This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa File: 9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa (raw, json) Hash identifier: bxbSNzFrTd5N1zDuMNt6DoMMuv8OaB1Lx9vQ7Svh+X0= Subject key identifier: 5E:BC:85:BD:19:EB:2E:18:B8:CF:2B:6E:9A:A8:9C:D0:22:DE:FE:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2AADBF7A397A4E1CA85472B88E377333164206DD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa Signing time: Wed 03 Dec 2025 00:20:05 +0000 ROA not before: Wed 03 Dec 2025 00:20:05 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ad:bf:7a:39:7a:4e:1c:a8:54:72:b8:8e:37:73:33:16:42:06:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 3 00:20:05 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=4cdbb2c8590219e3236b4c7e0f7d0f2483db22777ea347e4b3f974fc0f77ee9e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:62:d4:ad:02:b8:67:86:bb:7a:7e:52:88: 0e:ec:62:6b:4a:b6:fa:d7:0f:0b:2c:6f:bc:f6:f7: 8b:b9:f3:fc:ac:9f:42:dd:4a:30:b2:e0:8b:0d:38: c9:66:e8:84:9f:e0:1f:ad:cd:6c:b6:dd:9c:67:af: e9:dc:e4:33:d0:62:f9:ef:82:73:d0:fb:af:de:26: 44:32:40:a3:50:4d:84:96:a7:c5:41:34:61:55:ee: 95:44:7e:b0:23:69:f8:36:e8:a5:a2:44:20:06:66: 72:61:28:7b:cb:0f:f5:4a:d6:4a:70:52:ed:70:ac: e4:06:30:5e:64:72:70:2f:65:66:ee:4d:51:ed:7d: 8d:f4:56:99:c4:e9:da:91:17:76:75:e3:bc:84:85: a4:4c:f8:51:15:8a:39:5c:12:28:2e:c3:ef:c7:88: 96:b6:2a:13:c8:c5:a0:23:ab:64:30:87:b3:33:1c: 8a:6e:7d:99:53:ef:10:ed:62:d5:44:74:03:97:f8: a1:76:d5:93:45:db:eb:d7:40:7c:1b:9d:70:a4:7e: e1:88:50:aa:80:4e:d8:77:f3:1a:7a:8c:03:97:ce: 08:14:5c:d1:06:55:40:0b:01:18:f7:d2:84:f6:96: 4a:27:4b:b0:54:ee:76:a7:c6:dd:cc:4e:c7:d6:69: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BC:85:BD:19:EB:2E:18:B8:CF:2B:6E:9A:A8:9C:D0:22:DE:FE:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f1abc2e-d305-4216-81d8-3d0f792d79c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:70c0::/48 Signature Algorithm: sha256WithRSAEncryption c1:94:59:79:85:b7:a8:9b:4e:f6:a3:fa:55:07:d7:b6:40:6e: b1:57:82:11:91:63:e5:f6:93:ba:33:24:c8:03:98:ea:8c:10: f9:62:2c:ba:e7:13:56:65:83:32:ca:75:c7:5a:f0:09:65:42: 6c:a7:64:a6:ae:0b:eb:71:c0:51:b9:22:17:ef:4e:e9:b0:6c: 8b:0d:92:4d:26:e4:21:0c:ec:3f:e4:1e:42:61:8b:e3:9a:ab: 3d:42:6c:1f:89:cb:74:27:57:bc:c0:18:cd:38:bf:31:bb:fa: fe:82:fc:73:cf:b7:ea:42:8c:69:b8:27:02:60:b5:ec:9a:b9: 3e:8d:cb:d8:31:25:9a:c9:c3:0f:79:54:08:6e:c7:87:88:b1: fa:87:8d:f5:73:2b:22:60:b2:75:8f:c2:66:f4:4a:c0:24:e6: ce:36:3e:7f:80:7f:04:60:16:ef:35:9e:9a:99:59:84:8c:18: 0c:0f:c5:d0:f9:18:08:24:c3:1b:5b:0c:59:87:06:7e:83:2f: 34:b0:d8:3b:e8:af:b4:c4:03:61:c5:95:32:1a:d1:0b:24:16: b5:8f:6a:c6:e7:b4:dc:c9:3c:9f:23:4c:64:6d:72:b5:ab:e4: 92:90:3a:13:5a:4f:41:29:19:84:f4:11:1b:8c:50:83:9d:b6: 59:19:0b:75 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKq2/ejl6ThyoVHK4jjdzMxZCBt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMjAwNVoX DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNANGNkYmIyYzg1OTAyMTllMzIzNmI0 YzdlMGY3ZDBmMjQ4M2RiMjI3NzdlYTM0N2U0YjNmOTc0ZmMwZjc3ZWU5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJNi1K0CuGeGu3p+UogO7GJrSrb6 1w8LLG+89veLufP8rJ9C3UowsuCLDTjJZuiEn+Afrc1stt2cZ6/p3OQz0GL574Jz 0Puv3iZEMkCjUE2ElqfFQTRhVe6VRH6wI2n4NuilokQgBmZyYSh7yw/1StZKcFLt cKzkBjBeZHJwL2Vm7k1R7X2N9FaZxOnakRd2deO8hIWkTPhRFYo5XBIoLsPvx4iW tioTyMWgI6tkMIezMxyKbn2ZU+8Q7WLVRHQDl/ihdtWTRdvr10B8G51wpH7hiFCq gE7Yd/MaeowDl84IFFzRBlVACwEY99KE9pZKJ0uwVO52p8bdzE7H1mnZLQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF68hb0Z6y4YuM8rbpqonNAi3v5CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMWFiYzJlLWQzMDUtNDIxNi04MWQ4LTNkMGY3OTJkNzljNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAHDAMA0GCSqGSIb3DQEBCwUAA4IBAQDBlFl5hbeom072o/pV B9e2QG6xV4IRkWPl9pO6MyTIA5jqjBD5Yiy65xNWZYMyynXHWvAJZUJsp2Smrgvr ccBRuSIX707psGyLDZJNJuQhDOw/5B5CYYvjmqs9Qmwfict0J1e8wBjNOL8xu/r+ gvxzz7fqQoxpuCcCYLXsmrk+jcvYMSWaycMPeVQIbseHiLH6h431cysiYLJ1j8Jm 9ErAJObONj5/gH8EYBbvNZ6amVmEjBgMD8XQ+RgIJMMbWwxZhwZ+gy80sNg76K+0 xANhxZUyGtELJBa1j2rG57TcyTyfI0xkbXK1q+SSkDoTWk9BKRmE9BEbjFCDnbZZ GQt1 -----END CERTIFICATE-----Generated at Sat Dec 6 14:42:38 2025 by rpki-client