This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa File: 3627d10a-1926-4271-b849-8cb3cd31f066.roa (raw, json) Hash identifier: 4XxpC14kcoEvc//speBk4p7vJvfMnzYQ7FqCH4Jxd3g= Subject key identifier: AC:8E:0E:30:1A:DA:15:3E:28:BB:82:6D:E4:AE:17:EC:04:A7:36:E6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08D72E339629913A1598359E66507A3EA12A138D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa Signing time: Sun 23 Nov 2025 00:20:50 +0000 ROA not before: Sun 23 Nov 2025 00:20:50 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d7:2e:33:96:29:91:3a:15:98:35:9e:66:50:7a:3e:a1:2a:13:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:20:50 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=9d874a3ce417eb815ec965f26b541d3114b96f05e8bdd7c62d8647c16079f329, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:3f:94:c3:eb:b0:f6:2f:92:10:6c:e4:b2: 5a:6f:e2:68:d2:61:93:49:5f:74:34:4e:cd:bb:98: d5:d0:24:9c:06:c1:04:8b:4a:38:69:ea:0c:7f:8f: 2e:63:59:d0:c1:43:c0:4d:88:29:73:b9:36:03:10: 82:d7:c6:8a:35:92:bf:3b:87:7e:a9:f8:0e:9f:e4: f2:6a:fe:fc:e4:6b:06:58:68:73:f6:86:90:64:2d: b6:e1:76:1a:ad:de:ab:16:8d:ae:05:73:ef:fa:be: 5a:54:69:8e:a4:22:f6:55:88:8c:0c:f0:0e:bd:7f: af:a0:1a:da:39:67:1e:19:e7:f1:3b:15:a7:fe:33: a0:f2:89:e6:af:c7:eb:fd:a3:37:3a:89:00:f0:98: 84:e2:62:5f:0c:51:79:4f:08:58:4c:11:16:7d:50: 24:5c:95:17:f3:37:ed:21:14:f1:4f:ec:b5:ee:cd: 74:89:4d:95:a0:3e:33:86:72:35:d3:36:bf:37:d9: 96:81:1d:a9:24:a9:59:03:5b:31:d3:98:56:5b:9a: a8:ef:46:28:26:e2:6a:29:fc:fd:7d:ff:1b:55:99: b5:41:e0:16:7d:98:32:ef:a6:58:18:35:a3:69:af: 05:ff:30:5b:4b:65:79:c7:76:ff:68:15:c5:51:4c: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8E:0E:30:1A:DA:15:3E:28:BB:82:6D:E4:AE:17:EC:04:A7:36:E6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3627d10a-1926-4271-b849-8cb3cd31f066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:6080::/48 Signature Algorithm: sha256WithRSAEncryption 35:9a:ec:1f:54:e7:ae:31:fb:79:e3:cb:f7:73:f4:b4:e9:8c: ab:f2:45:ce:2a:37:44:f8:29:25:3a:ec:1b:3c:b3:24:34:51: b8:06:9c:b7:59:73:f6:af:a6:eb:c9:eb:8f:21:aa:3a:ad:ad: a4:42:22:c9:33:d8:50:ea:a2:21:f7:c5:74:0f:9c:3e:5b:12: c0:89:d7:70:73:6d:3b:bd:17:00:fa:54:51:96:69:01:56:1d: 91:eb:f0:9d:17:5b:5d:49:91:11:ff:e0:c9:39:5d:2e:be:f9: e1:29:f7:3b:62:c4:a1:97:69:46:22:26:85:07:78:5f:0d:93: c0:22:8a:97:7f:f3:29:39:5b:a5:12:f3:ce:a5:4e:cb:c4:ce: 01:fb:f3:56:8f:67:22:4d:0e:08:54:27:49:69:72:07:bd:07: cd:88:25:f3:36:28:91:01:21:71:03:10:32:a7:2e:b4:4e:be: 52:43:cd:e0:18:ab:d2:d7:56:c8:a0:7b:cd:df:05:40:eb:2a: a5:71:60:92:65:ae:a9:38:d4:1d:cf:6d:c2:31:80:42:84:04: b3:50:47:bc:a4:38:9b:4a:0e:a9:8a:01:b0:bd:8a:64:d7:02: 92:b5:15:18:e0:b3:9f:cc:27:79:37:76:8b:99:e0:1c:57:ee: 02:e4:2f:27 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCNcuM5YpkToVmDWeZlB6PqEqE40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMjA1MFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAOWQ4NzRhM2NlNDE3ZWI4MTVlYzk2 NWYyNmI1NDFkMzExNGI5NmYwNWU4YmRkN2M2MmQ4NjQ3YzE2MDc5ZjMyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fc/lMPrsPYvkhBs5LJab+Jo0mGT SV90NE7Nu5jV0CScBsEEi0o4aeoMf48uY1nQwUPATYgpc7k2AxCC18aKNZK/O4d+ qfgOn+Tyav785GsGWGhz9oaQZC224XYard6rFo2uBXPv+r5aVGmOpCL2VYiMDPAO vX+voBraOWceGefxOxWn/jOg8onmr8fr/aM3OokA8JiE4mJfDFF5TwhYTBEWfVAk XJUX8zftIRTxT+y17s10iU2VoD4zhnI10za/N9mWgR2pJKlZA1sx05hWW5qo70Yo JuJqKfz9ff8bVZm1QeAWfZgy76ZYGDWjaa8F/zBbS2V5x3b/aBXFUUxCwwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKyODjAa2hU+KLuCbeSuF+wEpzbmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2MjdkMTBhLTE5MjYtNDI3MS1iODQ5LThjYjNjZDMxZjA2Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6mCAMA0GCSqGSIb3DQEBCwUAA4IBAQA1muwfVOeuMft548v3 c/S06Yyr8kXOKjdE+CklOuwbPLMkNFG4Bpy3WXP2r6bryeuPIao6ra2kQiLJM9hQ 6qIh98V0D5w+WxLAiddwc207vRcA+lRRlmkBVh2R6/CdF1tdSZER/+DJOV0uvvnh Kfc7YsShl2lGIiaFB3hfDZPAIoqXf/MpOVulEvPOpU7LxM4B+/NWj2ciTQ4IVCdJ aXIHvQfNiCXzNiiRASFxAxAypy60Tr5SQ83gGKvS11bIoHvN3wVA6yqlcWCSZa6p ONQdz23CMYBChASzUEe8pDibSg6pigGwvYpk1wKStRUY4LOfzCd5N3aLmeAcV+4C 5C8n -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:13 2025 by rpki-client