This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa File: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (raw, json) Hash identifier: 8YUGZL0iWHqRvW0nCojnvJIK483zfyTvdec+UOEcms4= Subject key identifier: 03:2D:7F:93:AD:F0:3F:04:6F:C1:AE:CD:E9:57:17:87:25:A9:2E:A2 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 0ED5417C16813BC7B513371BE2A3B620D627BD3E Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa Signing time: Sat 06 Dec 2025 00:00:29 +0000 ROA not before: Sat 06 Dec 2025 00:00:29 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d5:41:7c:16:81:3b:c7:b5:13:37:1b:e2:a3:b6:20:d6:27:bd:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Dec 6 00:00:29 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=c59d8b0a45ea483e4f859d873dc89f7746206f182aa0fb85952ef1c3559adafb, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:0e:0e:58:1c:bd:fe:d4:67:1b:d6:5b:68: 90:79:80:55:7a:55:f1:7a:00:63:f4:6b:bb:72:18: aa:51:52:48:d9:3c:52:72:c3:c5:b2:c5:49:72:3b: fe:22:08:95:64:06:68:04:9b:b8:b6:3b:19:42:13: 61:2c:00:33:af:94:c2:b5:2b:3b:41:ea:ca:ca:88: 2a:35:ae:71:40:f3:73:0b:01:e0:0c:87:d3:db:f0: 68:ea:0b:e8:05:cb:96:bb:a0:c3:b0:d2:c4:de:41: c5:12:84:d9:35:2f:3b:4f:88:c3:a2:aa:d3:87:57: 50:48:cd:86:d2:4c:14:48:88:63:d3:22:30:95:e9: 61:9f:87:b7:ca:12:2e:c1:d8:26:fe:3c:64:70:62: 7a:27:bc:24:bd:7f:ae:c9:c4:76:5a:57:a2:59:8e: 74:17:ae:96:f4:f7:6b:ed:c6:a5:72:72:b3:87:6e: 81:fd:a7:50:0c:d8:f0:9a:68:04:90:fd:da:ae:35: ee:78:ec:34:90:f7:98:51:b2:ea:91:25:ae:33:c2: f3:69:4c:04:8a:03:50:cd:63:ab:f5:b2:ac:13:1b: 7d:46:e7:28:21:64:73:2e:aa:eb:e8:63:33:1f:8b: 34:00:94:a0:96:64:53:4b:96:ad:79:91:ea:ac:fd: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:7F:93:AD:F0:3F:04:6F:C1:AE:CD:E9:57:17:87:25:A9:2E:A2 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.238.0/23 Signature Algorithm: sha256WithRSAEncryption 45:8a:89:45:4f:51:57:36:23:18:a7:f9:fe:fa:0c:0d:64:b9: 4f:26:8b:0d:10:b3:ed:1e:23:1d:bd:05:62:49:f9:0d:4b:9e: d7:e4:cd:76:e5:57:cd:c5:0a:df:b2:20:9b:2b:5e:aa:57:e6: 78:c5:1b:f3:75:73:6a:49:9f:0c:63:d0:ac:03:27:c6:92:b1: b6:8a:7e:7f:53:80:b0:ff:b2:a8:cb:72:ce:0d:2d:fd:03:29: 37:48:80:37:a9:de:b7:bb:e2:7e:11:ae:a9:19:6f:d6:73:23: 7f:cb:3d:48:cb:53:e1:be:89:3c:06:13:ca:ac:c3:ec:17:b8: 42:ea:60:cd:88:7e:3c:21:c8:d9:1a:51:52:97:ea:81:93:71: f1:32:91:cd:57:e5:e5:ab:e7:bb:84:f9:aa:01:2f:cd:f0:48: 78:07:3e:1b:7b:8c:1f:87:6a:37:a5:85:69:46:c5:26:89:f3: 72:e5:61:ee:75:da:82:2a:e6:ab:a1:d2:aa:a2:e9:b0:63:f6: 3c:6a:4d:ed:95:6e:33:3b:73:04:29:90:4b:6a:0a:d0:a9:e8: e8:53:05:cc:e2:bd:7e:3e:e8:c2:1c:7d:12:54:dc:1e:1a:8a: 7e:a0:4e:ef:fe:8e:9d:8b:f0:9e:00:62:3b:0b:05:8b:13:30: 63:ce:d4:f3 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDtVBfBaBO8e1Ezcb4qO2INYnvT4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MTIwNjAwMDAyOVoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAYzU5ZDhiMGE0NWVhNDgzZTRmODU5 ZDg3M2RjODlmNzc0NjIwNmYxODJhYTBmYjg1OTUyZWYxYzM1NTlhZGFmYjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzewODlgcvf7UZxvWW2iQeYBVelXx egBj9Gu7chiqUVJI2TxScsPFssVJcjv+IgiVZAZoBJu4tjsZQhNhLAAzr5TCtSs7 QerKyogqNa5xQPNzCwHgDIfT2/Bo6gvoBcuWu6DDsNLE3kHFEoTZNS87T4jDoqrT h1dQSM2G0kwUSIhj0yIwlelhn4e3yhIuwdgm/jxkcGJ6J7wkvX+uycR2WleiWY50 F66W9Pdr7calcnKzh26B/adQDNjwmmgEkP3arjXueOw0kPeYUbLqkSWuM8LzaUwE igNQzWOr9bKsExt9RucoIWRzLqrr6GMzH4s0AJSglmRTS5ateZHqrP3KMQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAMtf5Ot8D8Eb8GuzelXF4clqS6iMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzQ4YTY3MTU2LTEyMmUtNDFkNC1hMmE4LTgwNDZjYzVlY2M0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynuMA0GCSqGSIb3DQEBCwUAA4IBAQBFiolFT1FXNiMYp/n++gwN ZLlPJosNELPtHiMdvQViSfkNS57X5M125VfNxQrfsiCbK16qV+Z4xRvzdXNqSZ8M Y9CsAyfGkrG2in5/U4Cw/7Koy3LODS39Ayk3SIA3qd63u+J+Ea6pGW/WcyN/yz1I y1Phvok8BhPKrMPsF7hC6mDNiH48IcjZGlFSl+qBk3HxMpHNV+Xlq+e7hPmqAS/N 8Eh4Bz4be4wfh2o3pYVpRsUmifNy5WHuddqCKuarodKqoumwY/Y8ak3tlW4zO3ME KZBLagrQqejoUwXM4r1+PujCHH0SVNweGop+oE7v/o6di/CeAGI7CwWLEzBjztTz -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:58 2025 by rpki-client