This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa File: ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa (raw, json) Hash identifier: A0Ad/AEMQVWIVrhLfaufMw560dE+10YCN9ZgFVWD3KM= Subject key identifier: C9:8B:07:BD:F1:0B:F0:6D:0D:2A:F3:0E:44:CD:65:7C:C2:CF:FE:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E9A8B38387CC23FCE50C918D1DB3CDF99CD12A7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa Signing time: Sun 07 Dec 2025 00:00:32 +0000 ROA not before: Sun 07 Dec 2025 00:00:32 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 00:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9a:8b:38:38:7c:c2:3f:ce:50:c9:18:d1:db:3c:df:99:cd:12:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 7 00:00:32 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=97499d409ca04d7c4163c89f5fcffbf97c199524384f376ab25022b7308d40d8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:c1:2b:88:96:4e:f0:6a:ca:64:72:ec:88: 27:99:1f:9b:ec:e2:be:a5:b7:87:21:79:06:89:1d: 31:3b:28:3d:5b:99:ff:00:60:6c:2b:74:91:20:19: b7:29:3c:76:47:28:c2:18:b9:1f:0b:a2:3e:06:72: 53:2d:ce:b3:ad:36:70:aa:8a:45:34:3a:e1:62:d0: e7:fb:60:2e:48:19:71:38:a0:47:79:59:6d:ac:d5: 03:fb:72:a6:be:89:e9:27:41:8a:4c:84:80:40:41: 0c:63:ac:bc:1a:2a:d5:2e:29:54:c9:0f:5f:ea:71: fe:d3:7e:80:39:87:4e:0d:b2:52:66:49:55:cd:22: 0f:be:c1:ba:e1:31:b1:76:9b:75:7f:bd:9f:df:4a: 51:b6:37:57:50:29:fd:24:8c:cd:5b:e0:83:89:e6: 80:b3:b3:1c:9e:cf:6d:87:36:06:c2:f6:1d:5c:c3: 6a:2d:ea:68:71:f9:b1:15:3f:2d:16:28:20:1b:d0: 94:49:d8:e4:5f:fa:38:d2:00:da:af:c3:e0:e6:bd: 09:85:01:60:89:fe:b8:2c:5a:f5:46:52:10:38:ce: ab:89:9f:1f:99:bd:bd:99:e6:52:61:2f:39:d4:4b: 0d:28:3e:f1:d1:e5:d4:c3:c0:5d:36:af:3d:1f:68: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8B:07:BD:F1:0B:F0:6D:0D:2A:F3:0E:44:CD:65:7C:C2:CF:FE:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.0.0/15 Signature Algorithm: sha256WithRSAEncryption 62:f0:43:a9:e9:b4:97:24:6f:16:35:c2:bc:e5:c0:77:44:1c: d3:3f:a1:10:5e:dd:f4:7e:31:57:4a:39:f9:28:33:0d:f7:7b: 6a:44:74:85:89:90:41:af:e6:db:6d:48:e4:06:76:44:c4:76: e3:68:63:3b:94:df:ec:c3:71:93:f2:e9:a7:c1:b0:25:c1:86: c9:81:fc:5b:f0:77:be:b4:3a:2e:2b:0c:23:7a:9a:be:6c:9e: 22:81:91:e5:33:db:0c:3f:2d:d6:c5:62:f0:28:21:b8:b8:45: e8:9f:f5:b7:96:8a:2b:e8:92:24:61:c0:32:23:49:32:93:d7: 60:50:72:e8:66:87:96:39:7d:3f:86:86:8d:eb:13:23:b1:72: de:ba:dd:15:00:0d:1d:42:33:42:a8:b4:92:c3:dd:c2:62:51: da:4c:3b:52:a0:d6:67:cf:e7:12:ad:bd:4a:23:cb:f7:65:5d: 3f:15:3a:3c:77:2c:98:bb:25:00:b6:cd:8c:12:37:86:7c:3f: ba:ca:85:f5:66:dc:96:65:59:1a:1b:4c:09:ce:48:5d:ec:1f: fe:14:17:ec:ba:fc:01:dc:69:07:27:66:7a:11:54:8f:41:3b: 0d:ba:50:d4:9a:4b:6d:bd:a7:b7:84:31:dd:1d:c6:33:c6:ec: bf:79:b1:7f -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUfpqLODh8wj/OUMkY0ds835nNEqcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNzAwMDAzMloX DTI2MDMwNzIzNTk1OVowejFJMEcGA1UEBRNAOTc0OTlkNDA5Y2EwNGQ3YzQxNjNj ODlmNWZjZmZiZjk3YzE5OTUyNDM4NGYzNzZhYjI1MDIyYjczMDhkNDBkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1jBK4iWTvBqymRy7IgnmR+b7OK+ pbeHIXkGiR0xOyg9W5n/AGBsK3SRIBm3KTx2RyjCGLkfC6I+BnJTLc6zrTZwqopF NDrhYtDn+2AuSBlxOKBHeVltrNUD+3KmvonpJ0GKTISAQEEMY6y8GirVLilUyQ9f 6nH+036AOYdODbJSZklVzSIPvsG64TGxdpt1f72f30pRtjdXUCn9JIzNW+CDieaA s7Mcns9thzYGwvYdXMNqLepocfmxFT8tFiggG9CUSdjkX/o40gDar8Pg5r0JhQFg if64LFr1RlIQOM6riZ8fmb29meZSYS851EsNKD7x0eXUw8BdNq89H2jP5wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMmLB73xC/BtDSrzDkTNZXzCz/7IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmYTZiNmQ5LTJiYzItNDI5ZC1hNmE4LTYxODYzOGJhYmY0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9AwDQYJKoZIhvcNAQELBQADggEBAGLwQ6nptJckbxY1wrzlwHdE HNM/oRBe3fR+MVdKOfkoMw33e2pEdIWJkEGv5tttSOQGdkTEduNoYzuU3+zDcZPy 6afBsCXBhsmB/Fvwd760Oi4rDCN6mr5sniKBkeUz2ww/LdbFYvAoIbi4Reif9beW iivokiRhwDIjSTKT12BQcuhmh5Y5fT+Gho3rEyOxct663RUADR1CM0KotJLD3cJi UdpMO1Kg1mfP5xKtvUojy/dlXT8VOjx3LJi7JQC2zYwSN4Z8P7rKhfVm3JZlWRob TAnOSF3sH/4UF+y6/AHcaQcnZnoRVI9BOw26UNSaS229p7eEMd0dxjPG7L95sX8= -----END CERTIFICATE-----Generated at Tue Dec 16 20:41:49 2025 by rpki-client