This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa File: 75997448-5993-4bc5-85e4-cbc4b4860346.roa (raw, json) Hash identifier: xQm7Y1Ui0i9Yh18najeJvg6R78xpxGfQnlVSaNaHYTU= Subject key identifier: 5A:DA:8D:C5:2F:6E:5A:35:BE:2D:09:C4:5B:4E:1C:60:6D:DE:33:85 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 488A02B8B88203B7621405DAAB252E60F6B88E4E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa Signing time: Wed 26 Nov 2025 00:01:16 +0000 ROA not before: Wed 26 Nov 2025 00:01:16 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8a:02:b8:b8:82:03:b7:62:14:05:da:ab:25:2e:60:f6:b8:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:01:16 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=1fd678228dd2bc40c9d234d751a1b6ebbb1041e1474c9d00383c99ddbbce03bd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:38:03:85:90:fb:9c:90:a0:4d:a1:35:68: eb:10:83:9b:62:f2:7e:8d:1d:be:6a:12:89:99:0f: 49:de:54:51:94:cf:f6:0a:f0:d1:fc:11:30:54:13: 24:22:07:31:23:91:a4:87:9d:b6:2f:fc:ec:0c:73: dd:61:fe:0b:a5:9e:0b:7c:c9:f5:0c:75:c6:7a:24: 68:df:ac:02:2d:9a:38:b6:dc:8a:9f:e6:e5:0f:fe: e9:84:05:d1:60:cf:3e:50:9b:55:58:f3:f7:26:61: 46:4b:1c:e4:d0:45:26:eb:04:47:cc:7b:86:44:da: 4d:45:16:70:11:8e:75:95:11:df:9f:20:e6:46:68: 9a:8c:36:9a:d9:03:89:fe:4e:6c:fc:4c:08:ad:11: 31:9c:1e:df:af:82:ac:22:a9:9e:a8:2f:8e:cc:66: c0:02:20:d3:c0:e1:ca:86:64:20:23:d7:09:b2:14: 3c:7c:d7:d4:cb:30:87:ed:a8:97:02:41:e3:33:44: b9:cb:ac:cb:2c:47:75:30:49:8e:d4:af:0a:39:1e: d5:64:bf:67:a7:4d:b5:be:28:87:fb:ba:68:f1:c8: 9e:8c:e2:d4:a2:71:b9:7d:51:8d:fd:4e:26:84:5a: e8:98:0e:66:12:44:b0:97:3c:b7:88:5a:41:31:01: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DA:8D:C5:2F:6E:5A:35:BE:2D:09:C4:5B:4E:1C:60:6D:DE:33:85 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75997448-5993-4bc5-85e4-cbc4b4860346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:f000::/40 Signature Algorithm: sha256WithRSAEncryption 26:9f:46:e8:a7:26:d0:99:c4:a3:17:cf:b5:82:b8:f3:97:62: 8b:c7:d0:93:da:b6:a6:14:d2:e6:a3:e9:11:1d:53:73:d1:8c: a1:26:91:9a:de:d4:38:e4:01:1d:31:d4:00:a0:b8:18:11:39: a9:91:3c:40:57:e9:77:f4:b8:ee:23:33:e0:fb:aa:8d:9b:fa: 68:8e:f8:6e:6a:c1:a5:88:51:d9:8d:a6:d5:c3:70:62:51:51: dd:75:73:63:cd:ce:da:a8:b7:26:27:8a:34:9b:5b:f1:cf:ec: cb:ac:f2:cb:b4:1e:33:9d:db:3c:78:b1:d4:59:b1:82:83:b5: 48:f4:ab:20:55:4c:24:e0:a5:cb:bd:7f:cc:b2:ab:4c:22:0f: f3:04:49:e4:7c:00:d0:8b:c3:64:ac:80:26:4c:16:5f:5f:f5: a6:89:f5:e7:d4:f3:75:63:a2:cf:02:19:1f:00:64:1d:aa:b5: 53:73:79:89:81:b0:e6:33:5a:54:d6:13:a9:5c:29:5b:7d:9a: f0:54:e4:7d:8c:e8:ff:7f:a3:3f:95:e2:05:c2:1c:dc:ef:20: c6:06:09:4d:5b:bd:61:4e:a7:2d:a3:a2:01:32:e0:6b:31:10: 1c:19:19:8c:05:a6:dc:a2:88:56:5c:57:96:21:b7:d0:f6:70: d4:b5:fe:65 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSIoCuLiCA7diFAXaqyUuYPa4jk4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDExNloX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNAMWZkNjc4MjI4ZGQyYmM0MGM5ZDIz NGQ3NTFhMWI2ZWJiYjEwNDFlMTQ3NGM5ZDAwMzgzYzk5ZGRiYmNlMDNiZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9s4A4WQ+5yQoE2hNWjrEIObYvJ+ jR2+ahKJmQ9J3lRRlM/2CvDR/BEwVBMkIgcxI5Gkh522L/zsDHPdYf4LpZ4LfMn1 DHXGeiRo36wCLZo4ttyKn+blD/7phAXRYM8+UJtVWPP3JmFGSxzk0EUm6wRHzHuG RNpNRRZwEY51lRHfnyDmRmiajDaa2QOJ/k5s/EwIrRExnB7fr4KsIqmeqC+OzGbA AiDTwOHKhmQgI9cJshQ8fNfUyzCH7aiXAkHjM0S5y6zLLEd1MEmO1K8KOR7VZL9n p021viiH+7po8ciejOLUonG5fVGN/U4mhFromA5mEkSwlzy3iFpBMQEk7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFrajcUvblo1vi0JxFtOHGBt3jOFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1OTk3NDQ4LTU5OTMtNGJjNS04NWU0LWNiYzRiNDg2MDM0Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9PAwDQYJKoZIhvcNAQELBQADggEBACafRuinJtCZxKMXz7WC uPOXYovH0JPatqYU0uaj6REdU3PRjKEmkZre1DjkAR0x1ACguBgROamRPEBX6Xf0 uO4jM+D7qo2b+miO+G5qwaWIUdmNptXDcGJRUd11c2PNztqotyYnijSbW/HP7Mus 8su0HjOd2zx4sdRZsYKDtUj0qyBVTCTgpcu9f8yyq0wiD/MESeR8ANCLw2SsgCZM Fl9f9aaJ9efU83Vjos8CGR8AZB2qtVNzeYmBsOYzWlTWE6lcKVt9mvBU5H2M6P9/ oz+V4gXCHNzvIMYGCU1bvWFOpy2jogEy4GsxEBwZGYwFptyiiFZcV5Yht9D2cNS1 /mU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:30 2025 by rpki-client