This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa File: 0da4a99b-3c57-490a-9459-d794057a96b2.roa (raw, json) Hash identifier: +IROteDEgDou/Ix5Wy8BAaeu3fwL31UetyExFj6TMAM= Subject key identifier: 90:DB:E0:0D:99:EB:AE:24:FD:9A:D8:AB:81:5F:E0:03:68:FC:C7:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1579D58B333826C21EF4E42AB964D25EAAB178F9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa Signing time: Wed 26 Nov 2025 00:01:16 +0000 ROA not before: Wed 26 Nov 2025 00:01:16 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:79:d5:8b:33:38:26:c2:1e:f4:e4:2a:b9:64:d2:5e:aa:b1:78:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:01:16 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=7a4212050512d6314fec37d453901cb6c7ce1e25be4e5a92ccf9a05130ef1d7e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4f:ed:d6:7f:d8:15:99:c9:14:12:67:82:76: ed:85:eb:29:9a:f7:f4:0d:f9:85:26:ca:5e:f2:7c: 11:2c:09:77:e0:e4:52:0a:e8:25:06:83:81:47:85: cb:b8:f4:6d:e5:63:6c:32:92:5b:fd:43:07:fa:ff: 2f:6e:58:b9:cc:91:d2:89:4a:22:87:5f:9c:8f:93: 05:34:fb:95:25:48:14:e3:b2:c5:7f:47:28:e0:21: 39:1f:b4:b1:62:d1:42:22:13:d6:73:7e:15:fd:f0: 94:77:67:06:7b:cc:68:32:74:dd:9f:2c:58:dc:0b: 2c:66:93:74:3e:f9:8c:14:82:ff:17:c5:58:75:8b: 6f:2d:f4:cd:93:4b:ea:2d:e0:ab:bf:1b:31:e4:66: 20:c6:63:0e:26:8a:1c:e4:2a:86:c2:b9:99:ec:4c: b9:b9:73:1a:82:aa:f4:51:13:e7:c2:33:ad:a9:b0: c8:6f:1f:29:8f:a6:e6:5f:cf:f1:86:15:d8:2d:41: 38:4c:5d:61:0c:db:51:01:42:46:62:84:01:08:48: 74:0b:e6:d5:7d:88:7e:26:96:1f:40:ce:bb:67:33: c8:7c:04:ab:0b:1c:e4:e0:ae:23:d4:5a:e6:79:25: ba:94:3d:bf:8e:e7:9d:20:e7:9b:f5:2b:ff:10:91: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DB:E0:0D:99:EB:AE:24:FD:9A:D8:AB:81:5F:E0:03:68:FC:C7:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0da4a99b-3c57-490a-9459-d794057a96b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a020::/48 Signature Algorithm: sha256WithRSAEncryption 0a:ba:34:38:6d:6a:55:fc:77:80:ce:f9:87:30:47:4f:6a:ee: c2:ad:33:b2:bd:a8:a7:de:71:8d:ac:fa:07:9a:d7:3f:35:20: 1d:a7:11:35:78:70:ce:cd:6a:d0:f2:7f:6c:17:bc:e2:32:d6: a6:62:06:ff:7c:b3:dc:24:c4:f6:2c:4e:0a:c7:65:0f:13:78: 94:56:69:fe:51:23:c0:6d:c4:aa:25:68:c3:8e:e1:49:bf:37: f8:b8:76:85:4a:ad:b2:9b:e6:2e:2c:0a:6c:3e:36:39:dd:b2: ab:fb:da:92:8e:33:d5:8a:df:07:2a:93:40:1a:df:09:f3:75: fc:72:8e:76:7a:fc:2c:7b:e6:65:5f:d7:0d:de:71:bb:c0:a8: 90:cd:12:14:9a:51:2b:47:b5:8f:b3:f9:7a:b8:ae:c7:28:dc: 9e:43:51:70:53:da:ba:4c:30:40:81:d5:e0:31:bd:dc:eb:e6: 8e:53:a3:6d:fc:a4:a3:11:68:ab:f2:89:e5:b0:5c:9d:89:6b: 10:f8:71:c1:a8:f4:52:64:c5:1c:c7:fb:ab:9e:c2:33:d4:17: 04:b8:13:ad:b9:41:a0:b1:7c:c9:7c:71:5c:c9:58:c8:e3:85: 3d:2a:3a:73:c9:da:8f:0c:5a:db:dc:1f:1d:1a:8f:07:e3:6c: 6d:6d:bf:85 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFXnVizM4JsIe9OQquWTSXqqxePkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDExNloX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNAN2E0MjEyMDUwNTEyZDYzMTRmZWMz N2Q0NTM5MDFjYjZjN2NlMWUyNWJlNGU1YTkyY2NmOWEwNTEzMGVmMWQ3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE/t1n/YFZnJFBJngnbthespmvf0 DfmFJspe8nwRLAl34ORSCuglBoOBR4XLuPRt5WNsMpJb/UMH+v8vbli5zJHSiUoi h1+cj5MFNPuVJUgU47LFf0co4CE5H7SxYtFCIhPWc34V/fCUd2cGe8xoMnTdnyxY 3AssZpN0PvmMFIL/F8VYdYtvLfTNk0vqLeCrvxsx5GYgxmMOJooc5CqGwrmZ7Ey5 uXMagqr0URPnwjOtqbDIbx8pj6bmX8/xhhXYLUE4TF1hDNtRAUJGYoQBCEh0C+bV fYh+JpYfQM67ZzPIfASrCxzk4K4j1FrmeSW6lD2/juedIOeb9Sv/EJFhDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJDb4A2Z664k/ZrYq4Ff4ANo/MeVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBkYTRhOTliLTNjNTctNDkwYS05NDU5LWQ3OTQwNTdhOTZiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6AgMA0GCSqGSIb3DQEBCwUAA4IBAQAKujQ4bWpV/HeAzvmH MEdPau7CrTOyvain3nGNrPoHmtc/NSAdpxE1eHDOzWrQ8n9sF7ziMtamYgb/fLPc JMT2LE4Kx2UPE3iUVmn+USPAbcSqJWjDjuFJvzf4uHaFSq2ym+YuLApsPjY53bKr +9qSjjPVit8HKpNAGt8J83X8co52evwse+ZlX9cN3nG7wKiQzRIUmlErR7WPs/l6 uK7HKNyeQ1FwU9q6TDBAgdXgMb3c6+aOU6Nt/KSjEWir8onlsFydiWsQ+HHBqPRS ZMUcx/urnsIz1BcEuBOtuUGgsXzJfHFcyVjI44U9KjpzydqPDFrb3B8dGo8H42xt bb+F -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:57 2025 by rpki-client