This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa File: ddd84904-3c7b-443c-8bda-81864bb08de1.roa (raw, json) Hash identifier: IdoCVyi/G2985FSNFKSTYbJb47vQq7NCsZp9Eml7HWI= Subject key identifier: 9D:92:F2:68:1C:B5:FC:8F:65:6F:17:88:24:E9:F4:62:7C:9D:68:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 09277D35CB1F137F9D582975B760609C4851E1E0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa Signing time: Wed 26 Nov 2025 00:01:14 +0000 ROA not before: Wed 26 Nov 2025 00:01:14 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:27:7d:35:cb:1f:13:7f:9d:58:29:75:b7:60:60:9c:48:51:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:01:14 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=2d6801e9a9c0d233a760bc70ea8c6733e13f6acf77a2290f6adb85e94bcc36db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d9:06:43:92:db:84:5b:55:46:66:62:3f:d9: ea:4d:92:e1:21:fa:4f:68:27:58:4b:f0:72:c4:76: 1b:4d:54:e0:0d:fe:07:b0:d4:c5:8e:ee:bd:96:b2: 86:c1:01:57:dd:6f:3c:40:6c:8c:0d:61:16:8d:f9: f4:2f:ce:0f:ca:cd:f9:63:4a:be:6e:6f:cf:85:1c: 66:2c:69:85:e2:eb:50:df:a5:24:76:37:12:5f:df: a8:8f:36:4d:e3:f4:62:32:93:d9:e7:58:c8:9e:6c: 21:21:af:6f:84:81:c0:84:ab:d5:c4:07:72:81:e0: e1:b4:3b:3b:6c:24:f3:fd:b8:7d:89:ca:58:48:62: 54:fb:40:0c:7d:35:f9:03:ef:21:cd:2c:b6:e1:e2: 22:02:35:55:f2:0b:7e:1a:99:e1:53:53:bc:6b:12: 25:83:00:cb:b2:1c:c7:8a:ee:5e:28:98:e8:a3:62: 40:46:cb:f7:c7:27:8e:53:7f:fb:d5:1f:64:9d:0c: d5:d3:be:8c:63:91:87:d3:1a:58:64:c2:31:cf:1a: 8c:6d:04:ed:3b:19:56:8f:2d:21:fc:e9:b7:cd:16: 1a:8d:6b:8e:75:55:e7:e9:23:40:66:5c:f7:8e:b0: 30:83:b9:a7:64:c9:d7:88:6b:ed:c4:d8:cf:1a:80: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:92:F2:68:1C:B5:FC:8F:65:6F:17:88:24:E9:F4:62:7C:9D:68:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:4800::/40 Signature Algorithm: sha256WithRSAEncryption 4d:c7:bc:79:ad:df:66:b7:b4:7f:11:8d:27:8e:29:47:c2:92: d4:ba:49:b1:c9:87:7c:a9:f6:f7:2e:e0:c9:05:17:5a:57:82: 9f:e9:8e:5a:65:d5:a1:b4:0f:7e:aa:1d:30:8d:2c:86:30:47: 1b:12:5a:37:23:86:70:49:36:f4:27:64:b7:31:d7:0c:84:1e: a1:f1:1e:b3:f5:60:e6:d3:3c:b9:e2:84:3c:c9:61:74:13:de: ee:32:6a:7f:67:4e:29:11:21:48:ef:6c:b2:7a:b4:71:61:1e: 67:c3:c7:5f:b1:38:9f:1f:7e:cb:3b:36:f0:d0:d6:ce:23:4f: c4:e6:f9:93:5b:e7:48:c3:57:c1:53:df:de:d4:52:42:c3:97: 1c:31:17:d4:4e:fe:b9:23:31:88:f3:45:28:8e:33:68:19:66: a1:70:7f:a6:3f:32:a9:43:bc:4a:d3:93:24:e5:40:4d:a7:a3: a6:46:19:8a:bf:24:50:ea:77:23:7b:f7:06:c1:18:84:8f:af: 40:3f:37:35:58:25:6e:80:79:19:a2:28:a1:59:71:19:39:27: ca:64:a7:c5:0c:9b:8e:b1:bb:f2:22:a4:17:89:88:5e:f5:ab: 0d:31:06:09:6c:cc:25:a4:d0:a5:41:0b:a1:3e:9d:aa:0b:55: bf:47:37:bb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCSd9NcsfE3+dWCl1t2BgnEhR4eAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDExNFoX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNAMmQ2ODAxZTlhOWMwZDIzM2E3NjBi YzcwZWE4YzY3MzNlMTNmNmFjZjc3YTIyOTBmNmFkYjg1ZTk0YmNjMzZkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtkGQ5LbhFtVRmZiP9nqTZLhIfpP aCdYS/ByxHYbTVTgDf4HsNTFju69lrKGwQFX3W88QGyMDWEWjfn0L84Pys35Y0q+ bm/PhRxmLGmF4utQ36UkdjcSX9+ojzZN4/RiMpPZ51jInmwhIa9vhIHAhKvVxAdy geDhtDs7bCTz/bh9icpYSGJU+0AMfTX5A+8hzSy24eIiAjVV8gt+GpnhU1O8axIl gwDLshzHiu5eKJjoo2JARsv3xyeOU3/71R9knQzV076MY5GH0xpYZMIxzxqMbQTt OxlWjy0h/Om3zRYajWuOdVXn6SNAZlz3jrAwg7mnZMnXiGvtxNjPGoBfAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ2S8mgctfyPZW8XiCTp9GJ8nWj/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkZDg0OTA0LTNjN2ItNDQzYy04YmRhLTgxODY0YmIwOGRlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauUgwDQYJKoZIhvcNAQELBQADggEBAE3HvHmt32a3tH8RjSeO KUfCktS6SbHJh3yp9vcu4MkFF1pXgp/pjlpl1aG0D36qHTCNLIYwRxsSWjcjhnBJ NvQnZLcx1wyEHqHxHrP1YObTPLnihDzJYXQT3u4yan9nTikRIUjvbLJ6tHFhHmfD x1+xOJ8ffss7NvDQ1s4jT8Tm+ZNb50jDV8FT397UUkLDlxwxF9RO/rkjMYjzRSiO M2gZZqFwf6Y/MqlDvErTkyTlQE2no6ZGGYq/JFDqdyN79wbBGISPr0A/NzVYJW6A eRmiKKFZcRk5J8pkp8UMm46xu/IipBeJiF71qw0xBglszCWk0KVBC6E+naoLVb9H N7s= -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:00 2025 by rpki-client