This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9adbb722-77fd-43f7-9d65-fef8bf41ab44.roa File: 9adbb722-77fd-43f7-9d65-fef8bf41ab44.roa (raw, json) Hash identifier: 6WCjHbj5CrAbvHrsKBjkYELA1t5BQLMXqr+o7GI0E4M= Subject key identifier: 74:4B:CD:68:8E:EC:FF:A5:5A:25:30:BE:84:BC:E8:5F:04:61:90:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2BA2891F873D025B3A9A7BA2832E5EC796C37686 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9adbb722-77fd-43f7-9d65-fef8bf41ab44.roa Signing time: Thu 04 Dec 2025 00:00:41 +0000 ROA not before: Thu 04 Dec 2025 00:00:41 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a2:89:1f:87:3d:02:5b:3a:9a:7b:a2:83:2e:5e:c7:96:c3:76:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:00:41 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=4f5b96e7041b8cebe438af6bf5ce03e0fcc21079d6524bc3b81b6d1aae451555, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d6:d5:d4:ed:ad:84:83:d5:d7:47:30:14:27: 11:a7:25:f7:13:60:5a:cb:56:94:37:ce:b3:92:33: b9:4f:01:f1:39:cb:9e:e3:43:df:f1:a7:b5:0e:cf: 87:b4:02:24:8e:93:df:0d:46:d5:f6:a7:6f:a2:6c: af:a5:00:75:49:47:75:4a:ce:82:0d:4c:97:5c:e9: ac:64:22:84:93:df:2d:ce:8d:2c:c0:db:d9:2a:fc: b3:3d:9d:bd:48:bc:fb:c3:7c:06:57:cb:05:f0:cd: 77:60:6b:cb:fb:cc:fd:2c:a8:c4:2f:65:ee:f4:66: 3e:30:2e:42:f4:94:65:2c:18:62:df:43:7e:62:23: 92:59:8c:f8:78:61:1e:a4:4c:af:3f:8c:52:2f:75: 2b:96:1d:a1:e7:4d:89:e5:8a:ae:9c:a4:97:75:82: 1f:e1:d4:58:6a:fe:84:71:63:f6:60:0d:9f:bf:2e: 06:c7:d0:e2:d3:3f:53:66:58:a8:dd:35:38:21:4e: 3a:5b:ad:ed:72:58:61:30:30:1e:0f:06:14:ea:f4: 78:d8:aa:33:b8:e5:ca:a1:05:df:08:38:6c:8d:af: bd:16:27:24:cc:f1:bf:98:46:c4:d8:ce:1d:85:1f: 9f:9f:d8:3c:04:ad:aa:ad:3b:30:89:43:fb:b5:b0: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4B:CD:68:8E:EC:FF:A5:5A:25:30:BE:84:BC:E8:5F:04:61:90:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9adbb722-77fd-43f7-9d65-fef8bf41ab44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2000::/40 Signature Algorithm: sha256WithRSAEncryption c9:8f:25:b4:37:b9:98:dc:fb:1f:a4:d0:ae:15:43:2a:33:be: 39:9e:34:7b:06:0e:5b:1d:64:fb:d2:fd:62:4a:bf:89:9c:63: 3d:8d:0a:da:2e:ba:19:ba:2e:eb:ce:e8:d1:be:86:96:56:60: 8a:1e:06:d5:32:9d:d4:4d:79:94:3a:dd:20:2d:7a:17:30:89: 47:ae:15:a9:de:b2:93:71:fd:f4:e7:a9:85:95:fe:37:8c:d5: 91:10:14:89:82:c0:40:d4:c1:8a:05:a3:f9:9e:65:e2:b6:72: b8:75:20:00:34:30:64:5a:f8:45:1c:64:bd:6f:6b:64:fc:fb: 02:3a:dd:18:14:14:c7:43:cf:10:35:ed:f6:3c:e3:07:0f:60: df:2b:5c:d6:d3:38:ab:4f:8e:23:d9:81:44:e1:21:9e:07:b6: 79:4e:d9:21:87:db:c4:87:66:c4:41:03:26:08:90:4f:1d:0c: 4d:a6:a4:ff:8c:f6:84:b2:ff:7b:95:5e:7f:36:4f:69:e1:c5: e5:9b:96:bc:cb:69:02:e7:c4:0f:44:a0:ba:5a:16:45:fb:13: 49:56:63:df:e2:85:9d:34:ce:46:55:a6:15:68:d3:04:31:0d: e2:f2:37:63:3a:2a:3d:1f:af:7a:92:03:3f:26:a2:dc:31:ce: 4c:41:86:1a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK6KJH4c9Als6mnuigy5ex5bDdoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDA0MVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANGY1Yjk2ZTcwNDFiOGNlYmU0Mzhh ZjZiZjVjZTAzZTBmY2MyMTA3OWQ2NTI0YmMzYjgxYjZkMWFhZTQ1MTU1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9bV1O2thIPV10cwFCcRpyX3E2Ba y1aUN86zkjO5TwHxOcue40Pf8ae1Ds+HtAIkjpPfDUbV9qdvomyvpQB1SUd1Ss6C DUyXXOmsZCKEk98tzo0swNvZKvyzPZ29SLz7w3wGV8sF8M13YGvL+8z9LKjEL2Xu 9GY+MC5C9JRlLBhi30N+YiOSWYz4eGEepEyvP4xSL3Urlh2h502J5YqunKSXdYIf 4dRYav6EcWP2YA2fvy4Gx9Di0z9TZlio3TU4IU46W63tclhhMDAeDwYU6vR42Koz uOXKoQXfCDhsja+9FickzPG/mEbE2M4dhR+fn9g8BK2qrTswiUP7tbBUDwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHRLzWiO7P+lWiUwvoS86F8EYZDGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhZGJiNzIyLTc3ZmQtNDNmNy05ZDY1LWZlZjhiZjQxYWI0NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSAwDQYJKoZIhvcNAQELBQADggEBAMmPJbQ3uZjc+x+k0K4V QyozvjmeNHsGDlsdZPvS/WJKv4mcYz2NCtouuhm6LuvO6NG+hpZWYIoeBtUyndRN eZQ63SAtehcwiUeuFanespNx/fTnqYWV/jeM1ZEQFImCwEDUwYoFo/meZeK2crh1 IAA0MGRa+EUcZL1va2T8+wI63RgUFMdDzxA17fY84wcPYN8rXNbTOKtPjiPZgUTh IZ4HtnlO2SGH28SHZsRBAyYIkE8dDE2mpP+M9oSy/3uVXn82T2nhxeWblrzLaQLn xA9EoLpaFkX7E0lWY9/ihZ00zkZVphVo0wQxDeLyN2M6Kj0fr3qSAz8motwxzkxB hho= -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:18 2025 by rpki-client