This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa File: 2f724fc4-af92-4f6e-9781-835f37854eec.roa (raw, json) Hash identifier: 2NtBv0P8I5rgBd6NwUhVbVF7AiWpCM1QPzRM+ZP8jbo= Subject key identifier: 1D:4F:60:06:7D:CB:AD:95:DD:07:93:F0:BD:26:D4:08:B6:55:5F:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 03D42CA8E696ABD435E677B7B7056374F50FCD3D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa Signing time: Thu 04 Dec 2025 00:30:45 +0000 ROA not before: Thu 04 Dec 2025 00:30:45 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d4:2c:a8:e6:96:ab:d4:35:e6:77:b7:b7:05:63:74:f5:0f:cd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:30:45 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=83dd2d95579a22e1a7abb44e54f9d9f637d741953f5f64b98fb2c46949b91b47, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:90:94:8f:42:32:aa:17:61:25:5f:6f:3e: f3:ff:ae:63:50:d1:33:0d:e0:e6:29:4a:3b:43:6b: c8:3f:ae:af:c1:09:5e:77:f2:ec:2b:8b:4c:a4:d7: dd:6a:3c:59:f2:1a:0a:79:14:62:c8:2b:67:d5:73: 2f:2d:81:a2:0f:4a:ad:7f:4e:82:a5:aa:a6:9f:05: 82:e1:0b:c1:51:b3:db:26:35:9a:22:46:63:30:e0: f7:76:e8:7a:cf:c5:60:4b:c8:f4:6c:a9:e2:f9:2e: d7:6e:c3:53:9f:9b:13:30:d1:31:6e:16:21:66:fb: 38:2b:96:bc:e3:69:e2:11:33:1c:42:6b:e8:e5:7c: c9:35:07:3b:06:74:8a:ac:3a:67:6c:65:3b:2b:8a: ec:51:be:d4:0c:97:26:a9:1c:09:c3:f8:9a:d3:f3: f1:c1:67:93:87:35:2c:73:a1:fa:a7:bf:72:79:ec: 40:cf:68:67:40:b7:0c:32:ad:37:69:fa:bf:af:16: 1c:5d:b1:78:96:b1:e3:f0:05:69:11:3a:22:85:10: 78:00:7d:a7:c0:0e:51:95:06:dd:f9:91:de:d2:83: f0:11:b3:7a:23:53:70:da:87:d7:6d:ab:bb:8c:41: 9c:b3:a3:e0:d1:3c:33:18:d0:e0:ac:d3:7e:4a:c3: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4F:60:06:7D:CB:AD:95:DD:07:93:F0:BD:26:D4:08:B6:55:5F:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:c00::/38 Signature Algorithm: sha256WithRSAEncryption 70:46:03:f4:5c:f8:d5:57:0f:a1:14:8a:c2:ba:85:f9:ea:7d: 22:d8:63:1b:73:62:b4:69:12:d6:c0:41:c6:26:bf:e4:52:ca: 01:b3:c6:00:b8:fa:3d:dd:49:d7:2b:69:9a:c7:96:08:c1:af: 36:62:5b:b0:83:25:2f:cc:f3:9a:3c:3f:18:2c:8c:5e:64:99: 03:5f:48:a9:e4:43:7a:22:0a:53:aa:eb:93:c3:23:74:e5:85: 94:af:17:58:1a:30:c3:ed:e0:a3:b1:f9:bd:47:4c:e7:d1:29: 94:d9:2a:d5:fd:af:f2:d2:36:25:64:2a:10:fc:d2:85:2c:a6: 90:ee:07:3f:ce:b3:37:e4:5e:02:30:d1:cf:91:aa:d9:d2:1d: 67:50:b3:6c:ae:70:ae:26:fc:8c:58:6a:74:3d:68:5e:d1:20: 57:e6:9a:7d:ef:24:cf:81:fa:e3:83:4e:93:af:1e:d3:cd:2d: 6a:c0:89:d3:36:dc:3c:ce:1b:ea:0d:82:b9:52:4d:0f:72:ac: a0:1d:3d:0c:d2:d2:33:5d:cf:38:5d:91:72:98:6d:a9:0d:3c: 7b:7a:13:b3:dd:df:ea:2e:65:6e:6e:41:4b:4b:d0:09:25:c3: 56:a0:19:40:7a:07:1b:76:67:30:1d:b3:5e:5f:07:fe:80:4b: 58:bc:5b:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUA9QsqOaWq9Q15ne3twVjdPUPzT0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzA0NVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAODNkZDJkOTU1NzlhMjJlMWE3YWJi NDRlNTRmOWQ5ZjYzN2Q3NDE5NTNmNWY2NGI5OGZiMmM0Njk0OWI5MWI0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwiQlI9CMqoXYSVfbz7z/65jUNEz DeDmKUo7Q2vIP66vwQled/LsK4tMpNfdajxZ8hoKeRRiyCtn1XMvLYGiD0qtf06C paqmnwWC4QvBUbPbJjWaIkZjMOD3duh6z8VgS8j0bKni+S7XbsNTn5sTMNExbhYh Zvs4K5a842niETMcQmvo5XzJNQc7BnSKrDpnbGU7K4rsUb7UDJcmqRwJw/ia0/Px wWeThzUsc6H6p79yeexAz2hnQLcMMq03afq/rxYcXbF4lrHj8AVpEToihRB4AH2n wA5RlQbd+ZHe0oPwEbN6I1Nw2ofXbau7jEGcs6Pg0TwzGNDgrNN+SsNCkwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB1PYAZ9y62V3QeT8L0m1Ai2VV+RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNzI0ZmM0LWFmOTItNGY2ZS05NzgxLTgzNWYzNzg1NGVlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwwwDQYJKoZIhvcNAQELBQADggEBAHBGA/Rc+NVXD6EUisK6 hfnqfSLYYxtzYrRpEtbAQcYmv+RSygGzxgC4+j3dSdcraZrHlgjBrzZiW7CDJS/M 85o8PxgsjF5kmQNfSKnkQ3oiClOq65PDI3TlhZSvF1gaMMPt4KOx+b1HTOfRKZTZ KtX9r/LSNiVkKhD80oUsppDuBz/OszfkXgIw0c+RqtnSHWdQs2yucK4m/IxYanQ9 aF7RIFfmmn3vJM+B+uODTpOvHtPNLWrAidM23DzOG+oNgrlSTQ9yrKAdPQzS0jNd zzhdkXKYbakNPHt6E7Pd3+ouZW5uQUtL0Aklw1agGUB6Bxt2ZzAds15fB/6AS1i8 WxY= -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:43 2025 by rpki-client