This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f36078b-c983-464e-a2ad-491f1d9d1dc3.roa File: 9f36078b-c983-464e-a2ad-491f1d9d1dc3.roa (raw, json) Hash identifier: PqNsxuTDedmQLANmR6eBvd47E7I/52tm/9Hi7j/y4D8= Subject key identifier: 4C:95:1C:CF:66:CA:C8:3C:FC:19:8C:4B:BF:A4:FA:D5:5D:A9:32:39 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69F91DA3A048978F564B069CD039C9BB0A6980AE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f36078b-c983-464e-a2ad-491f1d9d1dc3.roa Signing time: Wed 26 Nov 2025 19:36:42 +0000 ROA not before: Wed 26 Nov 2025 19:36:42 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f9:1d:a3:a0:48:97:8f:56:4b:06:9c:d0:39:c9:bb:0a:69:80:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 19:36:42 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=953d8f1a3894f37434613e35f30fcb0871f13232459755216875fc5a8581b7f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:0b:08:5d:5c:cf:25:4d:77:01:ae:9e:17: 02:19:18:83:9b:11:4e:8e:ba:cd:f4:99:64:5e:d8: 0f:b2:0c:2b:1b:0c:72:ab:44:a4:4d:6a:46:2f:da: 9c:0c:fc:04:cf:ec:5e:1c:31:23:39:87:91:56:e6: 96:84:b5:31:b3:37:05:92:26:f5:14:18:44:8c:36: 52:d4:03:93:4d:1a:3a:fe:e9:e4:f8:40:9f:20:9f: 7f:13:7e:d9:b1:ff:29:1f:35:71:24:b7:17:f4:4e: 62:9a:14:bd:4a:e9:5f:ce:e3:c0:dd:64:01:6d:5f: 8a:a2:3c:06:e8:4d:ed:34:08:2b:17:f7:0c:09:3a: 4c:2b:9e:d9:37:5e:24:e5:05:51:19:01:5a:e0:8a: e9:0b:f3:50:e9:47:cb:36:2d:a2:df:08:27:9d:81: 2f:18:40:c3:f6:89:e6:4f:22:e7:8b:f9:cd:d8:e0: 3b:c5:15:fd:f5:e2:8a:b8:36:44:47:25:29:05:6f: 25:79:70:52:f2:d2:b3:3c:e5:93:d2:5b:8e:80:b6: 02:0a:ad:3e:4b:06:69:e2:8e:92:8f:45:7e:f1:b7: 5e:cd:eb:3b:54:9f:34:9c:e3:f8:8d:55:01:8c:14: a0:c8:46:8e:69:c8:b2:81:7f:8e:32:f1:86:56:f1: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:95:1C:CF:66:CA:C8:3C:FC:19:8C:4B:BF:A4:FA:D5:5D:A9:32:39 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f36078b-c983-464e-a2ad-491f1d9d1dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4050::/48 Signature Algorithm: sha256WithRSAEncryption 5c:1a:11:45:1a:9f:74:43:0f:08:15:2d:ac:08:02:cc:fc:49: 15:c5:24:3c:cd:48:c5:09:a7:f2:10:21:d5:b6:13:7a:39:43: 2f:81:2b:c3:46:51:4c:de:44:36:5f:f1:22:16:de:28:e4:09: 34:61:24:50:62:a0:29:46:80:54:b1:8c:db:55:da:5e:da:45: 5f:98:e4:01:33:dc:ba:3d:66:7f:7c:e2:fe:b3:69:2b:30:7d: 3d:df:17:1e:05:0f:a3:e0:9d:0d:62:11:4e:f0:f7:d6:09:75: d7:4e:6e:68:ab:8e:bd:c2:e8:e1:68:84:38:0b:8a:5f:b8:54: f0:3c:fe:36:93:18:e8:72:5d:3d:01:ea:d3:81:95:ec:66:a1: 54:f2:b9:dc:a1:ac:fc:af:bc:8b:99:7b:46:18:40:94:de:a0: 43:14:04:e0:a7:f9:31:d9:ca:ae:e7:2a:04:81:14:38:c7:73: ea:40:aa:8e:7d:83:79:2f:ab:a1:ed:1f:4c:32:f5:6e:69:2b: c0:6d:d7:4e:83:d7:8a:13:60:31:60:b9:d5:b8:db:38:fc:39: 5e:c4:a4:a6:ec:24:bb:8e:cb:c9:db:79:81:c9:ed:5c:3d:d6: d6:4f:97:44:9e:52:55:b1:7e:e0:4f:84:d3:4f:e1:27:53:a6: a2:1e:6d:97 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUafkdo6BIl49WSwac0DnJuwppgK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjE5MzY0MloX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNAOTUzZDhmMWEzODk0ZjM3NDM0NjEz ZTM1ZjMwZmNiMDg3MWYxMzIzMjQ1OTc1NTIxNjg3NWZjNWE4NTgxYjdmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF0LCF1czyVNdwGunhcCGRiDmxFO jrrN9JlkXtgPsgwrGwxyq0SkTWpGL9qcDPwEz+xeHDEjOYeRVuaWhLUxszcFkib1 FBhEjDZS1AOTTRo6/unk+ECfIJ9/E37Zsf8pHzVxJLcX9E5imhS9SulfzuPA3WQB bV+KojwG6E3tNAgrF/cMCTpMK57ZN14k5QVRGQFa4IrpC/NQ6UfLNi2i3wgnnYEv GEDD9onmTyLni/nN2OA7xRX99eKKuDZERyUpBW8leXBS8tKzPOWT0luOgLYCCq0+ SwZp4o6Sj0V+8bdezes7VJ80nOP4jVUBjBSgyEaOaciygX+OMvGGVvH8AwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEyVHM9mysg8/BmMS7+k+tVdqTI5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmMzYwNzhiLWM5ODMtNDY0ZS1hMmFkLTQ5MWYxZDlkMWRjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BQMA0GCSqGSIb3DQEBCwUAA4IBAQBcGhFFGp90Qw8IFS2s CALM/EkVxSQ8zUjFCafyECHVthN6OUMvgSvDRlFM3kQ2X/EiFt4o5Ak0YSRQYqAp RoBUsYzbVdpe2kVfmOQBM9y6PWZ/fOL+s2krMH093xceBQ+j4J0NYhFO8PfWCXXX Tm5oq469wujhaIQ4C4pfuFTwPP42kxjocl09AerTgZXsZqFU8rncoaz8r7yLmXtG GECU3qBDFATgp/kx2cqu5yoEgRQ4x3PqQKqOfYN5L6uh7R9MMvVuaSvAbddOg9eK E2AxYLnVuNs4/DlexKSm7CS7jsvJ23mBye1cPdbWT5dEnlJVsX7gT4TTT+EnU6ai Hm2X -----END CERTIFICATE-----Generated at Sat Dec 6 09:48:26 2025 by rpki-client