This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3481634-003f-49ad-9734-f76ab6e30487.roa File: b3481634-003f-49ad-9734-f76ab6e30487.roa (raw, json) Hash identifier: Vd1TbdeC+119UqD2EYAS84UtkjJ3Nzo6p/5dc0KDflQ= Subject key identifier: E3:7D:D8:64:E2:08:35:89:00:52:46:07:D5:27:A0:52:57:17:57:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43B2DB943B7CE4987A6EFEA1872529E801329E09 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3481634-003f-49ad-9734-f76ab6e30487.roa Signing time: Sun 23 Nov 2025 00:11:10 +0000 ROA not before: Sun 23 Nov 2025 00:11:10 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b2:db:94:3b:7c:e4:98:7a:6e:fe:a1:87:25:29:e8:01:32:9e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:11:10 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=c2ee949b91eb9cbcd3977eeb7e27f37041a0451f17e2892098e4a6dbe3f379d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:f9:36:c0:cf:e4:bf:46:94:11:95:71:91: b1:f8:0b:30:a7:fb:04:3a:03:96:78:21:75:8e:c6: eb:9a:b1:ec:c8:ae:93:19:0f:ce:3c:1c:46:86:d5: 1f:15:1c:7d:d9:a8:b9:42:60:a7:51:b8:5c:23:be: b5:36:b5:f5:7b:89:71:55:da:5f:27:39:92:54:e3: 23:8b:6e:a9:a3:ee:46:4d:6b:ec:45:bf:8c:61:61: c3:14:22:a0:aa:e2:a3:54:55:c4:6c:28:17:35:28: ae:9a:de:3e:65:8e:ee:32:db:b0:79:24:36:fe:3f: 02:47:6c:db:85:29:18:d9:bf:25:8f:22:2c:3d:6c: 18:13:cb:e4:9c:be:23:dc:d9:75:90:15:93:8d:bc: f6:04:f4:0e:29:7a:21:3f:a1:b7:ee:ca:bd:ab:45: 3b:dc:c8:d7:37:9b:88:2d:9a:b5:86:5e:db:79:b8: cf:92:58:fa:38:38:d2:78:cb:85:0e:e6:12:78:40: e1:27:f7:12:07:bb:50:54:9e:5d:d2:fc:d3:23:4b: 8f:b9:17:a2:69:78:13:de:c7:71:47:85:a3:ea:73: f3:d9:45:67:2e:3a:da:38:85:bb:31:a2:d5:ef:3e: 53:15:d5:51:17:66:97:91:bf:3f:4f:44:91:ab:6b: bd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:D8:64:E2:08:35:89:00:52:46:07:D5:27:A0:52:57:17:57:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3481634-003f-49ad-9734-f76ab6e30487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:2800::/40 Signature Algorithm: sha256WithRSAEncryption 53:95:0a:bc:83:bb:9c:b4:21:a8:d6:b5:5e:1a:ac:d5:8f:fd: 7a:c5:b8:05:d8:74:10:22:69:b0:ae:35:14:c6:56:41:cf:d4: 99:00:8a:6c:ce:a3:16:65:6b:46:30:2c:d7:77:26:3b:13:69: 5d:d3:8f:05:0b:8b:a3:27:86:90:c5:7b:a1:75:47:f9:69:34: 13:8d:a6:09:83:c7:57:db:37:a9:33:c9:09:02:7e:a2:10:2d: 61:09:8c:e4:43:f3:01:06:1a:ea:70:fa:91:36:a2:ee:d3:1b: 74:6b:54:a9:72:30:63:ba:0c:6e:da:70:4e:e0:96:ba:b2:8b: ed:79:bc:80:6d:1b:77:4f:17:ac:0d:0a:17:30:b7:b2:c3:22: 52:44:33:68:45:33:cf:44:e1:08:cd:bb:e6:91:a3:9f:07:62: 04:b0:5c:95:a2:ae:b9:35:9e:91:1f:e2:46:62:17:af:27:4b: 75:a4:e5:c0:11:ac:84:75:ff:37:84:8f:5c:15:0f:02:09:35: 7a:74:27:ad:3f:be:f7:36:fa:c5:88:b6:d8:ba:be:32:d6:21: d5:52:b2:75:ae:87:77:26:41:c9:37:d2:e1:c5:57:7b:78:ae: 34:d3:64:5e:71:4a:7d:83:a7:32:70:38:ab:a3:77:b4:66:35: 17:4f:a2:cf -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQ7LblDt85Jh6bv6hhyUp6AEyngkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTExMFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAYzJlZTk0OWI5MWViOWNiY2QzOTc3 ZWViN2UyN2YzNzA0MWEwNDUxZjE3ZTI4OTIwOThlNGE2ZGJlM2YzNzlkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAr5NsDP5L9GlBGVcZGx+Aswp/sE OgOWeCF1jsbrmrHsyK6TGQ/OPBxGhtUfFRx92ai5QmCnUbhcI761NrX1e4lxVdpf JzmSVOMji26po+5GTWvsRb+MYWHDFCKgquKjVFXEbCgXNSiumt4+ZY7uMtuweSQ2 /j8CR2zbhSkY2b8ljyIsPWwYE8vknL4j3Nl1kBWTjbz2BPQOKXohP6G37sq9q0U7 3MjXN5uILZq1hl7bebjPklj6ODjSeMuFDuYSeEDhJ/cSB7tQVJ5d0vzTI0uPuRei aXgT3sdxR4Wj6nPz2UVnLjraOIW7MaLV7z5TFdVRF2aXkb8/T0SRq2u9uwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFON92GTiCDWJAFJGB9UnoFJXF1fuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzNDgxNjM0LTAwM2YtNDlhZC05NzM0LWY3NmFiNmUzMDQ4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6igwDQYJKoZIhvcNAQELBQADggEBAFOVCryDu5y0IajWtV4a rNWP/XrFuAXYdBAiabCuNRTGVkHP1JkAimzOoxZla0YwLNd3JjsTaV3TjwULi6Mn hpDFe6F1R/lpNBONpgmDx1fbN6kzyQkCfqIQLWEJjORD8wEGGupw+pE2ou7TG3Rr VKlyMGO6DG7acE7glrqyi+15vIBtG3dPF6wNChcwt7LDIlJEM2hFM89E4QjNu+aR o58HYgSwXJWirrk1npEf4kZiF68nS3Wk5cARrIR1/zeEj1wVDwIJNXp0J60/vvc2 +sWItti6vjLWIdVSsnWuh3cmQck30uHFV3t4rjTTZF5xSn2DpzJwOKujd7RmNRdP os8= -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:19 2025 by rpki-client