This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9db113c6-a130-49bc-9492-bbe8536f2e52.roa File: 9db113c6-a130-49bc-9492-bbe8536f2e52.roa (raw, json) Hash identifier: aUoElzre4gpL4dwXBn1rM9UlXugpcpWYvTkZPHu98rc= Subject key identifier: 4A:A9:FC:B6:11:D4:73:E6:DD:70:0A:CB:D5:53:80:DF:3A:7A:26:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 36F91915EA6B81995583EEDCCEE051FCE8B32D0F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9db113c6-a130-49bc-9492-bbe8536f2e52.roa Signing time: Thu 04 Dec 2025 00:01:20 +0000 ROA not before: Thu 04 Dec 2025 00:01:20 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f9:19:15:ea:6b:81:99:55:83:ee:dc:ce:e0:51:fc:e8:b3:2d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:01:20 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=762205c5cf59cc3a9a0b3c138ee123a0b4b28f92f812a75a9117de6d30f31ab2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:4f:5d:8e:4b:47:2c:83:70:54:48:b2:f3: da:26:e3:08:38:3f:73:66:7f:6e:88:13:b2:c4:8a: 92:b7:c2:0b:6d:be:2d:ab:96:00:c7:d6:cc:f3:71: 73:6e:b4:17:da:fa:a9:53:2f:6b:c5:15:5f:01:3c: 7f:43:de:1d:bf:d4:39:6a:1d:3f:e0:2f:f3:c3:63: 99:e8:b9:fc:4a:3c:08:4a:8d:16:99:48:12:a7:8c: f8:04:94:ce:c7:be:57:e4:26:b1:23:53:1d:77:33: a2:63:d2:38:84:43:51:72:22:bc:c5:37:5f:a4:e9: d2:ea:c0:a5:1d:e6:28:3d:1b:c9:3e:45:b6:a1:31: ab:a9:e8:3c:ec:b3:7b:83:54:82:4b:4c:db:0f:09: 55:f0:6a:31:0e:b8:cb:69:de:fc:ac:9b:64:34:e3: cf:50:1d:6c:be:8f:a1:7b:05:42:49:24:46:c2:1c: 3d:02:c3:10:0e:dd:94:6c:25:be:f4:e6:e0:1c:ae: aa:f7:85:67:01:cb:77:63:92:c6:cd:14:1e:70:3d: 60:b7:06:3b:93:9e:13:3f:d4:9f:6f:17:af:d0:b4: 8b:d7:a7:07:db:12:d6:b1:74:79:86:a2:62:1e:1b: 70:07:6e:3e:9f:cb:5e:8b:e0:0d:77:99:1f:d0:9a: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:FC:B6:11:D4:73:E6:DD:70:0A:CB:D5:53:80:DF:3A:7A:26:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9db113c6-a130-49bc-9492-bbe8536f2e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:2000::/40 Signature Algorithm: sha256WithRSAEncryption 1a:6d:cf:ab:ca:5c:06:9c:39:d7:ca:e4:83:cb:bc:80:d9:a0: f5:b1:d1:83:47:51:e6:11:52:82:61:7c:dc:5d:51:6e:a8:4a: 19:e2:4b:e0:d1:16:51:88:c3:a8:b2:d9:0b:6b:de:91:a6:a3: 0d:30:56:24:c3:b3:b5:d5:ca:ba:7f:65:2f:38:b3:26:49:e1: 63:2e:22:bd:5c:cf:16:8a:11:ae:c9:dd:e4:7c:68:f7:7b:4d: 56:37:a1:37:16:1e:93:96:75:03:6c:d6:3e:9e:9a:83:92:4b: eb:a9:bb:17:e8:1c:8b:5a:cb:96:0a:70:e5:41:2e:9b:49:4f: db:ef:a4:2f:44:13:27:28:a0:ce:5d:99:e4:02:f2:4c:3d:e4: be:a3:d9:0f:84:64:a2:17:e8:1b:8f:98:18:07:76:b1:60:82: ae:25:02:5d:7a:8f:ae:f3:69:22:b9:a1:2e:ef:1d:04:dd:aa: be:ea:96:c0:b3:27:90:b0:25:d8:2d:79:ca:39:93:e3:c1:b3: a7:9d:7d:af:d4:83:73:47:09:41:6a:96:e5:b2:9e:49:eb:59: 0d:50:1e:63:f0:bd:f6:cf:ce:3d:d2:90:45:03:0b:04:31:5c: 5a:66:fb:21:0f:94:39:86:92:ac:63:2e:81:15:db:dc:77:96: b2:4a:1a:f4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNvkZFeprgZlVg+7czuBR/OizLQ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDEyMFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANzYyMjA1YzVjZjU5Y2MzYTlhMGIz YzEzOGVlMTIzYTBiNGIyOGY5MmY4MTJhNzVhOTExN2RlNmQzMGYzMWFiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthRPXY5LRyyDcFRIsvPaJuMIOD9z Zn9uiBOyxIqSt8ILbb4tq5YAx9bM83FzbrQX2vqpUy9rxRVfATx/Q94dv9Q5ah0/ 4C/zw2OZ6Ln8SjwISo0WmUgSp4z4BJTOx75X5CaxI1MddzOiY9I4hENRciK8xTdf pOnS6sClHeYoPRvJPkW2oTGrqeg87LN7g1SCS0zbDwlV8GoxDrjLad78rJtkNOPP UB1svo+hewVCSSRGwhw9AsMQDt2UbCW+9ObgHK6q94VnAct3Y5LGzRQecD1gtwY7 k54TP9Sfbxev0LSL16cH2xLWsXR5hqJiHhtwB24+n8tei+ANd5kf0JogaQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEqp/LYR1HPm3XAKy9VTgN86eiaLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkYjExM2M2LWExMzAtNDliYy05NDkyLWJiZTg1MzZmMmU1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/iAwDQYJKoZIhvcNAQELBQADggEBABptz6vKXAacOdfK5IPL vIDZoPWx0YNHUeYRUoJhfNxdUW6oShniS+DRFlGIw6iy2Qtr3pGmow0wViTDs7XV yrp/ZS84syZJ4WMuIr1czxaKEa7J3eR8aPd7TVY3oTcWHpOWdQNs1j6emoOSS+up uxfoHItay5YKcOVBLptJT9vvpC9EEycooM5dmeQC8kw95L6j2Q+EZKIX6BuPmBgH drFggq4lAl16j67zaSK5oS7vHQTdqr7qlsCzJ5CwJdgteco5k+PBs6edfa/Ug3NH CUFqluWynknrWQ1QHmPwvfbPzj3SkEUDCwQxXFpm+yEPlDmGkqxjLoEV29x3lrJK GvQ= -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:20 2025 by rpki-client