This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3523c675-14b3-4d2d-90e1-e439500ecaca.roa File: 3523c675-14b3-4d2d-90e1-e439500ecaca.roa (raw, json) Hash identifier: m//VKu/cU1PtqARRaywv6aEPE3QLD9rYQa72HFUn7Wc= Subject key identifier: 82:7D:E3:E9:83:0D:4A:BA:B8:B6:70:9B:1B:DA:F1:97:22:F1:BC:13 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 239D95FF80F12F3C71E8D65A750A400F9E2A9CC3 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3523c675-14b3-4d2d-90e1-e439500ecaca.roa Signing time: Wed 12 Nov 2025 00:00:54 +0000 ROA not before: Wed 12 Nov 2025 00:00:54 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9d:95:ff:80:f1:2f:3c:71:e8:d6:5a:75:0a:40:0f:9e:2a:9c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Nov 12 00:00:54 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=87caa707ef0f33e37581c62e9a6fccda51f07651a619145401e668446ae1164f, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:89:a6:6f:0e:73:a7:47:41:f7:21:74:1b: 1f:11:fc:0b:0e:61:28:f0:f3:b0:f9:2e:3d:04:83: 86:98:dd:7b:8e:0e:81:85:b2:f4:bb:e7:55:33:50: 7d:cc:db:d1:6b:14:2d:d5:de:23:81:c9:c1:bc:c4: 4e:22:60:28:69:4b:54:47:61:aa:b9:32:7f:a4:90: 14:7b:f6:31:e1:e9:9a:a0:05:9c:67:60:4d:e8:a2: d9:5a:07:c3:33:aa:7e:7a:9b:1f:e8:f3:62:3b:89: 3b:f4:08:ac:b0:5e:21:42:1b:04:15:8d:30:ea:5a: 81:14:36:70:3a:fd:ae:dd:27:c1:58:19:68:0b:5b: 2a:5d:05:1b:92:56:81:6f:ce:a1:74:26:53:b1:3d: 2a:06:5b:ae:f2:84:fe:79:67:00:12:e4:a4:40:6c: 14:b2:30:37:86:3b:c2:f6:65:0d:29:ab:cc:1e:89: 3b:28:b0:7b:39:80:32:57:88:20:7a:1d:6e:a4:3f: a5:b9:79:09:ad:5d:c6:8c:0d:f2:1b:f9:28:88:e4: 3e:49:21:49:ac:e3:64:1b:32:8a:0f:ff:5b:bd:28: 84:00:bd:eb:69:21:20:31:c9:1e:fd:f3:d0:b4:ba: 1a:23:bc:1e:f3:08:81:12:ba:59:77:99:cd:df:00: 03:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7D:E3:E9:83:0D:4A:BA:B8:B6:70:9B:1B:DA:F1:97:22:F1:BC:13 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3523c675-14b3-4d2d-90e1-e439500ecaca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f0::/32 Signature Algorithm: sha256WithRSAEncryption 29:9e:e0:fa:80:29:0e:9e:2c:e4:28:74:45:89:29:67:25:dd: 07:14:ba:86:af:dd:96:7e:95:94:fb:57:b2:44:b2:50:6c:69: 3a:27:9a:03:80:59:b5:98:0b:d0:8f:65:3a:12:90:a5:f1:57: dd:4d:7c:4b:82:77:43:06:62:79:d2:8a:82:46:03:ab:52:b1: 4e:00:3f:27:0e:3f:fb:cb:9a:d6:f8:a2:71:49:24:2e:64:45: c1:cf:f4:36:dc:c2:df:8e:eb:1d:ea:d8:de:76:b5:c8:d4:f6: 05:c8:45:da:06:7b:b5:49:0f:f9:49:81:8e:4c:a5:96:e6:e9: ce:42:6d:e8:a4:9b:6c:c1:7a:33:31:a8:cb:a6:9b:5a:25:12: 34:dc:0a:34:4b:56:75:bb:26:fc:8b:a7:57:57:cb:38:79:9b: b7:d2:a3:b3:d2:e5:e8:ff:6d:f5:fa:fa:1d:bc:99:f1:6e:a6: 6c:de:cb:4d:8b:3c:f9:aa:59:eb:81:26:25:ce:01:0d:23:98: 00:e7:92:b3:5d:fb:e3:1e:b9:d0:6b:a3:9c:06:5a:07:8f:e0: b2:f1:a5:85:db:ba:ea:6f:12:0f:a1:6c:b1:2b:27:9a:19:c1: 41:00:7a:b3:a8:dd:db:ec:ee:9b:00:12:78:11:b3:49:51:b5: 2b:0e:b1:7c -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUI52V/4DxLzxx6NZadQpAD54qnMMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MTExMjAwMDA1NFoX DTI1MTIxNzIzNTk1OVowejFJMEcGA1UEBRNAODdjYWE3MDdlZjBmMzNlMzc1ODFj NjJlOWE2ZmNjZGE1MWYwNzY1MWE2MTkxNDU0MDFlNjY4NDQ2YWUxMTY0ZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApViJpm8Oc6dHQfchdBsfEfwLDmEo 8POw+S49BIOGmN17jg6BhbL0u+dVM1B9zNvRaxQt1d4jgcnBvMROImAoaUtUR2Gq uTJ/pJAUe/Yx4emaoAWcZ2BN6KLZWgfDM6p+epsf6PNiO4k79AissF4hQhsEFY0w 6lqBFDZwOv2u3SfBWBloC1sqXQUbklaBb86hdCZTsT0qBluu8oT+eWcAEuSkQGwU sjA3hjvC9mUNKavMHok7KLB7OYAyV4ggeh1upD+luXkJrV3GjA3yG/koiOQ+SSFJ rONkGzKKD/9bvSiEAL3raSEgMcke/fPQtLoaI7we8wiBErpZd5nN3wADzQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFIJ94+mDDUq6uLZwmxva8Zci8bwTMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzM1MjNjNjc1LTE0YjMtNGQyZC05MGUxLWU0Mzk1MDBlY2FjYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A8DANBgkqhkiG9w0BAQsFAAOCAQEAKZ7g+oApDp4s5Ch0RYkp ZyXdBxS6hq/dln6VlPtXskSyUGxpOieaA4BZtZgL0I9lOhKQpfFX3U18S4J3QwZi edKKgkYDq1KxTgA/Jw4/+8ua1viicUkkLmRFwc/0NtzC347rHerY3na1yNT2BchF 2gZ7tUkP+UmBjkyllubpzkJt6KSbbMF6MzGoy6abWiUSNNwKNEtWdbsm/IunV1fL OHmbt9Kjs9Ll6P9t9fr6HbyZ8W6mbN7LTYs8+apZ64EmJc4BDSOYAOeSs1374x65 0GujnAZaB4/gsvGlhdu66m8SD6FssSsnmhnBQQB6s6jd2+zumwASeBGzSVG1Kw6x fA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:11 2025 by rpki-client