This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa File: a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa (raw, json) Hash identifier: v45AJfjRupcZSD8ZawLMp75gah++4fdW/3ZQB+8SQx0= Subject key identifier: 1A:0A:4E:93:51:B8:85:95:4F:3D:0A:19:8E:D9:E8:7B:D9:3D:CE:7E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 502DCE8D34B01CD07490418877E2F5DF514E7AAA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa Signing time: Wed 26 Nov 2025 00:00:14 +0000 ROA not before: Wed 26 Nov 2025 00:00:14 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2d:ce:8d:34:b0:1c:d0:74:90:41:88:77:e2:f5:df:51:4e:7a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:00:14 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=e9e8e9c94ea58d8087b5ff70e7f8b831eba61ddd2e47389625b260184de52079, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:42:fd:d6:ad:cc:3f:23:76:e7:bb:df:d9:41: 3f:48:e9:f2:4d:4d:32:d9:d4:75:8a:86:03:cc:b6: f6:ab:e8:77:c4:70:bc:c4:6b:6c:bf:07:72:cb:64: 92:2a:45:ed:42:af:fc:18:cd:d0:0b:34:58:d0:73: 32:89:b6:6a:c5:3e:fb:c2:82:3a:cb:17:5c:be:cb: 8f:60:da:3c:47:db:c7:ee:3e:7e:92:a9:e9:fa:f4: 1b:9c:e5:f9:58:6c:a7:f8:ee:25:37:a2:b6:11:10: 06:0c:7d:14:0f:39:bf:81:04:07:7f:3c:09:0c:26: 40:d4:0e:38:73:86:5e:b8:0d:48:7a:d7:11:3a:d6: 92:7d:c2:6b:f9:75:dc:dc:37:7c:ca:1d:55:9c:29: 68:68:ad:89:0e:87:bd:28:c2:a5:3e:b4:b5:63:d0: 15:b5:ee:e1:3d:1f:b8:41:72:b4:be:9c:60:b1:86: 9a:7d:5e:85:1e:29:10:57:30:c8:ac:c0:67:89:9d: 8c:df:ac:c3:fc:18:ac:12:da:fc:93:70:63:f6:c0: 9e:05:1e:93:49:dd:f5:6d:e2:ca:83:1f:a5:37:44: 7a:70:f7:8a:fc:7c:7d:e0:ea:6e:bd:67:75:7b:45: 96:7d:68:30:f0:68:19:74:9b:59:72:be:8b:23:7a: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0A:4E:93:51:B8:85:95:4F:3D:0A:19:8E:D9:E8:7B:D9:3D:CE:7E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4800::/40 Signature Algorithm: sha256WithRSAEncryption 7f:8c:29:9f:8c:9f:80:44:96:e4:57:e5:9f:2f:f6:33:ff:c9: 7e:c4:3f:80:f6:c0:6c:0e:8f:73:a7:7f:3d:b0:fc:4c:69:e6: f2:fe:e4:c0:94:19:8c:13:0b:a3:e1:ed:af:ad:bf:e0:c9:f8: 00:ad:57:34:48:98:4b:36:4b:d9:0d:01:c7:66:92:fe:b4:2a: 83:01:f9:1d:ed:14:24:5f:88:8a:a7:3d:9a:df:2f:f6:e6:20: b0:f5:53:e1:6e:45:ef:2c:de:73:30:3a:5c:6c:e6:f8:12:7d: 2d:51:ca:df:44:27:f8:19:d3:4f:06:c1:03:05:07:6a:0b:6d: 10:bc:0a:32:d9:0c:76:af:bd:ca:89:5c:89:36:24:74:f6:54: 00:be:4a:df:f3:c9:43:e7:3a:83:a2:1f:34:13:07:63:9d:18: 02:83:4e:77:2d:5f:69:a8:38:b6:80:d6:2f:8a:ce:65:a1:28: 7e:f8:23:29:d7:45:da:2b:21:aa:61:47:5a:da:88:0f:a2:7d: 63:87:8c:d0:c5:8e:63:4d:0f:f7:8a:73:60:e7:13:7d:13:5d: 02:a7:8d:6a:a1:31:77:a5:99:40:2b:c1:6f:bc:80:21:ea:20: 9c:da:30:9c:59:1e:ca:ae:cd:05:18:c4:01:db:ba:1f:af:7b: 3b:ad:24:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUC3OjTSwHNB0kEGId+L131FOeqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDAxNFoX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNAZTllOGU5Yzk0ZWE1OGQ4MDg3YjVm ZjcwZTdmOGI4MzFlYmE2MWRkZDJlNDczODk2MjViMjYwMTg0ZGU1MjA3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UL91q3MPyN257vf2UE/SOnyTU0y 2dR1ioYDzLb2q+h3xHC8xGtsvwdyy2SSKkXtQq/8GM3QCzRY0HMyibZqxT77woI6 yxdcvsuPYNo8R9vH7j5+kqnp+vQbnOX5WGyn+O4lN6K2ERAGDH0UDzm/gQQHfzwJ DCZA1A44c4ZeuA1IetcROtaSfcJr+XXc3Dd8yh1VnCloaK2JDoe9KMKlPrS1Y9AV te7hPR+4QXK0vpxgsYaafV6FHikQVzDIrMBniZ2M36zD/BisEtr8k3Bj9sCeBR6T Sd31beLKgx+lN0R6cPeK/Hx94OpuvWd1e0WWfWgw8GgZdJtZcr6LI3qHxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBoKTpNRuIWVTz0KGY7Z6HvZPc5+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ODI4MGFjLWY2Y2ItNGRkYi04N2M4LTFmZjZmNTA1NGY3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EgwDQYJKoZIhvcNAQELBQADggEBAH+MKZ+Mn4BEluRX5Z8v 9jP/yX7EP4D2wGwOj3Onfz2w/Exp5vL+5MCUGYwTC6Ph7a+tv+DJ+ACtVzRImEs2 S9kNAcdmkv60KoMB+R3tFCRfiIqnPZrfL/bmILD1U+FuRe8s3nMwOlxs5vgSfS1R yt9EJ/gZ008GwQMFB2oLbRC8CjLZDHavvcqJXIk2JHT2VAC+St/zyUPnOoOiHzQT B2OdGAKDTnctX2moOLaA1i+KzmWhKH74IynXRdorIaphR1raiA+ifWOHjNDFjmNN D/eKc2DnE30TXQKnjWqhMXelmUArwW+8gCHqIJzaMJxZHsquzQUYxAHbuh+vezut JE0= -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:54 2025 by rpki-client