This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d6a264a-aa2a-46c2-95e0-8711aa342743.roa File: 4d6a264a-aa2a-46c2-95e0-8711aa342743.roa (raw, json) Hash identifier: kzwG7eMWz+c2DElW1KNY2LsDE31zJzdILhzzPlfg3AM= Subject key identifier: E8:DF:12:FC:C6:D7:26:EB:21:D2:3F:52:22:40:D1:01:13:19:99:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 71219B03035332D453996D18EC2DE6CCADA02978 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d6a264a-aa2a-46c2-95e0-8711aa342743.roa Signing time: Thu 04 Dec 2025 00:40:06 +0000 ROA not before: Thu 04 Dec 2025 00:40:06 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:21:9b:03:03:53:32:d4:53:99:6d:18:ec:2d:e6:cc:ad:a0:29:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:40:06 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=1ed7e04ff1fc32b9b6b4508089d448f427fb24dcb17d4892edef5d5cfede725d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:7c:78:67:95:2e:45:c2:86:ea:89:f0:45: d7:cb:3f:d6:df:84:45:1b:c9:5d:04:be:30:ba:11: d6:17:1e:ad:72:31:dd:15:24:73:20:c1:90:22:98: b5:3f:fa:53:86:91:dc:7a:66:c8:a3:2a:91:8a:87: 84:98:04:1f:fe:17:f2:e5:b2:b6:cc:47:a2:cf:5e: 1f:ab:23:02:9d:a0:b2:bc:4a:46:eb:d9:1f:09:b2: f3:45:d8:2a:2b:42:ba:a1:8e:81:0e:47:4f:2b:32: 14:47:c6:2e:d0:95:f1:76:47:19:3d:cf:af:43:96: 8c:b5:bb:4a:70:d2:62:65:ab:7c:72:8c:0e:8f:8d: 87:ff:d6:ca:8e:e8:68:18:72:ad:9b:fb:f3:02:ad: 20:b3:82:cd:bd:57:f8:ff:31:de:c1:bb:4d:32:95: ab:2e:20:fd:52:48:54:3f:da:c5:26:8e:6a:11:14: d1:4a:bf:68:a7:2e:e8:11:4b:ac:8b:63:8e:3b:f4: 66:40:21:66:15:37:7a:ea:f7:fc:0a:ef:88:6f:27: d5:0f:0f:40:0f:e0:d6:d1:4b:ed:14:93:fd:d9:c8: 53:fa:c4:81:5f:df:ed:d9:fa:64:2d:d6:6c:a4:6f: 1a:bd:72:51:13:1c:44:af:5e:53:af:84:4e:f1:fe: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DF:12:FC:C6:D7:26:EB:21:D2:3F:52:22:40:D1:01:13:19:99:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d6a264a-aa2a-46c2-95e0-8711aa342743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption b0:ca:e3:74:af:42:0f:09:db:fe:65:a1:db:4b:ed:69:dc:f2: 6d:08:7f:5e:b8:01:4d:8f:3c:81:5e:d5:72:9c:d0:87:7f:70: 16:01:22:7d:b2:33:53:4d:88:7d:20:35:10:d4:56:10:60:7f: fc:ac:e6:d9:e6:5b:3f:cb:c0:9d:4b:55:8e:98:3f:b1:9d:70: 9e:98:c9:cb:3e:92:cd:a2:a9:ab:d7:3f:b1:0a:57:1f:67:dc: 44:a7:2b:5c:53:d8:c0:20:f4:76:e1:be:90:d4:53:43:1e:5a: 57:08:7c:78:9f:7f:6d:f3:f1:3b:da:3a:60:99:d0:92:c7:97: fd:35:33:47:f3:42:17:4e:c9:e3:02:3f:0a:8f:11:85:05:0a: 3b:fa:6b:cc:7a:7e:08:76:ca:df:3c:eb:1a:45:90:38:47:67: 3e:7d:e5:ca:fd:2e:36:63:8f:6f:e9:ab:7c:65:88:22:10:90: 42:b4:d5:87:ac:da:7c:2c:7b:ce:83:65:7d:2a:33:24:c2:f9: c3:75:58:82:54:8a:99:3b:eb:df:dc:af:13:20:fc:e9:ca:70: 32:9d:c1:99:5e:65:01:c7:f7:e0:5c:e9:83:00:69:9c:bc:40: 76:3d:3f:ac:be:11:56:61:d6:02:f0:f2:36:50:68:a6:90:bb: 70:75:6f:f2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcSGbAwNTMtRTmW0Y7C3mzK2gKXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwNDAwNloX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAMWVkN2UwNGZmMWZjMzJiOWI2YjQ1 MDgwODlkNDQ4ZjQyN2ZiMjRkY2IxN2Q0ODkyZWRlZjVkNWNmZWRlNzI1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5d8eGeVLkXChuqJ8EXXyz/W34RF G8ldBL4wuhHWFx6tcjHdFSRzIMGQIpi1P/pThpHcembIoyqRioeEmAQf/hfy5bK2 zEeiz14fqyMCnaCyvEpG69kfCbLzRdgqK0K6oY6BDkdPKzIUR8Yu0JXxdkcZPc+v Q5aMtbtKcNJiZat8cowOj42H/9bKjuhoGHKtm/vzAq0gs4LNvVf4/zHewbtNMpWr LiD9UkhUP9rFJo5qERTRSr9opy7oEUusi2OOO/RmQCFmFTd66vf8Cu+IbyfVDw9A D+DW0UvtFJP92chT+sSBX9/t2fpkLdZspG8avXJRExxEr15Tr4RO8f7MxwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOjfEvzG1ybrIdI/UiJA0QETGZnrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRkNmEyNjRhLWFhMmEtNDZjMi05NWUwLTg3MTFhYTM0Mjc0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMjAMA0GCSqGSIb3DQEBCwUAA4IBAQCwyuN0r0IPCdv+ZaHb S+1p3PJtCH9euAFNjzyBXtVynNCHf3AWASJ9sjNTTYh9IDUQ1FYQYH/8rObZ5ls/ y8CdS1WOmD+xnXCemMnLPpLNoqmr1z+xClcfZ9xEpytcU9jAIPR24b6Q1FNDHlpX CHx4n39t8/E72jpgmdCSx5f9NTNH80IXTsnjAj8KjxGFBQo7+mvMen4IdsrfPOsa RZA4R2c+feXK/S42Y49v6at8ZYgiEJBCtNWHrNp8LHvOg2V9KjMkwvnDdViCVIqZ O+vf3K8TIPzpynAyncGZXmUBx/fgXOmDAGmcvEB2PT+svhFWYdYC8PI2UGimkLtw dW/y -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:58 2025 by rpki-client