This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa File: 999295ac-d636-4755-94c3-3c615012f6dd.roa (raw, json) Hash identifier: b4ZxPb6t1TH4Y8S7bG/iMNA7bwPq+GNpkfnXQEBQIWc= Subject key identifier: 02:CD:3D:FD:69:2B:3B:D3:A8:7D:C2:E8:EC:CC:49:57:6B:5C:29:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05F90B603E4BF3457313F581F88E30822D40A5A8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa Signing time: Thu 04 Dec 2025 00:30:13 +0000 ROA not before: Thu 04 Dec 2025 00:30:13 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f9:0b:60:3e:4b:f3:45:73:13:f5:81:f8:8e:30:82:2d:40:a5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:30:13 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=7be75c7fd11d0686b77090efd66e6b0a9167dc33a0813f3e4afc910e9d018c9c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:85:33:8b:e8:06:3f:9e:d6:ce:e2:e1:d4: c8:4e:1b:91:48:9a:23:77:c8:22:c3:b7:3b:7d:7a: a9:ca:e0:4a:a9:a1:3c:36:ff:b8:dd:53:82:3c:0d: c2:19:2a:38:24:bd:f8:c3:b7:bb:dd:55:d1:ee:22: c6:04:54:2c:36:f8:a6:13:d8:5f:f3:2f:9d:23:1f: ac:80:69:4a:78:a4:4f:7a:85:91:02:17:4a:88:f3: a9:3b:84:d2:71:7a:a4:c9:ef:0a:d0:6c:98:12:77: 3e:88:2d:e6:bb:21:e9:e1:bb:85:82:a2:6f:d2:e7: 22:7f:d3:95:b6:2f:2b:13:5b:89:29:4b:89:36:53: 0e:4b:3e:a6:f9:e8:14:0d:4d:2f:f9:0b:e9:ed:cc: e9:a5:8d:c5:53:e8:75:21:16:e4:f3:09:a0:3b:55: 3c:ce:81:6d:71:02:55:46:0c:fe:8d:36:ab:9f:26: 62:01:3d:4a:38:60:e1:e5:95:11:cf:92:59:18:ce: e7:54:45:ed:a7:00:c4:33:30:67:37:7e:ba:ae:26: b9:e1:35:47:01:de:4c:57:0f:60:64:c2:98:c5:2b: 60:b4:44:17:e6:0a:a4:d5:f4:db:77:4e:81:6b:d6: 80:00:ca:68:47:13:b6:e6:f7:d3:2f:08:4b:1f:f6: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CD:3D:FD:69:2B:3B:D3:A8:7D:C2:E8:EC:CC:49:57:6B:5C:29:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/999295ac-d636-4755-94c3-3c615012f6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:f000::/40 Signature Algorithm: sha256WithRSAEncryption 58:b6:c3:4f:7c:02:d7:e7:bb:2a:f5:f8:74:e4:a2:88:02:01: af:10:b5:24:85:96:c1:b0:5a:2f:06:50:54:d8:a3:c6:a9:94: bb:16:6a:b7:02:d4:b5:3e:76:c7:e5:70:bd:4b:9f:15:fd:23: e2:1a:80:c3:3c:9a:d2:cc:36:84:6f:46:10:9d:a5:a0:20:75: 30:ff:6d:a2:72:3f:15:5a:e9:3f:c7:bf:2b:bd:76:90:71:4c: 2a:c2:17:6f:ef:19:8b:55:b9:d7:e1:1e:aa:73:f7:ab:8c:db: 2f:a5:c4:ce:08:51:78:7e:2a:9a:51:af:e4:43:31:8e:64:4c: 8d:6d:79:cc:90:31:15:4f:16:3d:f6:ba:c0:f4:d2:8e:7d:e9: 06:a1:73:12:8c:38:02:8c:a0:0a:7b:51:cc:91:85:fd:7c:f2: 7d:b4:fb:b2:1d:53:dc:0b:00:f9:44:29:a5:d4:60:73:d2:75: ca:25:20:0f:4d:1c:ac:16:69:30:7f:a3:a8:2b:d5:a9:51:49: 26:2e:ec:78:dd:9e:e5:e9:a8:3e:25:60:71:b3:48:36:40:46: 2e:fa:ff:df:d5:6c:8d:8d:39:f6:a7:94:75:ef:97:09:a5:aa: 2e:10:ce:04:ae:43:c8:82:e9:d5:54:d7:50:6b:09:3c:a3:dd: 1b:a5:bd:10 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBfkLYD5L80VzE/WB+I4wgi1ApagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzAxM1oX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAN2JlNzVjN2ZkMTFkMDY4NmI3NzA5 MGVmZDY2ZTZiMGE5MTY3ZGMzM2EwODEzZjNlNGFmYzkxMGU5ZDAxOGM5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D+FM4voBj+e1s7i4dTIThuRSJoj d8giw7c7fXqpyuBKqaE8Nv+43VOCPA3CGSo4JL34w7e73VXR7iLGBFQsNvimE9hf 8y+dIx+sgGlKeKRPeoWRAhdKiPOpO4TScXqkye8K0GyYEnc+iC3muyHp4buFgqJv 0ucif9OVti8rE1uJKUuJNlMOSz6m+egUDU0v+Qvp7czppY3FU+h1IRbk8wmgO1U8 zoFtcQJVRgz+jTarnyZiAT1KOGDh5ZURz5JZGM7nVEXtpwDEMzBnN366ria54TVH Ad5MVw9gZMKYxStgtEQX5gqk1fTbd06Ba9aAAMpoRxO25vfTLwhLH/YkywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFALNPf1pKzvTqH3C6OzMSVdrXClbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5OTI5NWFjLWQ2MzYtNDc1NS05NGMzLTNjNjE1MDEyZjZkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoPAwDQYJKoZIhvcNAQELBQADggEBAFi2w098Atfnuyr1+HTk oogCAa8QtSSFlsGwWi8GUFTYo8aplLsWarcC1LU+dsflcL1LnxX9I+IagMM8mtLM NoRvRhCdpaAgdTD/baJyPxVa6T/Hvyu9dpBxTCrCF2/vGYtVudfhHqpz96uM2y+l xM4IUXh+KppRr+RDMY5kTI1tecyQMRVPFj32usD00o596QahcxKMOAKMoAp7UcyR hf188n20+7IdU9wLAPlEKaXUYHPSdcolIA9NHKwWaTB/o6gr1alRSSYu7HjdnuXp qD4lYHGzSDZARi76/9/VbI2NOfanlHXvlwmlqi4QzgSuQ8iC6dVU11BrCTyj3Rul vRA= -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:00 2025 by rpki-client