This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa File: 74b1fe31-3591-4da8-95f4-39ba57fac545.roa (raw, json) Hash identifier: aHLxJ1CVvNqGIXxZNmALcB4BMlUUguzoXa/fV8GXOTM= Subject key identifier: 1F:D9:FF:FA:73:D1:61:45:49:4C:6A:CD:48:18:2E:0F:46:21:F9:D2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 746F849624814F19479E35111BA0EA00CEA1B9D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa Signing time: Sat 06 Dec 2025 00:00:34 +0000 ROA not before: Sat 06 Dec 2025 00:00:34 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6f:84:96:24:81:4f:19:47:9e:35:11:1b:a0:ea:00:ce:a1:b9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=c3963f696fab66e040791a95f7ac6a42558c47ed37f5df5eeca196e6ba66ecd3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:69:9e:6d:5f:54:14:69:18:5d:5f:54:e1: 21:8c:57:5d:e8:2c:88:63:cd:0d:30:7a:97:c7:06: b0:10:fa:c4:6f:07:78:37:0f:c3:05:cc:54:e1:f6: 30:1e:74:c7:c6:33:77:f8:f4:aa:d1:22:09:e6:51: d2:bc:da:b0:b4:72:b1:30:62:64:d3:b5:fd:39:1c: dc:f3:c6:1b:0c:16:c6:ff:bd:21:af:95:ec:e2:be: 45:7d:7e:0b:18:52:1d:b7:fc:99:85:a1:60:10:67: 98:94:ec:36:47:b6:83:3c:91:71:5f:46:d7:8d:cf: 10:6a:21:66:1e:41:07:c7:81:ff:04:db:36:42:76: aa:af:50:4b:22:b2:b4:5e:6e:50:7f:75:cc:ba:04: be:70:6a:9f:3d:bf:53:ef:b0:6d:5d:2f:71:f3:e1: 94:84:b1:20:6d:f6:b7:69:0a:31:bc:c9:46:d3:3b: 22:b4:41:79:07:c8:ba:08:95:b5:8a:e0:86:e7:03: 6c:79:a6:96:92:5b:06:d6:82:97:a8:61:ce:6d:16: d3:de:db:a2:d5:2e:b8:8c:6f:01:4c:fd:c3:0c:f6: 18:0f:b2:f7:67:f0:72:a9:ee:0b:57:42:b5:45:8f: 9b:0d:ac:e0:cd:3d:73:da:3e:61:23:24:fc:a8:04: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D9:FF:FA:73:D1:61:45:49:4C:6A:CD:48:18:2E:0F:46:21:F9:D2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:1000::/40 Signature Algorithm: sha256WithRSAEncryption 44:16:03:26:05:45:d9:26:c4:97:4f:33:8a:49:f3:a0:99:d9: bb:c0:50:cf:8e:ff:4c:f5:33:62:af:a9:f4:1a:d8:25:4d:3f: fd:85:99:59:b2:45:bb:90:00:ab:f4:af:b2:a1:e9:2e:57:a2: ee:d8:a5:8c:40:b2:25:f8:82:34:8a:72:76:6f:f3:2d:3a:2f: f7:8e:58:5f:21:6c:14:1a:9b:f3:d6:48:ba:63:ac:90:83:1e: 8a:f8:13:31:02:4d:e9:a8:db:bb:fa:b8:d9:7f:3a:86:11:99: 5a:50:dc:80:ce:ce:b7:dc:7e:30:83:a2:ae:95:5d:a6:c8:99: 95:3a:62:e8:68:ec:c0:5b:68:75:49:f9:2f:0b:43:72:22:6b: 5a:ba:7d:b5:cb:94:c5:5d:83:a9:57:59:ea:98:0a:01:2e:8b: ac:83:59:a1:c2:87:c3:1c:fd:d8:54:54:44:1a:73:c8:dd:9e: a3:a3:68:65:1d:b2:73:6c:8c:a3:cd:16:1e:15:0f:d6:7d:79: 44:4f:3f:50:e4:ef:99:0e:f2:3f:e8:3c:82:98:b4:a5:21:ae: 93:c5:a3:ac:bd:a5:d1:84:48:bd:18:f0:80:0e:63:80:15:d3: d6:b8:2d:bd:64:0c:83:0c:2e:9e:83:21:fe:e1:97:95:0a:05: 2d:17:ee:97 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdG+EliSBTxlHnjURG6DqAM6hudcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNjAwMDAzNFoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAYzM5NjNmNjk2ZmFiNjZlMDQwNzkx YTk1ZjdhYzZhNDI1NThjNDdlZDM3ZjVkZjVlZWNhMTk2ZTZiYTY2ZWNkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAZpnm1fVBRpGF1fVOEhjFdd6CyI Y80NMHqXxwawEPrEbwd4Nw/DBcxU4fYwHnTHxjN3+PSq0SIJ5lHSvNqwtHKxMGJk 07X9ORzc88YbDBbG/70hr5Xs4r5FfX4LGFIdt/yZhaFgEGeYlOw2R7aDPJFxX0bX jc8QaiFmHkEHx4H/BNs2Qnaqr1BLIrK0Xm5Qf3XMugS+cGqfPb9T77BtXS9x8+GU hLEgbfa3aQoxvMlG0zsitEF5B8i6CJW1iuCG5wNseaaWklsG1oKXqGHObRbT3tui 1S64jG8BTP3DDPYYD7L3Z/Byqe4LV0K1RY+bDazgzT1z2j5hIyT8qATaLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB/Z//pz0WFFSUxqzUgYLg9GIfnSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc0YjFmZTMxLTM1OTEtNGRhOC05NWY0LTM5YmE1N2ZhYzU0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8RAwDQYJKoZIhvcNAQELBQADggEBAEQWAyYFRdkmxJdPM4pJ 86CZ2bvAUM+O/0z1M2KvqfQa2CVNP/2FmVmyRbuQAKv0r7Kh6S5Xou7YpYxAsiX4 gjSKcnZv8y06L/eOWF8hbBQam/PWSLpjrJCDHor4EzECTemo27v6uNl/OoYRmVpQ 3IDOzrfcfjCDoq6VXabImZU6Yuho7MBbaHVJ+S8LQ3Iia1q6fbXLlMVdg6lXWeqY CgEui6yDWaHCh8Mc/dhUVEQac8jdnqOjaGUdsnNsjKPNFh4VD9Z9eURPP1Dk75kO 8j/oPIKYtKUhrpPFo6y9pdGESL0Y8IAOY4AV09a4Lb1kDIMMLp6DIf7hl5UKBS0X 7pc= -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:17 2025 by rpki-client