This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa File: 26a214fb-fd3b-42e4-bc36-09523d6390f5.roa (raw, json) Hash identifier: IqAHPV83eKaSXvwYUOKwfKUNCKK+t2l1KmQNuB3kESk= Subject key identifier: CB:4F:21:62:8F:C5:20:8E:26:A1:1E:43:6D:D0:0C:DA:AF:32:04:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 186FCE33AAFE2B6DF1C2B265BF7C8B9FD8752240 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa Signing time: Tue 02 Dec 2025 00:00:10 +0000 ROA not before: Tue 02 Dec 2025 00:00:10 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6f:ce:33:aa:fe:2b:6d:f1:c2:b2:65:bf:7c:8b:9f:d8:75:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:00:10 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=97a7c09a87cc9e2d7dc1c43964141e1dec8cbdc50bd543ed5fb637d40e056cfa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:87:97:e0:1a:c5:46:d4:30:af:9c:3b:56: 3e:8b:15:88:fd:15:fd:87:cc:00:17:ba:05:ca:a6: 6a:c3:a7:f0:8c:fb:09:88:78:c7:6b:e9:97:61:9a: 16:e0:30:07:8c:82:31:72:e1:5b:4b:83:35:cc:28: 89:29:e2:b6:87:a0:46:86:10:0b:70:1a:0d:ce:1a: 0f:d5:a4:08:11:43:29:57:9b:11:f9:1a:cb:44:7c: 6d:c0:0e:e9:c5:82:44:1d:1a:3a:51:10:56:f9:93: e4:b0:71:46:8f:a4:ae:2e:0d:9c:f4:a6:10:07:03: 11:14:76:cb:55:38:8b:b4:62:96:38:72:58:32:8f: 9f:36:f4:ce:a7:4a:05:ca:c6:83:d7:95:e3:f1:fe: 55:07:af:e7:bf:bf:84:fe:7b:c7:5e:fd:b6:3a:25: 48:ad:99:df:50:95:16:59:dc:3f:b1:f2:32:e7:cf: 47:e8:7e:44:58:2d:0b:6b:c7:b2:1a:fc:d1:68:4a: d3:1d:a2:f2:4f:df:50:1c:c5:e1:15:33:24:98:64: cc:6d:1b:6e:ec:52:66:be:70:71:ff:fe:d5:61:c9: dc:0a:07:18:63:61:76:32:f6:0e:ed:b2:d5:02:3b: e5:99:b3:59:b2:8f:ad:b3:ca:ab:24:85:ee:c9:89: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:21:62:8F:C5:20:8E:26:A1:1E:43:6D:D0:0C:DA:AF:32:04:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26a214fb-fd3b-42e4-bc36-09523d6390f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:d3:f6:67:d5:8e:46:8e:84:e3:26:e6:a9:e2:9b:f7:46:11: c2:b0:7c:43:47:49:64:ab:d9:61:66:99:16:8f:20:e3:d0:0e: 43:d1:48:d1:b6:f9:2e:2c:b0:22:2c:fa:92:17:03:f8:37:0d: eb:d7:11:ab:53:6c:ee:76:84:43:fe:26:8f:55:50:8f:bf:66: c6:9b:de:17:fb:37:0b:37:c3:20:6e:46:19:2c:e9:f5:ee:c3: 48:5d:b2:dd:98:2e:28:0a:7e:ea:2c:ac:1b:c3:0a:9c:28:d1: 7f:4c:81:c4:7b:2c:91:4d:44:20:db:48:1b:2d:b3:2e:7f:15: 3c:4f:a6:d5:d0:39:08:0d:b9:3d:67:8c:e8:3b:59:06:d0:d5: 2f:36:c6:a2:bd:28:e7:62:77:13:cf:07:3a:e5:e3:af:d4:97: 6f:4f:ca:85:83:ea:0b:c3:2a:b3:7c:f0:52:78:78:88:fd:c3: c5:a9:83:bc:2d:dc:6e:a8:74:a9:9f:3b:04:af:2e:0d:b0:1d: db:e6:bd:6d:49:5e:52:22:50:ab:42:4b:63:25:f9:19:8c:29: a0:a9:48:ee:59:cd:96:2f:35:f4:03:93:8e:b5:d5:31:68:f4: 83:08:3c:ec:0d:a4:42:be:dd:84:98:64:a2:b0:78:4d:ef:8f: 6f:b5:06:35 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGG/OM6r+K23xwrJlv3yLn9h1IkAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDAxMFoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAOTdhN2MwOWE4N2NjOWUyZDdkYzFj NDM5NjQxNDFlMWRlYzhjYmRjNTBiZDU0M2VkNWZiNjM3ZDQwZTA1NmNmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI+Hl+AaxUbUMK+cO1Y+ixWI/RX9 h8wAF7oFyqZqw6fwjPsJiHjHa+mXYZoW4DAHjIIxcuFbS4M1zCiJKeK2h6BGhhAL cBoNzhoP1aQIEUMpV5sR+RrLRHxtwA7pxYJEHRo6URBW+ZPksHFGj6SuLg2c9KYQ BwMRFHbLVTiLtGKWOHJYMo+fNvTOp0oFysaD15Xj8f5VB6/nv7+E/nvHXv22OiVI rZnfUJUWWdw/sfIy589H6H5EWC0La8eyGvzRaErTHaLyT99QHMXhFTMkmGTMbRtu 7FJmvnBx//7VYcncCgcYY2F2MvYO7bLVAjvlmbNZso+ts8qrJIXuyYnuawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMtPIWKPxSCOJqEeQ23QDNqvMgSwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2YTIxNGZiLWZkM2ItNDJlNC1iYzM2LTA5NTIzZDYzOTBmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMjAMA0GCSqGSIb3DQEBCwUAA4IBAQA00/Zn1Y5GjoTjJuap 4pv3RhHCsHxDR0lkq9lhZpkWjyDj0A5D0UjRtvkuLLAiLPqSFwP4Nw3r1xGrU2zu doRD/iaPVVCPv2bGm94X+zcLN8MgbkYZLOn17sNIXbLdmC4oCn7qLKwbwwqcKNF/ TIHEeyyRTUQg20gbLbMufxU8T6bV0DkIDbk9Z4zoO1kG0NUvNsaivSjnYncTzwc6 5eOv1JdvT8qFg+oLwyqzfPBSeHiI/cPFqYO8LdxuqHSpnzsEry4NsB3b5r1tSV5S IlCrQktjJfkZjCmgqUjuWc2WLzX0A5OOtdUxaPSDCDzsDaRCvt2EmGSisHhN749v tQY1 -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:25 2025 by rpki-client