This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa File: 197500e2-3802-44b2-a561-ca3dad01e209.roa (raw, json) Hash identifier: rQbNjdQJC3sJ4bliGCJBeHYXTky9EGpQuTbp2TB71jY= Subject key identifier: 65:46:08:E6:EF:70:B2:A1:B9:98:AC:89:A1:6F:2E:88:5F:0E:5E:A7 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 1982B51D6E9B3C14B37DFDF852C3484DB666463D Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa Signing time: Sat 06 Dec 2025 00:00:10 +0000 ROA not before: Sat 06 Dec 2025 00:00:10 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:82:b5:1d:6e:9b:3c:14:b3:7d:fd:f8:52:c3:48:4d:b6:66:46:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 6 00:00:10 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=c31ed4b01160e5b94cf4bc67375c4507009e5cf2240e04a907702bae5d09cd49, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9e:04:34:05:48:4d:64:c4:27:91:9f:dc:11: cf:15:0d:5d:94:5c:7b:9e:bf:c8:60:c9:97:86:2b: a4:ae:46:ac:d6:5c:64:43:61:35:41:58:30:8e:7f: 0b:ec:7e:86:17:91:0b:b5:3e:fa:02:73:de:1d:6a: 8d:f8:30:ac:41:4e:9b:11:7c:0c:f8:f1:13:9d:fe: 8c:7b:e6:a1:a7:a0:48:94:84:0e:5f:8c:f8:67:a1: 91:6f:26:9a:4b:63:00:c6:d4:c9:0a:76:a3:4f:3b: 61:3d:b0:2c:3d:35:e3:f0:f4:95:ac:91:b0:47:d9: a1:4a:70:34:3c:b1:e6:b2:50:e1:b0:5f:d7:7c:32: 99:4f:d1:6f:34:ea:66:67:7f:03:e0:97:88:19:46: 3e:c2:5e:32:e9:bc:fd:c3:47:c8:ce:75:47:3b:83: 8d:4e:97:c3:3d:40:c2:c6:b9:f9:31:01:cd:e4:7c: 7d:53:6b:0f:26:7e:50:8d:d6:96:b1:6c:85:59:fd: e9:7b:07:3d:22:c2:c8:33:ec:bb:bf:c9:92:db:d0: f5:88:01:f3:c8:30:c5:40:5c:f3:61:50:ef:b3:e7: 27:ad:f6:d8:78:8d:ed:1a:d3:3e:86:bd:a1:56:7d: a5:75:37:b8:d6:1b:3e:36:df:0b:7e:9a:16:d4:8e: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:46:08:E6:EF:70:B2:A1:B9:98:AC:89:A1:6F:2E:88:5F:0E:5E:A7 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.128.0/24 Signature Algorithm: sha256WithRSAEncryption a5:ba:15:fb:e7:96:36:4b:4f:37:aa:cb:93:b5:23:e5:99:59: 84:e4:53:8b:e1:d0:be:f9:16:ed:0a:20:97:5f:3e:b0:4a:4f: 69:2e:69:47:8b:2c:90:42:1b:3d:60:d9:2d:d3:d8:5a:d0:17: de:a1:1b:09:21:df:8c:3a:97:07:12:44:d5:be:9e:ae:3b:bc: d3:6f:a8:d7:f6:42:50:d0:20:5b:f0:91:bb:2f:b3:43:b5:e9: ec:28:cd:d5:92:ff:c6:a5:00:a8:81:64:ff:c7:1e:76:67:52: 43:de:51:03:6b:40:93:6b:13:6c:9c:21:eb:98:01:b0:60:8e: 43:a7:62:97:0a:37:a0:ef:23:9c:e9:7a:d5:18:fb:94:00:5e: b1:2d:4e:5a:55:86:f5:3b:c9:6a:ce:ca:6c:6f:41:01:48:0b: 6a:39:8e:d2:a5:b4:a9:34:d1:62:19:25:bd:10:25:ee:72:c2: 90:3f:c1:c8:81:0b:6d:67:d5:50:20:f6:67:65:a0:26:29:a5: d0:0e:8f:2d:11:32:68:0b:31:bc:99:45:96:30:97:74:2e:83: 98:47:8f:07:63:fe:03:b9:5d:0d:a9:75:0c:df:b2:c3:3d:24: 4c:07:8c:b0:36:0b:08:2c:10:3f:6f:ea:ec:0d:02:5f:52:a1: 56:52:4f:9e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUGYK1HW6bPBSzff34UsNITbZmRj0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNjAwMDAxMFoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAYzMxZWQ0YjAxMTYwZTViOTRjZjRi YzY3Mzc1YzQ1MDcwMDllNWNmMjI0MGUwNGE5MDc3MDJiYWU1ZDA5Y2Q0OTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ4ENAVITWTEJ5Gf3BHPFQ1dlFx7 nr/IYMmXhiukrkas1lxkQ2E1QVgwjn8L7H6GF5ELtT76AnPeHWqN+DCsQU6bEXwM +PETnf6Me+ahp6BIlIQOX4z4Z6GRbyaaS2MAxtTJCnajTzthPbAsPTXj8PSVrJGw R9mhSnA0PLHmslDhsF/XfDKZT9FvNOpmZ38D4JeIGUY+wl4y6bz9w0fIznVHO4ON TpfDPUDCxrn5MQHN5Hx9U2sPJn5QjdaWsWyFWf3pewc9IsLIM+y7v8mS29D1iAHz yDDFQFzzYVDvs+cnrfbYeI3tGtM+hr2hVn2ldTe41hs+Nt8LfpoW1I4aDwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGVGCObvcLKhuZisiaFvLohfDl6nMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE5NzUwMGUyLTM4MDItNDRiMi1hNTYxLWNhM2RhZDAxZTIwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArymAMA0GCSqGSIb3DQEBCwUAA4IBAQCluhX755Y2S083qsuTtSPl mVmE5FOL4dC++RbtCiCXXz6wSk9pLmlHiyyQQhs9YNkt09ha0BfeoRsJId+MOpcH EkTVvp6uO7zTb6jX9kJQ0CBb8JG7L7NDtensKM3Vkv/GpQCogWT/xx52Z1JD3lED a0CTaxNsnCHrmAGwYI5Dp2KXCjeg7yOc6XrVGPuUAF6xLU5aVYb1O8lqzspsb0EB SAtqOY7SpbSpNNFiGSW9ECXucsKQP8HIgQttZ9VQIPZnZaAmKaXQDo8tETJoCzG8 mUWWMJd0LoOYR48HY/4DuV0NqXUM37LDPSRMB4ywNgsILBA/b+rsDQJfUqFWUk+e -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:50 2025 by rpki-client