:c6:93:65: 96:86:b9:9b:a4:ec:73:45:91:f3:06:cf:06:21:30:2a:90:61: 9f:81:af:ee:8f:17:24:ad:46:87:f7:27:77:18:d2:47:02:f5: a7:ef:b2:84:1f:06:ab:7d:b5:a5:4b:21:e8:2e:03:07:d3:51: ee:80:29:57:0a:0a:cc:c1:c4:bd:aa:fb:3a:6f:85:1d:11:c2: 18:11:97:b9:06:86:87:e5:1b:05:26:b2:e5:f0:79:3f:b8:29: 43:64:98:30:74:de:2d:3e:9b:d7:96:a7:fb:cf:1a:9b:69:b1: 96:1d:8a:ed:ff:cf:fc:b7:71:82:ef:fa:47:8a:57:14:06:25: 9f:70:6c:41:c6:35:62:bc:18:4e:38:a4:fb:d1:1c:23:a4:1d: 45:91:88:d5:bd:89:c5:ef:e3:04:4f:07:75:3d:c6:39:88:6a: 7f:d6:5e:a0:89:07:06:19:74:3c:3d:90:07:ed:f3:48:88:e3: fb:1b:fe:dc:52:23:fe:1b:c5:c7:cb:e6:c4:66:a7:76:31:61: f3:07:35:de:01:a1:c7:b8:ef:23:fc:38:d3:0f:59:a3:3f:af: 39:d1:21:7c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCZz+imA++4Jeq9oHveb6v8WGdu4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDA0MVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAMmVhZjMwMTI5N2QwMjdmNmNiNmQz ZTc4OGM0ZjEyZWI1NGM5ZjhlMGYxZjFiMGYzMDQwNWM2YWRhNmMwZTJjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aaQMeg9S+FCpVzUlwfrm9gjqav4 u4k+yhJZEIHSX6Dzv3ap7pssSe6gjIdSrzeJihy0PtVOTNyMtvzrrSVagPj1zLuu 6eokqAAuQijyp/lBXbGGggmU2WkT6bptjqDyzuEtvOaqgRYjERsc/pdGJEabBWHC v6HYg6f4gGFcyEr/0pLERbumHw0mVAZxriptNyjWOiwkJs/GlW6GH4KztBiTs2JO 1Nrgxy33yu4V+qGM0Dk+UMAAFs0PjcBvgsnCyJaczoqNSjwpAfqtqCzkRK7pkN8K xA038C4kvrXPzdthPnkXjcG5UKYqwYatOsS4x7pCcS6gTJ1CqpR8GSJ7KwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEjpqtNMq0yeU96IBEBjkbeIiogXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmMTkwOTYzLTE2Y2EtNGJhMy05MzcwLTY1ODEzZjVhZGM2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSAwDQYJKoZIhvcNAQELBQADggEBAFHFa3coJmP5n5HAnORD greGf5zfPSey9sIH74PljNMuncaTZZaGuZuk7HNFkfMGzwYhMCqQYZ+Br+6PFySt Rof3J3cY0kcC9afvsoQfBqt9taVLIeguAwfTUe6AKVcKCszBxL2q+zpvhR0RwhgR l7kGhoflGwUmsuXweT+4KUNkmDB03i0+m9eWp/vPGptpsZYdiu3/z/y3cYLv+keK VxQGJZ9wbEHGNWK8GE44pPvRHCOkHUWRiNW9icXv4wRPB3U9xjmIan/WXqCJBwYZ dDw9kAft80iI4/sb/txSI/4bxcfL5sRmp3YxYfMHNd4Boce47yP8ONMPWaM/rznR IXw= -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:38 2025 by rpki-client