This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa File: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (raw, json) Hash identifier: lNlFLZT08eoziDCTsqvWxLNo+sFuyOZGIrMshIQatbQ= Subject key identifier: 10:AF:C6:E0:E8:9E:50:B8:E2:EE:95:4F:AF:F0:31:98:E0:91:3E:4B Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 59F826D2B83D1DFAF2533F278BDDEF756F917C06 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa Signing time: Sat 06 Dec 2025 00:00:29 +0000 ROA not before: Sat 06 Dec 2025 00:00:29 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:26:d2:b8:3d:1d:fa:f2:53:3f:27:8b:dd:ef:75:6f:91:7c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Dec 6 00:00:29 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=6effdbcf8ebf57883c5c76d5573765ffc03e0936d881194626e93c8e258e96fe, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:a4:32:62:35:e3:35:ff:21:50:7d:8e:65: d3:9d:71:ea:f2:47:bd:33:fb:de:89:e0:49:da:8d: fe:a5:94:85:13:3a:f9:14:24:36:82:7f:4c:cd:15: f9:4b:33:b7:92:52:32:68:05:3a:54:6f:d2:d3:31: 5b:dd:db:a6:42:e0:53:e1:04:23:b6:47:6f:df:4d: 69:43:8e:c2:db:c4:46:32:3a:53:69:9b:79:b0:ba: f5:e9:5d:c0:f3:b9:92:1d:ac:34:90:12:01:2c:5f: 47:f4:a4:1b:07:c2:41:d6:0b:07:f0:c1:04:a2:ae: f9:be:0d:04:d7:86:2c:ad:cb:dd:7d:d0:c0:9d:37: 1b:e6:28:f0:0e:3f:a3:5d:69:30:5f:ab:11:f1:97: 0e:c1:17:e5:3b:cd:d2:c5:0e:51:1b:d8:18:bd:a5: a3:b3:f4:17:9d:1f:64:90:29:aa:15:4d:73:70:b6: ef:95:c6:63:7e:56:cf:c3:cc:40:72:6f:00:d6:cc: cb:b9:18:86:7d:e5:27:b5:50:44:16:79:fe:7d:7f: c8:9b:29:0f:54:38:69:95:aa:e1:7c:9b:51:9f:6c: d9:2a:1f:af:a0:5f:44:8f:58:14:74:88:61:51:0d: 53:cf:c4:ca:78:bc:cb:52:14:5c:be:a1:8e:fc:ff: 29:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:C6:E0:E8:9E:50:B8:E2:EE:95:4F:AF:F0:31:98:E0:91:3E:4B X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.240.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:39:b7:5c:dd:29:2d:34:12:eb:b9:1e:69:00:61:5a:1b:e0: b0:54:dd:70:fb:f4:97:1a:58:ad:3a:82:b7:87:b6:2c:52:8a: 3e:08:05:ef:fe:c1:43:0c:01:d3:2e:ec:5f:99:c3:df:51:1d: 40:13:ef:f4:85:27:79:7f:9e:13:fe:12:62:8a:6e:ee:47:28: 5e:a7:29:e0:99:ef:84:b0:50:a1:e4:41:5e:c4:6e:8c:13:81: e5:0e:d4:16:57:29:c8:e7:6b:cf:88:d6:80:91:b6:5e:95:0a: 49:78:ae:8c:e0:7d:37:e3:d6:5a:02:69:fa:6e:60:b9:cb:f6: d4:3a:9f:93:92:bf:df:08:8e:b7:8e:f6:f8:8d:ce:a5:d9:97: 5a:ef:be:28:8c:19:61:c8:1d:78:c0:c2:67:b4:03:b5:9b:85: ed:5f:95:ae:c9:de:1f:7f:ee:55:97:2f:6e:07:c1:5c:7a:cd: 96:31:31:a8:2f:25:04:c3:d8:a4:01:1b:38:df:61:51:7e:1e: 9d:35:f3:d8:14:7e:77:85:c4:6d:91:54:6b:b0:d5:c8:71:7b: a0:42:d8:9d:4a:a4:c0:30:a7:b7:15:7a:33:9f:a7:50:fe:e8: af:e6:55:4d:79:63:c7:62:c2:e0:84:41:b3:02:7f:e0:f0:fd: 36:e7:43:14 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWfgm0rg9HfryUz8ni93vdW+RfAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MTIwNjAwMDAyOVoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNANmVmZmRiY2Y4ZWJmNTc4ODNjNWM3 NmQ1NTczNzY1ZmZjMDNlMDkzNmQ4ODExOTQ2MjZlOTNjOGUyNThlOTZmZTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIykMmI14zX/IVB9jmXTnXHq8ke9 M/veieBJ2o3+pZSFEzr5FCQ2gn9MzRX5SzO3klIyaAU6VG/S0zFb3dumQuBT4QQj tkdv301pQ47C28RGMjpTaZt5sLr16V3A87mSHaw0kBIBLF9H9KQbB8JB1gsH8MEE oq75vg0E14YsrcvdfdDAnTcb5ijwDj+jXWkwX6sR8ZcOwRflO83SxQ5RG9gYvaWj s/QXnR9kkCmqFU1zcLbvlcZjflbPw8xAcm8A1szLuRiGfeUntVBEFnn+fX/ImykP VDhplarhfJtRn2zZKh+voF9Ej1gUdIhhUQ1Tz8TKeLzLUhRcvqGO/P8p6QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBCvxuDonlC44u6VT6/wMZjgkT5LMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 Lzc0ZWZlOGIzLWQzOWMtNGE4Yi05YjdiLTU5OTRhYTRjOGQ4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynwMA0GCSqGSIb3DQEBCwUAA4IBAQAMObdc3SktNBLruR5pAGFa G+CwVN1w+/SXGlitOoK3h7YsUoo+CAXv/sFDDAHTLuxfmcPfUR1AE+/0hSd5f54T /hJiim7uRyhepyngme+EsFCh5EFexG6ME4HlDtQWVynI52vPiNaAkbZelQpJeK6M 4H0349ZaAmn6bmC5y/bUOp+Tkr/fCI63jvb4jc6l2Zda774ojBlhyB14wMJntAO1 m4XtX5Wuyd4ff+5Vly9uB8Fces2WMTGoLyUEw9ikARs432FRfh6dNfPYFH53hcRt kVRrsNXIcXugQtidSqTAMKe3FXozn6dQ/uiv5lVNeWPHYsLghEGzAn/g8P0250MU -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:20 2025 by rpki-client