This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b59fbe4-f242-4dbf-9964-15048c3da996.roa File: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (raw, json) Hash identifier: HS1LLcEPS8/a/jky8LMQMmE/q7Zt1pCkXK1ygZRWkxo= Subject key identifier: CF:D6:B3:8B:1A:33:49:45:3C:A7:B7:BB:65:F4:04:97:88:79:54:F1 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 65170052EC39B5AE3298D066B92B2C7A4ACE434A Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b59fbe4-f242-4dbf-9964-15048c3da996.roa Signing time: Sat 06 Dec 2025 00:00:32 +0000 ROA not before: Sat 06 Dec 2025 00:00:32 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.4.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:17:00:52:ec:39:b5:ae:32:98:d0:66:b9:2b:2c:7a:4a:ce:43:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=06eedbd12fba2513dac472dd497fe05a77ef73f274bc558cfcd6c91b4ae521d3, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d0:56:49:92:f4:8f:3e:de:17:60:08:a3:52: 53:92:51:ee:21:91:89:22:e6:e8:23:b3:7f:6a:be: 9d:d0:3f:7c:1c:ac:d5:89:51:29:bc:21:d9:cf:cb: e3:01:2a:22:ae:ec:74:92:c4:ea:b5:f2:d5:94:fa: f5:c8:75:c7:c6:84:11:2d:60:34:0d:c4:79:b3:05: 2e:18:10:79:c0:18:fb:c4:2c:1c:6b:be:bf:8f:46: a8:1a:29:f3:78:89:d3:95:5f:d9:53:ad:36:5d:b3: 3f:51:55:5b:b6:ad:43:1b:47:d0:c3:0c:5d:38:c6: 77:d4:f8:e2:cc:6b:25:05:ce:15:be:1d:a0:75:ef: 87:08:8c:80:57:e7:45:1c:73:98:86:ea:f3:48:d0: af:fb:66:04:9a:46:3f:1e:7a:c6:2b:df:b6:4a:c8: 4f:a2:16:69:89:d7:3a:58:0c:09:b1:ce:6b:e4:c1: 71:1f:08:8e:6f:30:c8:4e:d7:b5:3e:fa:cd:cc:fb: 42:10:75:ef:2b:a5:7d:9f:b5:a9:ce:7b:7c:e5:da: 0b:55:85:f5:e0:32:27:02:75:08:6d:e6:89:da:6a: 8d:bd:0f:0f:6f:0f:11:32:ae:c9:5a:33:42:08:e4: a3:08:7d:6d:ed:e5:52:fb:a9:77:16:d0:78:9d:9f: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:B3:8B:1A:33:49:45:3C:A7:B7:BB:65:F4:04:97:88:79:54:F1 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b59fbe4-f242-4dbf-9964-15048c3da996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.8.0/21 Signature Algorithm: sha256WithRSAEncryption 92:d0:20:ca:07:a9:2c:2b:c0:7c:67:17:39:3a:0a:eb:91:82: 16:e1:5b:00:84:44:dd:b8:e7:72:bb:6e:e5:08:05:ce:5f:c4: 59:4b:7c:62:cb:29:02:37:26:b8:75:36:31:d5:36:8c:61:8b: 09:97:c3:0c:b4:1b:d9:db:f4:bd:d9:a5:6e:3b:48:a0:9e:2c: 32:73:e4:b5:25:87:6b:8e:43:1d:87:a7:de:6d:a3:3b:39:7e: ed:d4:1d:ef:e5:81:53:43:30:31:8b:31:e1:d0:11:af:88:e6: ba:18:9a:14:23:cb:78:ba:bd:68:79:f9:04:7e:2d:08:92:ba: 07:4e:45:45:d4:8c:2a:f7:b9:56:1f:30:6d:19:c9:50:12:08: 54:eb:f3:00:ad:ff:08:5a:a2:0a:85:6b:dc:26:d3:b2:f4:e1: 7c:af:5f:7e:20:dc:68:e4:bb:3a:0d:b2:c1:3d:d0:56:34:70: d5:18:f6:b1:3a:e8:da:ac:5e:69:48:2b:fe:3e:3d:78:58:79: af:bb:24:8e:08:93:42:cf:06:1c:52:34:65:e2:2d:06:ee:d3: 79:da:f8:8d:0c:2e:12:94:77:a9:c1:c6:db:5e:45:6a:15:3b: ce:05:e2:4c:66:36:70:58:4f:5d:58:ea:a6:17:11:66:90:69: f5:2c:0a:b8 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUZRcAUuw5ta4ymNBmuSssekrOQ0owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MTIwNjAwMDAzMloX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAMDZlZWRiZDEyZmJhMjUxM2RhYzQ3 MmRkNDk3ZmUwNWE3N2VmNzNmMjc0YmM1NThjZmNkNmM5MWI0YWU1MjFkMzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNBWSZL0jz7eF2AIo1JTklHuIZGJ IuboI7N/ar6d0D98HKzViVEpvCHZz8vjASoirux0ksTqtfLVlPr1yHXHxoQRLWA0 DcR5swUuGBB5wBj7xCwca76/j0aoGinzeInTlV/ZU602XbM/UVVbtq1DG0fQwwxd OMZ31PjizGslBc4Vvh2gde+HCIyAV+dFHHOYhurzSNCv+2YEmkY/HnrGK9+2SshP ohZpidc6WAwJsc5r5MFxHwiObzDITte1PvrNzPtCEHXvK6V9n7Wpznt85doLVYX1 4DInAnUIbeaJ2mqNvQ8Pbw8RMq7JWjNCCOSjCH1t7eVS+6l3FtB4nZ/LKQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFM/Ws4saM0lFPKe3u2X0BJeIeVTxMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzliNTlmYmU0LWYyNDItNGRiZi05OTY0LTE1MDQ4YzNkYTk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDZwQIMA0GCSqGSIb3DQEBCwUAA4IBAQCS0CDKB6ksK8B8Zxc5Ogrr kYIW4VsAhETduOdyu27lCAXOX8RZS3xiyykCNya4dTYx1TaMYYsJl8MMtBvZ2/S9 2aVuO0igniwyc+S1JYdrjkMdh6febaM7OX7t1B3v5YFTQzAxizHh0BGviOa6GJoU I8t4ur1oefkEfi0IkroHTkVF1Iwq97lWHzBtGclQEghU6/MArf8IWqIKhWvcJtOy 9OF8r19+INxo5Ls6DbLBPdBWNHDVGPaxOujarF5pSCv+Pj14WHmvuySOCJNCzwYc UjRl4i0G7tN52viNDC4SlHepwcbbXkVqFTvOBeJMZjZwWE9dWOqmFxFmkGn1LAq4 -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:21 2025 by rpki-client