This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa File: 8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa (raw, json) Hash identifier: lVUORsIYFoyo1oHUu033BWL8pBABt1WHQeh8z0mxZbk= Subject key identifier: 51:79:55:04:0B:E1:07:03:62:59:4D:4D:B6:9C:9A:6B:7B:CB:5A:B3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 741E5F1C1FCF520A4269084A76B1B6D9EA89BC49 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa Signing time: Tue 02 Dec 2025 00:01:29 +0000 ROA not before: Tue 02 Dec 2025 00:01:29 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:1e:5f:1c:1f:cf:52:0a:42:69:08:4a:76:b1:b6:d9:ea:89:bc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:01:29 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=f7cfa686f17b23b2a19a9ff6aff2004517ce6282cea93dab73b765ac4eb2e1ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:74:35:72:1c:f6:6e:4a:e8:ac:b7:c6:35: e2:8f:b7:04:5a:68:2e:9f:a6:95:db:14:f1:d7:93: 7c:83:e5:e7:1a:f3:b4:b5:cb:6f:98:0b:3a:99:73: 23:71:33:4c:d0:f7:b5:e5:08:75:d1:36:f9:f5:b2: 36:d7:db:35:cf:ed:1b:e6:3b:f5:f8:22:9c:44:cd: 81:87:d8:bd:f7:78:07:33:7f:47:97:fb:eb:e3:3a: 5c:8c:42:5e:d1:72:d0:24:c6:f7:a4:9a:b5:6e:dc: 12:44:8f:54:85:1c:b6:2f:15:b8:d9:36:d5:22:77: 35:c9:19:b6:8d:cd:08:3f:94:6c:93:e4:40:0b:11: 7b:06:f9:b3:43:9c:23:79:c4:7a:68:97:19:ef:89: 40:a3:f9:87:49:30:ac:48:12:c9:7a:0a:c0:47:80: 87:f0:93:0d:4d:70:05:df:ab:cb:3c:0f:e6:8f:51: 91:fc:a8:ce:ce:d9:05:f7:73:b7:a0:19:96:7f:97: 97:d4:b1:e2:f8:a6:ad:81:50:83:7c:5c:0f:ca:b6: 08:81:94:95:46:a2:d0:c3:49:45:32:2b:cf:84:f2: d6:46:d2:f6:75:a8:97:2c:38:9d:94:73:9f:83:54: ad:2a:83:06:31:83:64:51:fe:3b:11:3d:91:f7:d4: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:79:55:04:0B:E1:07:03:62:59:4D:4D:B6:9C:9A:6B:7B:CB:5A:B3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8800::/40 Signature Algorithm: sha256WithRSAEncryption 0e:03:82:87:1e:0e:74:15:0d:32:d6:a7:a5:6a:65:4e:51:59: 38:2a:eb:5b:38:c9:05:c6:68:80:75:9d:41:3e:5e:cf:4b:e6: cd:10:b7:fd:41:ff:b2:ca:d9:77:4d:2a:47:1d:21:59:b7:ee: f3:90:ae:53:12:6e:a1:b8:02:ee:df:e4:8a:e9:26:95:3d:0d: aa:83:25:a9:78:89:b0:fe:2e:ab:c9:ea:43:4f:68:f1:e1:d2: e5:c4:42:9f:96:86:5c:4b:a4:74:32:b8:0a:a6:41:bd:0c:5b: 1d:dc:3c:7c:4d:73:27:ae:82:fd:93:6c:c0:60:df:78:fc:c8: f8:12:e0:76:8f:f8:4f:74:54:91:6b:04:17:db:28:b1:12:fc: 8e:8a:88:01:f5:17:38:5c:a8:06:90:40:37:57:c3:64:5e:f1: 92:87:07:ee:d2:1b:e7:5f:76:9e:13:13:e6:2e:52:b6:9c:83: 6a:a1:35:af:fb:ee:b4:ea:ba:9d:54:bb:ab:76:e0:34:b3:9b: 59:ae:32:03:1b:f1:86:82:53:ee:2d:33:2a:f9:f8:64:93:75: 1d:dd:7d:8a:af:e5:c0:9b:a5:ae:38:62:3f:f0:77:f9:9d:99: c2:ad:80:d4:ef:2e:13:6c:40:e9:29:e2:e1:48:df:89:e5:ae: a0:f8:b4:f0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdB5fHB/PUgpCaQhKdrG22eqJvEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDEyOVoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAZjdjZmE2ODZmMTdiMjNiMmExOWE5 ZmY2YWZmMjAwNDUxN2NlNjI4MmNlYTkzZGFiNzNiNzY1YWM0ZWIyZTFiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhJ0NXIc9m5K6Ky3xjXij7cEWmgu n6aV2xTx15N8g+XnGvO0tctvmAs6mXMjcTNM0Pe15Qh10Tb59bI219s1z+0b5jv1 +CKcRM2Bh9i993gHM39Hl/vr4zpcjEJe0XLQJMb3pJq1btwSRI9UhRy2LxW42TbV Inc1yRm2jc0IP5Rsk+RACxF7BvmzQ5wjecR6aJcZ74lAo/mHSTCsSBLJegrAR4CH 8JMNTXAF36vLPA/mj1GR/KjOztkF93O3oBmWf5eX1LHi+KatgVCDfFwPyrYIgZSV RqLQw0lFMivPhPLWRtL2daiXLDidlHOfg1StKoMGMYNkUf47ET2R99Sw5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFF5VQQL4QcDYllNTbacmmt7y1qzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmZDNmMzlmLTQyYTYtNDBmZi04ZWZkLTc3OGJjODIzZjNkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ogwDQYJKoZIhvcNAQELBQADggEBAA4DgoceDnQVDTLWp6Vq ZU5RWTgq61s4yQXGaIB1nUE+Xs9L5s0Qt/1B/7LK2XdNKkcdIVm37vOQrlMSbqG4 Au7f5IrpJpU9DaqDJal4ibD+LqvJ6kNPaPHh0uXEQp+WhlxLpHQyuAqmQb0MWx3c PHxNcyeugv2TbMBg33j8yPgS4HaP+E90VJFrBBfbKLES/I6KiAH1FzhcqAaQQDdX w2Re8ZKHB+7SG+dfdp4TE+YuUracg2qhNa/77rTqup1Uu6t24DSzm1muMgMb8YaC U+4tMyr5+GSTdR3dfYqv5cCbpa44Yj/wd/mdmcKtgNTvLhNsQOkp4uFI34nlrqD4 tPA= -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:08 2025 by rpki-client