This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f54cd21d-ebef-4509-8295-1f7547d0d717.roa File: f54cd21d-ebef-4509-8295-1f7547d0d717.roa (raw, json) Hash identifier: g025LHQ+dWUFN5B87T44kjbJ5v/NNAMVhnp4mmsDbu4= Subject key identifier: 33:32:B6:5F:98:66:91:1B:2B:C2:92:C0:D8:3A:21:80:48:D5:6B:64 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 3F0486C95B7AC8D7C3EC06D622A30BE84AB97F30 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f54cd21d-ebef-4509-8295-1f7547d0d717.roa Signing time: Wed 12 Nov 2025 00:00:12 +0000 ROA not before: Wed 12 Nov 2025 00:00:12 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:04:86:c9:5b:7a:c8:d7:c3:ec:06:d6:22:a3:0b:e8:4a:b9:7f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Nov 12 00:00:12 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=d37cd9015c8d4dd39367d6c46952487a5300af37c95fba81c55e3861c6953523, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:9d:27:9e:66:28:09:a7:50:41:ed:1a:50: 88:b9:4d:fe:db:0c:d2:99:43:d3:03:9c:f8:25:91: ff:c4:c8:54:83:c3:a9:69:cc:c3:cc:1f:83:0d:c8: b2:b0:bd:96:8d:fc:23:63:ac:2d:c2:bb:e4:d0:5f: a2:e9:b2:3a:05:5e:11:33:9c:56:07:0b:0c:87:0e: 80:e9:24:1a:c8:12:3d:f7:97:15:98:1b:94:92:6e: dd:78:62:91:ba:01:36:fb:a6:a2:b9:95:b5:48:10: 5d:f8:a1:09:24:bf:a1:33:6d:38:14:90:7e:62:3b: 7a:31:53:f3:eb:a8:02:59:bd:ed:dc:75:df:7e:d0: 50:a9:77:9f:2e:8d:e1:f4:0b:c1:95:09:bf:9d:6c: 19:e1:f4:ec:d5:0f:89:f9:6b:08:30:ee:ee:8f:cc: 3c:5d:de:50:83:d5:89:ce:9a:ea:cc:cf:79:4d:2f: 16:af:e6:7d:d9:bb:e7:1c:96:1c:4c:be:83:59:67: 5a:27:3f:e3:0c:90:0f:af:16:52:ef:a9:c8:02:f8: 2d:d9:a8:27:12:61:6f:9b:88:7b:65:c2:47:d5:c6: 9d:f4:32:2a:d4:1a:c2:e6:9e:7d:16:40:a3:13:65: d6:c7:28:d1:29:18:d1:34:4a:84:d3:bb:48:e8:f8: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:32:B6:5F:98:66:91:1B:2B:C2:92:C0:D8:3A:21:80:48:D5:6B:64 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/f54cd21d-ebef-4509-8295-1f7547d0d717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:400::/38 Signature Algorithm: sha256WithRSAEncryption 6c:05:3a:54:ff:a7:33:78:d8:0e:5c:fe:92:ae:b8:30:c3:e3: 89:09:ba:df:fe:10:9b:52:13:05:ee:39:6a:b2:f5:9a:40:04: b9:fc:bf:f1:0d:15:98:97:5d:a5:a9:8f:32:f2:5a:f1:48:e9: 4c:97:54:ab:70:e0:4f:1f:7f:d0:c6:f6:f2:df:d2:c6:50:53: cc:62:5e:21:2e:63:1d:1e:c0:d9:87:d7:51:9c:95:9d:77:6c: fb:3d:ae:c6:83:06:6b:33:ab:2c:38:4f:d5:7b:28:c8:89:5d: eb:7a:16:01:8d:2b:9f:00:8b:76:f9:e5:c8:87:4d:0e:51:21: 97:20:d4:f3:b2:69:70:41:c3:b9:e3:f4:74:f0:85:55:ce:e5: 4d:ae:9f:63:b0:16:f5:47:88:e3:1e:82:4e:c0:6f:47:88:ca: 9c:65:16:d9:82:6d:87:9c:ff:04:59:85:e9:f7:e1:3d:39:af: ce:fa:a5:75:09:cc:44:98:5a:0b:c3:71:d2:1f:2a:a5:4b:24: 94:83:11:41:ea:db:f7:13:e6:4b:73:0d:3c:c6:b5:6d:01:3c: bc:03:d3:83:1a:b3:70:10:7c:93:1d:7f:17:a0:2a:c5:b5:92: dc:f6:f8:0b:55:f7:39:9c:0b:73:e4:c3:00:b9:63:5a:b5:2f: b2:b1:ef:60 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPwSGyVt6yNfD7AbWIqML6Eq5fzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MTExMjAwMDAxMloX DTI1MTIxNzIzNTk1OVowejFJMEcGA1UEBRNAZDM3Y2Q5MDE1YzhkNGRkMzkzNjdk NmM0Njk1MjQ4N2E1MzAwYWYzN2M5NWZiYTgxYzU1ZTM4NjFjNjk1MzUyMzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l+dJ55mKAmnUEHtGlCIuU3+2wzS mUPTA5z4JZH/xMhUg8OpaczDzB+DDciysL2WjfwjY6wtwrvk0F+i6bI6BV4RM5xW BwsMhw6A6SQayBI995cVmBuUkm7deGKRugE2+6aiuZW1SBBd+KEJJL+hM204FJB+ Yjt6MVPz66gCWb3t3HXfftBQqXefLo3h9AvBlQm/nWwZ4fTs1Q+J+WsIMO7uj8w8 Xd5Qg9WJzprqzM95TS8Wr+Z92bvnHJYcTL6DWWdaJz/jDJAPrxZS76nIAvgt2agn EmFvm4h7ZcJH1cad9DIq1BrC5p59FkCjE2XWxyjRKRjRNEqE07tI6PjqOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDMytl+YZpEbK8KSwNg6IYBI1WtkMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2Y1NGNkMjFkLWViZWYtNDUwOS04Mjk1LTFmNzU0N2QwZDcxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAQwDQYJKoZIhvcNAQELBQADggEBAGwFOlT/pzN42A5c/pKu uDDD44kJut/+EJtSEwXuOWqy9ZpABLn8v/ENFZiXXaWpjzLyWvFI6UyXVKtw4E8f f9DG9vLf0sZQU8xiXiEuYx0ewNmH11GclZ13bPs9rsaDBmszqyw4T9V7KMiJXet6 FgGNK58Ai3b55ciHTQ5RIZcg1POyaXBBw7nj9HTwhVXO5U2un2OwFvVHiOMegk7A b0eIypxlFtmCbYec/wRZhen34T05r876pXUJzESYWgvDcdIfKqVLJJSDEUHq2/cT 5ktzDTzGtW0BPLwD04Mas3AQfJMdfxegKsW1ktz2+AtV9zmcC3PkwwC5Y1q1L7Kx 72A= -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:31 2025 by rpki-client