This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bcb6e17-236c-46bc-ae7b-650978abe133.roa File: 3bcb6e17-236c-46bc-ae7b-650978abe133.roa (raw, json) Hash identifier: jWrK61iFNFKd/+tXwuZ2myinOYgyAfrAe3kqlNBMTpU= Subject key identifier: CF:8E:A6:19:D6:A3:5F:EC:11:4C:C4:D4:57:A9:BF:DB:8E:E3:5A:4A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78611DE462A41EC8FEDB980D4C6945CC9F101EE5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bcb6e17-236c-46bc-ae7b-650978abe133.roa Signing time: Sun 23 Nov 2025 00:11:09 +0000 ROA not before: Sun 23 Nov 2025 00:11:09 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:1d:e4:62:a4:1e:c8:fe:db:98:0d:4c:69:45:cc:9f:10:1e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:11:09 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=bce9cd7e2d32b49d000dec036efaca4c795323f74b792daa593313814a891f2c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:29:f9:60:a8:d8:71:52:f2:24:74:b1:26: a8:00:0d:b1:b7:77:73:4b:73:43:70:6b:7a:39:f6: 5b:4a:67:d2:3d:a9:f9:d9:9e:80:5e:74:7d:46:a3: 14:ef:59:ed:70:ae:bf:8e:47:57:6a:7b:04:b8:89: 46:1c:ea:04:74:46:ef:ed:f5:63:e8:6f:f4:f3:99: d8:04:9c:20:86:23:e7:af:cd:01:70:72:82:43:ab: 40:92:83:0e:86:4f:ac:37:4f:f8:ef:92:6d:df:11: 12:64:b9:26:36:c0:e1:6d:c4:3a:e2:b3:09:2e:9b: 5f:de:32:84:d1:df:ce:b5:ac:27:f2:ae:0f:51:1f: 3d:14:57:2e:7f:df:ff:c6:80:fe:07:80:bb:c1:42: c2:99:64:ce:0c:c3:9b:24:51:a2:4d:7e:f7:f5:bd: b8:92:51:2d:f9:17:3f:b6:3e:fb:6f:9b:e3:ab:ad: 3e:b7:5d:01:a8:93:d8:25:f8:50:5d:fb:42:a0:1d: 27:2c:69:fb:14:16:61:20:57:1f:ff:d3:66:18:06: b9:79:a5:ca:cf:46:4e:cd:bc:9c:49:21:49:11:77: d3:4f:48:c2:07:7e:bc:e6:9e:e6:6e:b4:ee:e2:49: fa:b1:30:22:e7:6e:df:1a:8c:6f:f1:9c:74:8a:04: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:A6:19:D6:A3:5F:EC:11:4C:C4:D4:57:A9:BF:DB:8E:E3:5A:4A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bcb6e17-236c-46bc-ae7b-650978abe133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption b9:58:e4:43:b3:3b:1b:6a:f2:9e:11:d1:11:9f:0c:ba:1d:8a: 6a:40:88:9a:c7:0a:c6:e5:6a:8e:52:08:d4:9c:ae:95:77:b2: cb:80:b9:67:ec:85:15:75:a9:f4:d9:4c:0d:3a:d0:41:ae:0a: 7b:cf:74:a1:a8:18:eb:4b:15:e1:74:65:67:f1:5e:c0:01:5b: 00:4b:4d:13:93:f5:37:82:2c:d3:e2:28:3d:d1:90:59:2a:4d: fe:bf:7c:5d:e6:e4:43:81:17:df:99:9a:7f:a2:0d:56:ab:16: 17:b9:77:ad:25:7e:3e:d5:34:ab:e7:60:95:e4:26:e9:f3:a4: b6:52:28:d7:81:d5:f4:65:f9:22:cf:e2:31:3e:3c:38:fb:4a: 31:42:fc:25:78:6c:70:c5:5c:00:74:0b:a1:71:57:e1:0f:61: ae:55:eb:29:28:19:fe:eb:dc:f9:5d:f0:72:08:65:85:18:d8: e2:8a:ed:12:76:31:1d:a2:e7:72:02:16:4b:8e:8e:7e:17:af: fb:e3:2c:52:97:b0:1e:16:e9:c3:64:71:90:dc:38:6f:c9:70: ea:60:89:f0:16:29:83:15:09:14:8d:c2:fc:f6:61:c4:db:b0: d0:7e:95:a1:a3:f8:d1:68:27:70:a4:8a:08:49:b5:91:c8:23: 5b:f4:50:4b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeGEd5GKkHsj+25gNTGlFzJ8QHuUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTEwOVoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAYmNlOWNkN2UyZDMyYjQ5ZDAwMGRl YzAzNmVmYWNhNGM3OTUzMjNmNzRiNzkyZGFhNTkzMzEzODE0YTg5MWYyYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvkp+WCo2HFS8iR0sSaoAA2xt3dz S3NDcGt6OfZbSmfSPan52Z6AXnR9RqMU71ntcK6/jkdXansEuIlGHOoEdEbv7fVj 6G/085nYBJwghiPnr80BcHKCQ6tAkoMOhk+sN0/475Jt3xESZLkmNsDhbcQ64rMJ Lptf3jKE0d/Otawn8q4PUR89FFcuf9//xoD+B4C7wULCmWTODMObJFGiTX739b24 klEt+Rc/tj77b5vjq60+t10BqJPYJfhQXftCoB0nLGn7FBZhIFcf/9NmGAa5eaXK z0ZOzbycSSFJEXfTT0jCB3685p7mbrTu4kn6sTAi527fGoxv8Zx0igQeewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM+OphnWo1/sEUzE1Fepv9uO41pKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiY2I2ZTE3LTIzNmMtNDZiYy1hZTdiLTY1MDk3OGFiZTEzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6vDAMA0GCSqGSIb3DQEBCwUAA4IBAQC5WORDszsbavKeEdER nwy6HYpqQIiaxwrG5WqOUgjUnK6Vd7LLgLln7IUVdan02UwNOtBBrgp7z3ShqBjr SxXhdGVn8V7AAVsAS00Tk/U3gizT4ig90ZBZKk3+v3xd5uRDgRffmZp/og1WqxYX uXetJX4+1TSr52CV5Cbp86S2UijXgdX0Zfkiz+IxPjw4+0oxQvwleGxwxVwAdAuh cVfhD2GuVespKBn+69z5XfByCGWFGNjiiu0SdjEdoudyAhZLjo5+F6/74yxSl7Ae FunDZHGQ3DhvyXDqYInwFimDFQkUjcL89mHE27DQfpWho/jRaCdwpIoISbWRyCNb 9FBL -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:40 2025 by rpki-client