This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa File: 00af7dea-19a3-4a5b-bdf6-57556cec9653.roa (raw, json) Hash identifier: wUHFmOFy+mywLIN9VVtuiL4FhjFRdIirAp2WSPAeWXA= Subject key identifier: 29:D6:C4:B6:5E:01:FF:3B:AB:4A:73:38:38:BA:3E:82:D1:57:7F:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 473FD6D38ECA9F2F4285ACC2CEA42E95365F7449 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa Signing time: Wed 26 Nov 2025 00:00:36 +0000 ROA not before: Wed 26 Nov 2025 00:00:36 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dabb::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3f:d6:d3:8e:ca:9f:2f:42:85:ac:c2:ce:a4:2e:95:36:5f:74:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:00:36 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=06249f79ec72ccab53b83f58afe0c8924a5bbafb8f1fe9e397b280b6d2216fcb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:32:a0:a9:f7:c3:61:10:04:6a:66:4f:6d:71: f4:60:ca:d1:82:fa:cd:5a:47:9a:73:99:44:93:c4: 86:b8:d1:32:a3:d6:0f:e8:d6:11:43:d9:45:ab:06: d4:39:50:b5:84:fe:fc:e1:97:8a:65:e0:82:f1:17: f5:dd:de:95:36:8d:b9:a9:f8:d7:db:bc:c5:b5:25: c4:50:04:3b:39:75:7a:a0:60:55:1a:d7:f9:6d:1c: ae:ef:dd:49:4d:1a:d2:d2:2e:89:04:25:2f:1a:f4: b3:ca:9a:3e:86:9f:e8:f7:c2:95:7a:47:e4:8e:e2: ce:b5:47:d2:69:33:32:f7:f0:be:59:a9:45:6a:1e: d5:ef:f7:b5:87:1e:b5:da:bf:89:8a:59:7c:b7:89: 5c:59:3b:81:42:c1:da:1b:35:4e:09:84:d9:f9:e8: 38:a0:be:bf:83:04:33:ee:62:28:4c:41:a2:7a:2b: 12:82:c9:0d:33:68:47:27:bc:fd:bb:93:13:8c:5b: 4b:1c:95:fe:d0:e0:3e:4b:da:5c:df:4f:84:00:fc: 12:1e:8e:24:ac:09:79:a9:97:1e:d9:be:6f:6b:b1: 26:69:53:09:56:9a:b9:f0:71:3a:a5:73:12:02:f1: f8:1e:8e:61:58:98:64:d9:27:f5:ef:c5:94:a0:4d: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D6:C4:B6:5E:01:FF:3B:AB:4A:73:38:38:BA:3E:82:D1:57:7F:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00af7dea-19a3-4a5b-bdf6-57556cec9653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dabb::/32 Signature Algorithm: sha256WithRSAEncryption 6a:7d:b0:c5:a8:58:4d:74:18:8c:7c:31:8f:63:42:5f:6c:3a: d3:c8:0e:01:d5:d6:f9:7d:fb:bc:03:6d:16:37:5f:8f:14:4c: 31:6b:6e:a4:f5:8a:87:e5:3e:9e:b6:89:1b:b8:1e:ca:25:a3: 9a:fb:a3:93:07:72:e8:d1:16:aa:0d:3f:2b:42:f7:e1:73:90: 53:0f:22:21:23:d0:67:a1:64:01:ee:0f:87:fd:17:c2:c2:24: a9:94:4d:13:aa:7a:1f:68:d4:f0:4c:f6:a1:f2:03:2c:c6:7d: eb:f1:30:60:34:07:95:f1:a1:08:98:06:cf:0c:86:c7:30:05: ae:7e:6a:76:10:81:51:b2:93:90:f0:64:1c:ec:47:2c:23:c4: e3:25:25:62:f0:c3:3c:1e:e4:03:5a:24:9a:f6:2a:ce:ad:89: be:68:90:70:42:a4:7e:45:d3:37:cf:9b:be:95:71:4e:bc:f2: 57:31:be:0b:10:bf:18:cf:ef:5b:e6:b0:c2:e7:45:ed:9e:79: b8:56:d9:6a:7e:3e:ba:3e:25:2b:4e:f6:fd:a7:78:34:88:b7: 45:bf:3a:c8:c0:f9:d0:e1:b7:ef:5a:6d:51:8d:28:ed:b3:98: 1b:9e:44:5d:ea:13:11:5d:ee:46:c6:ef:42:5d:12:a9:e3:55: d9:83:ca:7b -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIURz/W047Kny9ChazCzqQulTZfdEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDAzNloX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNAMDYyNDlmNzllYzcyY2NhYjUzYjgz ZjU4YWZlMGM4OTI0YTViYmFmYjhmMWZlOWUzOTdiMjgwYjZkMjIxNmZjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TKgqffDYRAEamZPbXH0YMrRgvrN Wkeac5lEk8SGuNEyo9YP6NYRQ9lFqwbUOVC1hP784ZeKZeCC8Rf13d6VNo25qfjX 27zFtSXEUAQ7OXV6oGBVGtf5bRyu791JTRrS0i6JBCUvGvSzypo+hp/o98KVekfk juLOtUfSaTMy9/C+WalFah7V7/e1hx612r+Jill8t4lcWTuBQsHaGzVOCYTZ+eg4 oL6/gwQz7mIoTEGieisSgskNM2hHJ7z9u5MTjFtLHJX+0OA+S9pc30+EAPwSHo4k rAl5qZce2b5va7EmaVMJVpq58HE6pXMSAvH4Ho5hWJhk2Sf178WUoE0ALQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFCnWxLZeAf87q0pzODi6PoLRV3/GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwYWY3ZGVhLTE5YTMtNGE1Yi1iZGY2LTU3NTU2Y2VjOTY1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbauzANBgkqhkiG9w0BAQsFAAOCAQEAan2wxahYTXQYjHwxj2NC X2w608gOAdXW+X37vANtFjdfjxRMMWtupPWKh+U+nraJG7geyiWjmvujkwdy6NEW qg0/K0L34XOQUw8iISPQZ6FkAe4Ph/0XwsIkqZRNE6p6H2jU8Ez2ofIDLMZ96/Ew YDQHlfGhCJgGzwyGxzAFrn5qdhCBUbKTkPBkHOxHLCPE4yUlYvDDPB7kA1okmvYq zq2JvmiQcEKkfkXTN8+bvpVxTrzyVzG+CxC/GM/vW+awwudF7Z55uFbZan4+uj4l K072/ad4NIi3Rb86yMD50OG371ptUY0o7bOYG55EXeoTEV3uRsbvQl0SqeNV2YPK ew== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:06 2025 by rpki-client