This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa File: 831d319a-d7bd-48a2-8eee-31ff33384c47.roa (raw, json) Hash identifier: 3MW2LhnoypaemEYG1HbLby7PrI5J4tfRp2V2aC/QESM= Subject key identifier: 8F:15:9D:E3:74:09:28:D1:00:38:93:1B:EE:9A:5F:1A:3B:1C:D7:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63F46D902BD881B49E3D2CA785C8E6964050B5BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa Signing time: Sat 29 Nov 2025 00:00:36 +0000 ROA not before: Sat 29 Nov 2025 00:00:36 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f4:6d:90:2b:d8:81:b4:9e:3d:2c:a7:85:c8:e6:96:40:50:b5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 29 00:00:36 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=e0b4900f3a268180a1ae4b47f7c4610dd1d6303030b6c016561cb12dc11b7fd0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:26:95:80:66:96:23:a1:db:e1:ac:c2:8e: 38:f0:f2:14:d8:a0:46:c5:26:46:98:35:6f:38:0a: 45:e1:bb:10:f6:1c:3e:fc:d8:ba:fd:07:ea:90:76: 67:84:fc:44:cb:e0:45:6f:59:f2:15:e3:9d:e6:5e: 52:12:8e:3f:47:e8:56:ff:a0:13:bc:af:3d:e3:3a: 78:c0:d2:6c:f5:02:08:8a:d5:88:db:c6:b2:4d:ec: 09:24:00:26:4a:7e:f2:22:ca:f9:54:16:fe:c9:98: f1:49:c3:b8:8a:8e:bf:0d:f6:14:e6:1a:57:3d:39: 3a:61:f5:2f:18:8a:f2:8e:d6:2d:26:a3:0a:9f:02: 1e:55:54:81:00:6d:ee:17:ab:31:b1:f8:07:58:9e: 20:dd:2e:e1:32:6a:d1:34:00:64:e0:ba:0c:8c:56: 4d:e7:03:ee:b6:6c:13:da:f0:4f:86:f1:9d:18:dd: 35:eb:2e:3d:73:7f:4a:44:0c:5d:f2:e2:53:28:5b: 0f:fa:a6:4f:92:c8:5a:c2:81:cc:0e:e5:ad:34:64: ca:ee:d3:ae:95:98:af:40:df:0b:0e:67:8b:3f:da: 6d:a5:9d:7b:c8:1b:dc:32:e9:36:e0:d9:ea:6d:e2: 85:69:ea:a4:47:55:da:d7:8c:81:85:24:c1:e9:31: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:15:9D:E3:74:09:28:D1:00:38:93:1B:EE:9A:5F:1A:3B:1C:D7:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/831d319a-d7bd-48a2-8eee-31ff33384c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:1000::/40 Signature Algorithm: sha256WithRSAEncryption 5e:26:2c:50:de:1c:db:9f:05:ba:28:01:87:c3:88:08:d9:08: 3f:2e:bf:6a:ff:5a:91:90:fb:a1:51:c2:8f:6b:d1:07:af:6e: 98:cc:11:90:8f:c6:d9:4e:aa:5e:00:9f:82:20:99:5f:f1:01: c0:04:8f:8c:40:7f:98:10:b3:40:6e:d5:9a:15:e8:de:2d:95: 93:73:b8:41:77:4a:5d:53:63:70:ef:ec:5f:c8:27:29:63:29: 77:57:e6:a8:d0:25:9b:45:f2:24:fa:92:9c:06:a6:3d:7c:c1: ae:ab:d6:3f:b8:dc:ea:34:4b:6d:3c:fd:22:49:10:49:d4:2a: 2d:b5:7a:4a:7a:02:98:59:72:bb:a0:74:b9:3c:d8:90:8f:ab: 60:8e:ff:22:98:b7:b8:7b:51:6f:2c:fb:40:02:55:2e:c2:d8: 4d:f4:c8:c1:d3:61:6b:3d:f5:5e:e0:89:81:44:7f:89:c8:0c: 58:29:cc:0f:19:03:59:34:36:26:87:ad:b4:56:f2:a9:03:3b: f3:3e:38:8a:d8:4c:55:7b:12:35:4a:8b:60:b8:34:9c:10:25: c6:f5:7f:c6:c6:b6:5e:32:ef:d2:e0:ee:b4:b2:60:c1:41:f9: 49:5b:47:e9:f3:4b:b6:08:0b:6f:f0:d0:ae:e4:b6:39:87:9e: 12:2b:6e:13 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY/RtkCvYgbSePSynhcjmlkBQtbwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyOTAwMDAzNloX DTI2MDIyNzIzNTk1OVowejFJMEcGA1UEBRNAZTBiNDkwMGYzYTI2ODE4MGExYWU0 YjQ3ZjdjNDYxMGRkMWQ2MzAzMDMwYjZjMDE2NTYxY2IxMmRjMTFiN2ZkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3gmlYBmliOh2+Gswo448PIU2KBG xSZGmDVvOApF4bsQ9hw+/Ni6/QfqkHZnhPxEy+BFb1nyFeOd5l5SEo4/R+hW/6AT vK894zp4wNJs9QIIitWI28ayTewJJAAmSn7yIsr5VBb+yZjxScO4io6/DfYU5hpX PTk6YfUvGIryjtYtJqMKnwIeVVSBAG3uF6sxsfgHWJ4g3S7hMmrRNABk4LoMjFZN 5wPutmwT2vBPhvGdGN016y49c39KRAxd8uJTKFsP+qZPkshawoHMDuWtNGTK7tOu lZivQN8LDmeLP9ptpZ17yBvcMuk24NnqbeKFaeqkR1Xa14yBhSTB6TG/6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI8VneN0CSjRADiTG+6aXxo7HNd8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMWQzMTlhLWQ3YmQtNDhhMi04ZWVlLTMxZmYzMzM4NGM0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9BAwDQYJKoZIhvcNAQELBQADggEBAF4mLFDeHNufBbooAYfD iAjZCD8uv2r/WpGQ+6FRwo9r0QevbpjMEZCPxtlOql4An4IgmV/xAcAEj4xAf5gQ s0Bu1ZoV6N4tlZNzuEF3Sl1TY3Dv7F/IJyljKXdX5qjQJZtF8iT6kpwGpj18wa6r 1j+43Oo0S208/SJJEEnUKi21ekp6AphZcrugdLk82JCPq2CO/yKYt7h7UW8s+0AC VS7C2E30yMHTYWs99V7giYFEf4nIDFgpzA8ZA1k0NiaHrbRW8qkDO/M+OIrYTFV7 EjVKi2C4NJwQJcb1f8bGtl4y79Lg7rSyYMFB+UlbR+nzS7YIC2/w0K7ktjmHnhIr bhM= -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:55 2025 by rpki-client