This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/6b15abb6-10b7-4ecd-9947-c96012f824c6.roa File: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (raw, json) Hash identifier: NebmV0kA/vdDwwxk2EOE4U6J80Xe14LeKDXdwnAwWfU= Subject key identifier: 68:D7:B4:01:68:27:B0:43:C7:1D:19:DD:72:93:E8:4F:13:AA:0B:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 598E8FE473475F69AFA63179711805D2C9DD1AAB Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/6b15abb6-10b7-4ecd-9947-c96012f824c6.roa Signing time: Sat 06 Dec 2025 00:00:05 +0000 ROA not before: Sat 06 Dec 2025 00:00:05 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8e:8f:e4:73:47:5f:69:af:a6:31:79:71:18:05:d2:c9:dd:1a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 6 00:00:05 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=b07fdf470e56ff53515d52e474196ededeb8b22cb4c070632cf9b01f47dd754a, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d0:60:e3:ff:60:3a:9d:68:6e:21:a8:29:d6: a6:74:32:bf:fe:c6:6e:92:04:f9:ae:66:b8:6b:42: c5:14:f4:b4:0e:56:81:ff:28:7f:76:fb:89:d2:0c: 91:30:9d:6f:18:ba:e1:4d:ce:94:ad:ff:6a:87:40: 7d:00:eb:fc:e1:54:e6:47:07:0e:04:e8:c6:45:c3: 61:1d:85:6b:ad:23:29:ec:32:50:f1:88:87:db:a6: 90:4a:87:12:df:76:4c:f4:5d:ab:4a:43:af:f7:2e: de:ef:b1:0e:a2:53:48:58:57:c4:d8:03:41:a4:1d: cf:f6:73:42:88:04:33:40:7f:2d:c9:62:fb:78:dc: be:0c:c5:21:0b:57:c2:d2:8d:2f:15:9e:8a:c3:84: 94:63:de:46:52:45:c5:5d:30:69:bd:1c:2f:e6:1f: f4:49:df:14:44:0a:67:72:2b:7f:8d:c7:a1:c8:cf: 52:8f:f7:4e:52:c0:15:86:ab:f0:5f:fb:2f:c6:60: 85:a9:4e:f2:6d:15:33:b9:c6:57:be:3d:37:4d:c6: fa:85:f8:87:14:97:fc:27:6f:ba:39:d7:c9:7e:6d: 71:2a:07:e8:72:04:96:e2:df:8c:65:5f:67:7f:55: cf:b5:ee:fb:7d:ef:20:e7:75:d4:cf:2d:16:53:33: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:B4:01:68:27:B0:43:C7:1D:19:DD:72:93:E8:4F:13:AA:0B:1D X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/6b15abb6-10b7-4ecd-9947-c96012f824c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.132.0/22 Signature Algorithm: sha256WithRSAEncryption ad:1d:00:78:ba:9a:81:82:4a:ba:92:80:31:c4:4e:6a:d3:f9: e7:09:e5:e0:0b:0a:c6:61:10:00:65:d1:cb:b8:94:82:a6:d8: 49:84:50:59:5a:4d:66:65:9d:2d:6f:00:f0:cc:e6:80:86:f5: 1e:91:b4:6c:14:13:ad:74:dc:bb:f8:c8:54:6f:16:0b:f9:99: a3:9b:97:31:a0:16:d6:30:08:a1:e3:7a:f6:7b:98:21:d8:4a: 91:27:8c:7b:bf:37:d1:98:81:ab:26:3f:cb:c7:52:c5:1f:c4: ce:35:e4:d1:df:c1:ee:fc:c4:0d:95:b2:bf:76:c2:61:73:1d: 29:42:30:a5:78:f6:d7:c3:1b:29:f8:a5:b3:32:00:6b:3a:95: 18:be:0c:a5:81:89:f5:f1:a8:b1:f0:14:a6:56:2b:e5:96:a8: b7:62:a4:b0:06:f4:8d:85:1f:60:97:0a:c4:97:f8:90:48:b3: 17:df:d1:1e:05:d3:cc:e0:fd:2f:8f:67:1d:d2:a2:8f:5d:a1: 1a:35:70:e9:99:33:ec:35:97:7a:fa:37:6d:d6:e5:9a:6e:f8: 1d:c4:3c:99:de:54:6c:5d:09:9f:f6:c8:1e:fa:0a:14:3c:3d: 4f:03:41:65:90:9c:29:a4:7f:68:b7:59:d3:6e:6b:0f:61:f6: 49:79:9c:a1 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWY6P5HNHX2mvpjF5cRgF0sndGqswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNjAwMDAwNVoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAYjA3ZmRmNDcwZTU2ZmY1MzUxNWQ1 MmU0NzQxOTZlZGVkZWI4YjIyY2I0YzA3MDYzMmNmOWIwMWY0N2RkNzU0YTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNBg4/9gOp1obiGoKdamdDK//sZu kgT5rma4a0LFFPS0DlaB/yh/dvuJ0gyRMJ1vGLrhTc6Urf9qh0B9AOv84VTmRwcO BOjGRcNhHYVrrSMp7DJQ8YiH26aQSocS33ZM9F2rSkOv9y7e77EOolNIWFfE2ANB pB3P9nNCiAQzQH8tyWL7eNy+DMUhC1fC0o0vFZ6Kw4SUY95GUkXFXTBpvRwv5h/0 Sd8URApncit/jcehyM9Sj/dOUsAVhqvwX/svxmCFqU7ybRUzucZXvj03Tcb6hfiH FJf8J2+6OdfJfm1xKgfocgSW4t+MZV9nf1XPte77fe8g53XUzy0WUzMGUQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGjXtAFoJ7BDxx0Z3XKT6E8TqgsdMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzZiMTVhYmI2LTEwYjctNGVjZC05OTQ3LWM5NjAxMmY4MjRjNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCrymEMA0GCSqGSIb3DQEBCwUAA4IBAQCtHQB4upqBgkq6koAxxE5q 0/nnCeXgCwrGYRAAZdHLuJSCpthJhFBZWk1mZZ0tbwDwzOaAhvUekbRsFBOtdNy7 +MhUbxYL+Zmjm5cxoBbWMAih43r2e5gh2EqRJ4x7vzfRmIGrJj/Lx1LFH8TONeTR 38Hu/MQNlbK/dsJhcx0pQjClePbXwxsp+KWzMgBrOpUYvgylgYn18aix8BSmVivl lqi3YqSwBvSNhR9glwrEl/iQSLMX39EeBdPM4P0vj2cd0qKPXaEaNXDpmTPsNZd6 +jdt1uWabvgdxDyZ3lRsXQmf9sge+goUPD1PA0FlkJwppH9ot1nTbmsPYfZJeZyh -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:48 2025 by rpki-client