This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa File: 082ff1eb-44aa-43f9-9667-adb2b519afec.roa (raw, json) Hash identifier: g/MK+JgJyEo4xny/q0PnLsgC8INGMWVEGuVAuV/53/c= Subject key identifier: 07:37:FA:0E:92:D4:9D:00:53:0D:ED:D9:0C:E8:AD:7F:7A:BD:71:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 619D2336A1F063B2EDD46952C997A7965F8BE29C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa Signing time: Thu 27 Nov 2025 00:00:03 +0000 ROA not before: Thu 27 Nov 2025 00:00:03 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9d:23:36:a1:f0:63:b2:ed:d4:69:52:c9:97:a7:96:5f:8b:e2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 27 00:00:03 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=d4d1221d29c4d4024bddca9d9a12aa84ba80b76e88a6eb620bc0d9843d62fb58, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:dc:8e:f6:29:4e:b0:eb:eb:a3:05:4f:dd: 56:4d:5b:ab:b8:1d:b7:5e:ee:2a:3f:c9:3f:f1:a9: 34:8a:97:1c:ad:02:50:80:32:fd:8e:79:e6:ee:dd: f9:3e:a9:b5:f3:7c:f9:5d:a6:85:ee:a4:64:74:4c: f6:58:2f:0d:bc:67:bc:e3:d5:90:07:80:c8:65:2c: e0:b0:20:41:9c:e0:1f:38:5b:ff:9d:3b:45:fa:c4: 83:0b:6e:a1:53:48:ad:65:36:6d:b6:21:9c:eb:8d: d3:cc:fc:a8:62:3e:3b:43:de:86:4e:13:52:c6:32: 8d:95:aa:38:e6:da:85:94:b1:4a:7c:3b:50:c0:e5: e9:11:1c:74:cd:ad:3c:47:9d:43:24:c3:a1:35:2a: 9e:70:96:bb:0c:a4:ae:58:80:11:6e:12:0e:ac:02: 42:76:b8:e9:26:b3:34:b5:96:05:9a:96:67:6e:ba: ee:50:d5:0d:90:47:bd:a5:ff:21:7e:c4:d7:19:40: 57:e8:dd:26:8e:ee:4f:76:6d:0f:cb:e1:f1:0e:28: b7:fe:d4:31:3a:f6:e5:aa:93:60:58:19:ac:24:82: da:d0:fb:cd:09:a4:ce:6c:79:6c:0f:0a:c1:20:bd: 08:d3:71:3b:d5:8f:65:ec:71:91:cf:5a:fe:4c:db: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:37:FA:0E:92:D4:9D:00:53:0D:ED:D9:0C:E8:AD:7F:7A:BD:71:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:2800::/40 Signature Algorithm: sha256WithRSAEncryption 26:b5:b4:cc:2d:3a:b6:c6:a4:66:93:28:52:62:51:d1:4e:4d: 8c:bf:69:59:1d:2a:4c:f7:be:be:28:fc:00:ff:4a:ab:65:a7: 7d:03:b4:e7:b3:ad:ab:0a:3a:4f:61:8f:4b:24:01:64:6b:91: 9a:d8:50:72:9a:cb:ae:42:35:a0:7e:73:88:09:38:2e:69:c3: 02:40:56:fa:f5:9f:b2:2b:38:9e:46:bb:51:02:61:47:4f:f9: cc:37:e2:35:68:40:b9:8b:a6:5e:34:77:ac:22:c7:15:d7:5a: 3b:46:ef:89:a1:29:1e:c3:d4:5c:84:7f:68:1b:d7:6d:c7:26: 74:73:7c:a7:c7:cd:27:c0:61:88:fd:51:4a:ed:37:9f:67:36: 83:2b:d3:88:f8:fc:a4:93:8a:25:6b:3c:9e:52:ab:10:d6:25: 82:11:0e:64:7e:79:e1:ad:4c:13:27:5a:27:70:af:c9:7f:4c: df:3d:ea:a1:4f:7b:61:0b:59:57:7b:fc:3e:d4:3e:38:97:3b: a6:02:a6:19:f5:5e:b4:c5:61:04:83:f6:94:3a:79:54:06:0a: cc:71:e8:37:27:e6:d5:9a:a8:59:64:e3:e4:85:84:d3:84:69: c7:b2:d6:30:b0:ab:62:df:37:bf:88:14:c4:41:97:30:f6:28: e2:26:ad:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYZ0jNqHwY7Lt1GlSyZenll+L4pwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNzAwMDAwM1oX DTI2MDIyNTIzNTk1OVowejFJMEcGA1UEBRNAZDRkMTIyMWQyOWM0ZDQwMjRiZGRj YTlkOWExMmFhODRiYTgwYjc2ZTg4YTZlYjYyMGJjMGQ5ODQzZDYyZmI1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+7cjvYpTrDr66MFT91WTVuruB23 Xu4qP8k/8ak0ipccrQJQgDL9jnnm7t35Pqm183z5XaaF7qRkdEz2WC8NvGe849WQ B4DIZSzgsCBBnOAfOFv/nTtF+sSDC26hU0itZTZttiGc643TzPyoYj47Q96GThNS xjKNlao45tqFlLFKfDtQwOXpERx0za08R51DJMOhNSqecJa7DKSuWIARbhIOrAJC drjpJrM0tZYFmpZnbrruUNUNkEe9pf8hfsTXGUBX6N0mju5Pdm0Py+HxDii3/tQx OvblqpNgWBmsJILa0PvNCaTObHlsDwrBIL0I03E71Y9l7HGRz1r+TNt75wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAc3+g6S1J0AUw3t2QzorX96vXH7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4MmZmMWViLTQ0YWEtNDNmOS05NjY3LWFkYjJiNTE5YWZlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYCgwDQYJKoZIhvcNAQELBQADggEBACa1tMwtOrbGpGaTKFJi UdFOTYy/aVkdKkz3vr4o/AD/Sqtlp30DtOezrasKOk9hj0skAWRrkZrYUHKay65C NaB+c4gJOC5pwwJAVvr1n7IrOJ5Gu1ECYUdP+cw34jVoQLmLpl40d6wixxXXWjtG 74mhKR7D1FyEf2gb123HJnRzfKfHzSfAYYj9UUrtN59nNoMr04j4/KSTiiVrPJ5S qxDWJYIRDmR+eeGtTBMnWidwr8l/TN896qFPe2ELWVd7/D7UPjiXO6YCphn1XrTF YQSD9pQ6eVQGCsxx6Dcn5tWaqFlk4+SFhNOEacey1jCwq2LfN7+IFMRBlzD2KOIm rQM= -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:55 2025 by rpki-client