This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa File: d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa (raw, json) Hash identifier: scxjOtCxb7cQndakOcGq6ajW5rpciI+Y6BwQpJSQUeQ= Subject key identifier: 9E:28:F2:BE:2E:DB:F4:E9:4D:D3:71:23:DB:6A:50:FC:54:6B:A7:4E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42A021275F1174050DE0FC39E4ACD04CCF7FB06B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa Signing time: Tue 02 Dec 2025 00:00:11 +0000 ROA not before: Tue 02 Dec 2025 00:00:11 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a0:21:27:5f:11:74:05:0d:e0:fc:39:e4:ac:d0:4c:cf:7f:b0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:00:11 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=7531827fc47a752c119dcfca45661cd65d6b55bf21a81dd971acaf4a4f6f6124, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:44:14:87:18:59:d2:11:9b:1e:eb:57:5c: 8c:35:0a:ef:1e:51:61:2b:d5:99:c6:5a:57:a9:f9: cf:c2:f6:ba:05:76:e5:46:13:80:d2:b7:52:54:a4: 4c:1c:d4:92:e8:77:05:7c:9a:8d:25:39:36:c2:a7: 20:27:14:a6:cb:06:55:88:f0:4b:b2:e2:3b:10:3a: b5:ec:d4:41:90:ca:7c:23:f1:2a:b7:61:92:ff:01: 48:f3:bd:53:14:8e:ca:2c:60:93:33:74:ae:4f:2d: e4:fa:ad:23:fe:30:0c:e2:23:e2:2c:0a:91:de:b8: ca:a9:2c:da:44:bd:42:b8:3c:f9:a6:d7:32:73:57: d9:38:d4:e4:5e:be:f8:38:d0:5a:71:d5:2a:11:1c: 96:5b:82:5f:8d:35:3b:73:ac:ca:a1:0f:c4:c7:4b: 2a:88:3d:41:9b:eb:4c:df:c6:09:c8:b6:cd:00:a5: 56:42:d5:a3:26:21:26:84:d9:ec:b9:8e:3b:a6:c1: f7:f0:75:1c:12:b0:fd:84:07:3a:1f:28:c4:bb:3c: 84:5c:4f:9d:5d:e9:73:49:de:a6:d5:95:c1:66:36: b8:62:db:8d:bd:c4:72:0b:ba:62:cb:96:23:8e:d8: 40:37:a1:7f:6e:9b:37:03:b3:43:2c:92:9f:13:f6: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:28:F2:BE:2E:DB:F4:E9:4D:D3:71:23:DB:6A:50:FC:54:6B:A7:4E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:10:15:61:b3:64:ec:3c:bd:a1:0a:aa:86:f4:ef:27:da:a1: f4:fc:5d:46:47:0c:82:6f:23:2b:37:a6:11:19:87:5f:62:cd: 87:76:c1:65:64:23:ba:53:c0:a6:76:95:57:7a:c3:2a:07:ff: 09:32:c1:fe:d7:00:00:c5:c3:06:38:e4:6b:e2:c5:bf:60:eb: 0f:0d:85:ee:a5:39:89:7b:93:45:27:2b:28:3e:0f:92:ad:97: 56:ff:5d:1c:19:6d:ea:7d:d4:bc:25:5c:3b:d2:12:a4:72:3f: 02:d1:09:18:41:2a:11:55:46:b9:52:ec:fc:f2:56:d2:64:4b: 53:4e:6e:16:ed:e1:2f:f4:dc:81:6b:5d:a2:95:d4:13:6d:e4: 50:2f:aa:fa:00:33:cf:27:c6:1f:40:42:8d:93:fb:d6:da:44: 61:2d:db:1e:65:f5:f8:e2:2e:67:5d:52:8e:a7:d5:2f:e1:b9: cb:bb:cc:a0:ef:ef:74:15:80:00:2e:28:ae:7d:30:47:54:81: 86:28:b4:f2:3b:14:a1:6f:2a:a9:02:2e:0e:4b:0c:1e:3c:70: 7d:e8:8a:2f:6e:a2:1d:52:d7:86:b5:f2:00:9b:e3:05:39:31: 07:04:f6:f3:9a:c1:dc:87:20:7c:d3:66:53:77:bf:e7:fb:ca: 60:68:78:cd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQqAhJ18RdAUN4Pw55KzQTM9/sGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDAxMVoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNANzUzMTgyN2ZjNDdhNzUyYzExOWRj ZmNhNDU2NjFjZDY1ZDZiNTViZjIxYTgxZGQ5NzFhY2FmNGE0ZjZmNjEyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2REFIcYWdIRmx7rV1yMNQrvHlFh K9WZxlpXqfnPwva6BXblRhOA0rdSVKRMHNSS6HcFfJqNJTk2wqcgJxSmywZViPBL suI7EDq17NRBkMp8I/Eqt2GS/wFI871TFI7KLGCTM3SuTy3k+q0j/jAM4iPiLAqR 3rjKqSzaRL1CuDz5ptcyc1fZONTkXr74ONBacdUqERyWW4JfjTU7c6zKoQ/Ex0sq iD1Bm+tM38YJyLbNAKVWQtWjJiEmhNnsuY47psH38HUcErD9hAc6HyjEuzyEXE+d XelzSd6m1ZXBZja4YtuNvcRyC7piy5YjjthAN6F/bps3A7NDLJKfE/Y2cwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ4o8r4u2/TpTdNxI9tqUPxUa6dOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNDM1ZGJiLTVkMWUtNDk0OC04MDI3LWU2NDMzZjcyYmZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8CgMA0GCSqGSIb3DQEBCwUAA4IBAQCKEBVhs2TsPL2hCqqG 9O8n2qH0/F1GRwyCbyMrN6YRGYdfYs2HdsFlZCO6U8CmdpVXesMqB/8JMsH+1wAA xcMGOORr4sW/YOsPDYXupTmJe5NFJysoPg+SrZdW/10cGW3qfdS8JVw70hKkcj8C 0QkYQSoRVUa5Uuz88lbSZEtTTm4W7eEv9NyBa12ildQTbeRQL6r6ADPPJ8YfQEKN k/vW2kRhLdseZfX44i5nXVKOp9Uv4bnLu8yg7+90FYAALiiufTBHVIGGKLTyOxSh byqpAi4OSwwePHB96IovbqIdUteGtfIAm+MFOTEHBPbzmsHchyB802ZTd7/n+8pg aHjN -----END CERTIFICATE-----Generated at Sat Dec 6 12:56:02 2025 by rpki-client