This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa File: 07cfb406-d628-472a-94e3-493598a051d0.roa (raw, json) Hash identifier: VEXzMSeSXWL1Jx46AB98uhD5E4PpJhN/gxOtJAGhtLQ= Subject key identifier: 80:BF:3C:93:8B:74:DF:76:8B:DE:70:42:CD:6D:84:F1:DD:A2:8D:F0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15BEEEB85154F955CC33CE50E4A17393AA6E47C8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa Signing time: Tue 02 Dec 2025 00:11:08 +0000 ROA not before: Tue 02 Dec 2025 00:11:08 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:ee:b8:51:54:f9:55:cc:33:ce:50:e4:a1:73:93:aa:6e:47:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:11:08 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=27542232b314f95c207f224be93b9698358611e0538f6fb2de9733f63803381c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:cf:24:d1:59:36:1c:f7:e5:83:4d:f6:93: 01:cc:0a:99:a2:5a:8d:70:df:b1:cd:14:7f:3b:0d: cb:9e:4c:35:e6:da:30:a8:8f:94:10:74:f6:09:9d: 9c:36:1a:26:7f:84:5d:48:5c:8c:23:be:37:15:14: fd:ec:cf:5a:24:eb:1d:1d:c6:d1:bc:51:67:d7:17: 1a:a1:1e:a9:15:f6:34:59:3a:60:64:bd:e6:f9:66: 6b:22:c2:d7:7e:b2:53:fa:da:64:e9:e9:ff:07:55: c4:87:39:fc:ba:df:52:cf:52:07:29:50:12:0c:f5: 75:8d:0e:e4:6c:04:38:8a:04:03:4f:5e:50:e0:09: 75:e9:b5:52:06:2d:f6:d3:7c:80:78:c3:25:27:4e: 4d:09:57:d5:49:8a:a8:a2:d9:5a:ea:14:ea:a5:4e: b1:f8:7d:69:2a:a7:08:4c:29:29:fa:b8:e9:b6:e2: d0:06:5c:93:4d:db:f1:68:1f:6b:f3:08:f6:6b:30: cd:a4:55:0e:30:de:f8:33:7b:da:e1:3f:3d:c5:b7: c9:9a:61:0d:8b:e7:8c:88:6b:ed:ee:a6:d8:ef:c1: 1f:6e:e7:ff:29:15:7b:fd:a1:46:19:7e:46:15:5d: 8b:9e:74:a5:56:d2:03:f1:80:93:7b:3b:a9:e9:3d: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:3C:93:8B:74:DF:76:8B:DE:70:42:CD:6D:84:F1:DD:A2:8D:F0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2040::/48 Signature Algorithm: sha256WithRSAEncryption 4c:76:43:27:2e:6c:fb:dd:8a:78:91:1f:c9:85:e1:9c:48:13: d1:1b:e0:6e:c3:4a:cf:b9:91:d6:85:c0:b8:28:ff:b3:7d:80: d5:6d:40:b9:a6:f1:da:6f:e7:67:0d:c4:84:ab:7c:6f:8e:a7: 84:a3:b5:fa:0d:4a:34:d9:fe:2f:bb:e1:e8:c5:05:41:7a:e2: 86:7a:34:73:5c:d8:e4:f1:8f:e5:e0:27:3b:a5:aa:98:3f:46: 1d:83:c6:9f:3a:eb:74:b5:b2:ed:af:4a:a8:ff:e6:27:5b:20: c2:bb:75:3b:10:80:09:7e:55:84:15:fb:6e:27:92:86:e4:9b: fb:c9:44:18:d4:fd:c0:f8:ad:16:42:00:c0:63:48:ad:33:ec: 76:21:bf:5a:27:d9:9d:4f:51:00:72:f6:10:eb:bc:b7:54:44: e9:dd:a6:71:4d:a7:e6:de:4c:e3:7e:7f:53:b6:bc:1b:22:71: 77:a0:fc:ef:00:3a:3f:77:83:1f:7f:8e:47:c3:7f:b2:84:7a: 29:26:a0:e5:11:c3:b5:13:07:1c:ec:75:e8:c6:e5:6e:16:6c: 18:58:05:26:8d:1e:2f:b1:ac:15:e8:ed:74:09:ac:cb:c1:a8: 5a:cf:c0:27:8b:7a:f1:1e:b1:5b:e8:b3:a2:e4:a6:48:35:50: cb:05:08:ee -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFb7uuFFU+VXMM85Q5KFzk6puR8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMTEwOFoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAMjc1NDIyMzJiMzE0Zjk1YzIwN2Yy MjRiZTkzYjk2OTgzNTg2MTFlMDUzOGY2ZmIyZGU5NzMzZjYzODAzMzgxYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEDPJNFZNhz35YNN9pMBzAqZolqN cN+xzRR/Ow3Lnkw15towqI+UEHT2CZ2cNhomf4RdSFyMI743FRT97M9aJOsdHcbR vFFn1xcaoR6pFfY0WTpgZL3m+WZrIsLXfrJT+tpk6en/B1XEhzn8ut9Sz1IHKVAS DPV1jQ7kbAQ4igQDT15Q4Al16bVSBi3203yAeMMlJ05NCVfVSYqootla6hTqpU6x +H1pKqcITCkp+rjptuLQBlyTTdvxaB9r8wj2azDNpFUOMN74M3va4T89xbfJmmEN i+eMiGvt7qbY78Efbuf/KRV7/aFGGX5GFV2LnnSlVtID8YCTezup6T0JMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIC/PJOLdN92i95wQs1thPHdoo3wMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3Y2ZiNDA2LWQ2MjgtNDcyYS05NGUzLTQ5MzU5OGEwNTFkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACBAMA0GCSqGSIb3DQEBCwUAA4IBAQBMdkMnLmz73Yp4kR/J heGcSBPRG+Buw0rPuZHWhcC4KP+zfYDVbUC5pvHab+dnDcSEq3xvjqeEo7X6DUo0 2f4vu+HoxQVBeuKGejRzXNjk8Y/l4Cc7paqYP0Ydg8afOut0tbLtr0qo/+YnWyDC u3U7EIAJflWEFftuJ5KG5Jv7yUQY1P3A+K0WQgDAY0itM+x2Ib9aJ9mdT1EAcvYQ 67y3VETp3aZxTafm3kzjfn9TtrwbInF3oPzvADo/d4Mff45Hw3+yhHopJqDlEcO1 Ewcc7HXoxuVuFmwYWAUmjR4vsawV6O10CazLwahaz8Ani3rxHrFb6LOi5KZINVDL BQju -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:28 2025 by rpki-client