This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa File: cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa (raw, json) Hash identifier: j57lEuTGsgXR+ybYd+Rkrs1BVr4TVBjLQn0kq2B9/T0= Subject key identifier: BA:F1:A8:4C:B2:33:85:8A:7B:A7:2D:9A:36:48:FD:57:3B:86:56:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3312B6AF2DA2DC4EBB562DAE2C77375B935DC5B0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa Signing time: Thu 04 Dec 2025 00:30:07 +0000 ROA not before: Thu 04 Dec 2025 00:30:07 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:12:b6:af:2d:a2:dc:4e:bb:56:2d:ae:2c:77:37:5b:93:5d:c5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:30:07 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=45767f2f650ae87300b0cb3fdf9dd3958cea59d295c0bff06416adb06346edef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:b8:6d:99:d7:e6:2c:6f:91:5a:f9:d7:2d: 4f:c0:7f:ac:13:ec:4a:ac:c0:45:04:dd:25:89:4e: c7:9a:85:0c:ac:1a:d6:d2:1e:04:f3:1b:87:f6:64: a9:62:20:44:99:e6:ac:bf:69:57:5b:8a:89:3b:55: 9d:11:8f:c7:d5:82:41:47:3c:a9:49:7c:84:d9:18: 4e:a7:62:c5:7e:ee:f2:69:fc:57:37:55:c6:2d:8a: f0:4d:d1:e6:0c:1a:21:14:58:d9:78:52:91:b4:5a: fa:cb:bf:f3:87:f4:a8:78:44:08:f3:94:e6:8d:2d: 37:c2:3e:a8:ad:70:a8:b7:a8:16:e4:8a:3b:a0:a9: e3:28:9f:1d:12:b6:43:22:f8:de:86:78:3e:dc:28: e9:2c:32:4f:01:46:c4:7a:a9:12:28:2a:28:32:c9: 28:1e:a6:b4:62:07:64:70:19:b9:99:20:cb:c2:8f: 23:02:37:92:d6:d6:66:93:bc:36:94:1d:05:96:ea: ae:a7:4b:80:2e:08:fc:38:2e:bc:50:f9:43:53:53: f2:3d:16:d9:3f:9e:f8:86:91:c5:a8:01:23:94:c5: 22:65:39:0a:76:c2:2e:9d:55:db:6d:9b:45:2e:5d: 16:26:5a:86:14:be:6d:18:b7:7a:b1:69:d8:2e:47: 9a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F1:A8:4C:B2:33:85:8A:7B:A7:2D:9A:36:48:FD:57:3B:86:56:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:4800::/40 Signature Algorithm: sha256WithRSAEncryption 67:bf:63:67:e0:c3:2f:df:8e:18:77:e2:d3:36:1f:ee:63:46: 70:71:a5:34:ba:44:4e:3e:bc:65:45:4e:59:58:7c:fe:fc:54: 8a:70:24:a8:d6:7f:8f:c5:92:62:0e:44:98:b5:7e:31:1f:e3: c0:11:0c:3b:1b:9a:23:7f:eb:a7:7f:29:bd:bb:90:1b:6c:cc: 31:ae:fd:3e:e2:cc:60:17:3b:26:76:16:1a:46:b9:ca:0f:48: 6f:a2:fa:a9:63:93:4f:68:85:e0:43:03:62:c7:77:4f:9d:09: d1:7f:79:eb:2d:e4:65:df:bd:eb:5d:ce:74:af:05:ba:fc:c0: 43:ec:7e:b4:aa:87:d6:a1:82:0b:a0:4a:fd:66:ba:38:b8:fa: ff:6d:04:48:fe:5b:92:34:b4:0d:a0:95:24:70:73:8a:fb:cf: 95:ac:d4:29:1e:f7:92:2f:16:ef:7f:6d:44:81:fd:a2:82:5e: 8f:44:93:8a:87:b0:6f:8d:18:49:cd:a6:0d:77:55:05:d5:e2: dc:14:91:a1:eb:28:ce:07:d6:54:af:0e:fd:05:e0:7b:1d:cb: 4e:85:67:5b:9b:e7:eb:e9:01:b6:5d:0f:bd:d7:19:af:71:48: c5:2f:a5:f4:17:d0:05:de:d1:78:8b:02:62:f0:40:7f:87:ae: 93:9a:44:e2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMxK2ry2i3E67Vi2uLHc3W5NdxbAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzAwN1oX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANDU3NjdmMmY2NTBhZTg3MzAwYjBj YjNmZGY5ZGQzOTU4Y2VhNTlkMjk1YzBiZmYwNjQxNmFkYjA2MzQ2ZWRlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N24bZnX5ixvkVr51y1PwH+sE+xK rMBFBN0liU7HmoUMrBrW0h4E8xuH9mSpYiBEmeasv2lXW4qJO1WdEY/H1YJBRzyp SXyE2RhOp2LFfu7yafxXN1XGLYrwTdHmDBohFFjZeFKRtFr6y7/zh/SoeEQI85Tm jS03wj6orXCot6gW5Io7oKnjKJ8dErZDIvjehng+3CjpLDJPAUbEeqkSKCooMsko Hqa0YgdkcBm5mSDLwo8jAjeS1tZmk7w2lB0Fluqup0uALgj8OC68UPlDU1PyPRbZ P574hpHFqAEjlMUiZTkKdsIunVXbbZtFLl0WJlqGFL5tGLd6sWnYLkeadQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLrxqEyyM4WKe6ctmjZI/Vc7hlbyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmMzVlMjY0LWI1M2EtNGI0OS1hN2M4LTViMTU5YjdjY2ZkNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8UgwDQYJKoZIhvcNAQELBQADggEBAGe/Y2fgwy/fjhh34tM2 H+5jRnBxpTS6RE4+vGVFTllYfP78VIpwJKjWf4/FkmIORJi1fjEf48ARDDsbmiN/ 66d/Kb27kBtszDGu/T7izGAXOyZ2FhpGucoPSG+i+qljk09oheBDA2LHd0+dCdF/ eest5GXfvetdznSvBbr8wEPsfrSqh9ahggugSv1muji4+v9tBEj+W5I0tA2glSRw c4r7z5Ws1Cke95IvFu9/bUSB/aKCXo9Ek4qHsG+NGEnNpg13VQXV4twUkaHrKM4H 1lSvDv0F4Hsdy06FZ1ub5+vpAbZdD73XGa9xSMUvpfQX0AXe0XiLAmLwQH+HrpOa ROI= -----END CERTIFICATE-----Generated at Sat Dec 6 14:42:18 2025 by rpki-client