This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa File: 2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa (raw, json) Hash identifier: zylzbnYO2Iw97hAN2etly41b/CTQEsbLgz2xnIIlHpU= Subject key identifier: 06:26:65:C1:89:F9:18:94:23:B1:DC:4C:DF:47:4E:B2:07:5C:AE:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73A80D0FE14D7C896897522C3C8B45E642EA0952 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa Signing time: Tue 02 Dec 2025 00:21:16 +0000 ROA not before: Tue 02 Dec 2025 00:21:16 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:40a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a8:0d:0f:e1:4d:7c:89:68:97:52:2c:3c:8b:45:e6:42:ea:09:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:21:16 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=f45dabd69b28d30c2b24abed153cbe9dc0c5bad8a9dbd34e7e0b11b49a62c3de, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:4e:7a:01:7e:80:5b:d5:21:f3:37:a7:3f: 23:bd:5e:f2:60:91:bb:00:ef:eb:cc:14:7b:5c:c8: 69:b1:5e:f6:d5:a9:c3:ab:d8:d0:4f:af:b7:48:35: 57:8a:c5:7a:81:88:af:55:3f:f6:9c:06:b7:c8:78: c3:79:5f:59:3c:52:7c:18:30:fd:f4:cb:82:ce:b0: 86:ea:b8:02:7b:09:18:7a:6e:bd:65:27:4d:d2:80: 66:84:13:50:42:e9:32:27:78:86:b1:9f:fc:05:84: 0a:c7:bf:8f:e4:ab:9c:b2:2a:5b:02:70:f2:82:a5: c7:7f:e3:40:73:0d:42:78:9b:c2:d3:9b:36:47:66: a2:d6:49:09:b2:d3:20:df:a4:74:9d:e8:a2:ea:38: f3:e7:02:94:14:fd:d7:03:20:79:eb:1d:19:7f:f9: 10:c7:e6:2a:b5:0a:19:c3:2c:44:44:14:a8:b4:1e: fb:c0:eb:9b:46:14:f7:e0:1d:d4:8d:bd:14:02:49: 92:0f:48:f9:aa:06:7e:1e:a2:cf:f0:32:53:ba:7c: 36:bf:3d:c7:fe:c6:fc:a7:f0:3d:f6:3c:78:9c:93: e1:8d:31:f1:88:b5:c0:e2:65:31:47:48:13:ce:fd: 9a:bf:a1:f4:ce:fe:e1:9e:04:ed:d5:b0:c0:0f:4e: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:26:65:C1:89:F9:18:94:23:B1:DC:4C:DF:47:4E:B2:07:5C:AE:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bcbf4a7-a7e0-4f59-b932-d60f1940dff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:40a0::/48 Signature Algorithm: sha256WithRSAEncryption 04:cf:6d:63:2d:12:38:f3:f7:ad:87:3a:e0:47:b7:f6:87:1e: 9d:14:f1:ab:a5:d2:7b:38:a7:94:a3:a1:57:57:e5:da:e8:78: 51:29:c6:d7:f0:f3:2f:a2:75:e0:b6:b2:72:9c:71:c0:d4:e0: fe:74:02:5f:45:33:e5:19:5d:35:1c:e6:ae:0d:11:e4:90:1d: 4b:0d:e1:ce:68:d6:0a:69:2d:40:73:71:e5:50:77:7d:6f:6b: f6:79:05:ff:c1:eb:8a:e4:b5:50:43:43:51:7b:6a:b0:f2:25: 64:5c:77:a7:2b:a1:74:b6:40:1a:67:99:92:ae:b2:a0:e6:5d: ff:2d:3a:20:d1:43:67:7e:90:a4:19:4d:df:b5:d5:6f:59:bc: 31:b9:16:32:e8:57:a0:f7:15:80:c8:b7:40:20:43:1a:4d:5d: 2d:ca:da:ab:21:58:f8:a1:1f:16:64:48:3c:82:5e:35:1f:b2: 2f:ea:c5:cc:c3:c4:fd:4c:3f:20:b6:85:93:23:ab:68:db:96: 44:30:05:87:2c:0f:a1:c5:00:55:d4:82:df:d5:7d:eb:24:27: 53:9e:79:dd:ff:6f:92:c2:c4:1f:20:33:33:c8:03:40:55:d2: b4:bd:35:78:4a:4f:68:7b:6b:f1:23:a3:89:03:80:7d:25:dd: cc:5e:c8:8a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUc6gND+FNfIlol1IsPItF5kLqCVIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMjExNloX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAZjQ1ZGFiZDY5YjI4ZDMwYzJiMjRh YmVkMTUzY2JlOWRjMGM1YmFkOGE5ZGJkMzRlN2UwYjExYjQ5YTYyYzNkZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/BOegF+gFvVIfM3pz8jvV7yYJG7 AO/rzBR7XMhpsV721anDq9jQT6+3SDVXisV6gYivVT/2nAa3yHjDeV9ZPFJ8GDD9 9MuCzrCG6rgCewkYem69ZSdN0oBmhBNQQukyJ3iGsZ/8BYQKx7+P5KucsipbAnDy gqXHf+NAcw1CeJvC05s2R2ai1kkJstMg36R0neii6jjz5wKUFP3XAyB56x0Zf/kQ x+YqtQoZwyxERBSotB77wOubRhT34B3Ujb0UAkmSD0j5qgZ+HqLP8DJTunw2vz3H /sb8p/A99jx4nJPhjTHxiLXA4mUxR0gTzv2av6H0zv7hngTt1bDAD05x8QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAYmZcGJ+RiUI7HcTN9HTrIHXK5IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiY2JmNGE3LWE3ZTAtNGY1OS1iOTMyLWQ2MGYxOTQwZGZmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAECgMA0GCSqGSIb3DQEBCwUAA4IBAQAEz21jLRI48/ethzrg R7f2hx6dFPGrpdJ7OKeUo6FXV+Xa6HhRKcbX8PMvonXgtrJynHHA1OD+dAJfRTPl GV01HOauDRHkkB1LDeHOaNYKaS1Ac3HlUHd9b2v2eQX/weuK5LVQQ0NRe2qw8iVk XHenK6F0tkAaZ5mSrrKg5l3/LTog0UNnfpCkGU3ftdVvWbwxuRYy6Feg9xWAyLdA IEMaTV0tytqrIVj4oR8WZEg8gl41H7Iv6sXMw8T9TD8gtoWTI6to25ZEMAWHLA+h xQBV1ILf1X3rJCdTnnnd/2+SwsQfIDMzyANAVdK0vTV4Sk9oe2vxI6OJA4B9Jd3M XsiK -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:25 2025 by rpki-client