This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4fc06eea-29d8-4164-887f-1ef4caf5b8ea.roa File: 4fc06eea-29d8-4164-887f-1ef4caf5b8ea.roa (raw, json) Hash identifier: 0FuqhZ/EdLFYW8oiSFrn18od4HdRjpl+wIUuWcFBZzg= Subject key identifier: 88:F8:3D:A5:2D:59:8D:4F:5F:66:65:BD:F1:9B:16:44:2C:9B:4C:7E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1F804A1DB722960D332C546F5A45CB6CFAA91CFC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4fc06eea-29d8-4164-887f-1ef4caf5b8ea.roa Signing time: Thu 27 Nov 2025 00:00:50 +0000 ROA not before: Thu 27 Nov 2025 00:00:50 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:80:4a:1d:b7:22:96:0d:33:2c:54:6f:5a:45:cb:6c:fa:a9:1c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 27 00:00:50 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=05339be7a6c19bdf2a339fb2565cb49a7931e39cae7c40135afbebe72d49912d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:55:f7:0b:6a:8e:ec:d3:fa:7d:88:59:d0: 3c:f2:22:16:7b:02:58:19:31:9c:c0:79:c5:fc:5f: db:90:1b:03:15:b2:8b:f9:02:ce:5b:71:53:fa:ba: 25:9b:d2:a0:ef:d4:7f:0e:4d:3d:f4:13:e2:82:ae: 1c:b1:f5:e9:ac:2d:18:e2:8c:86:02:b2:45:2d:6c: 56:eb:1c:16:d2:d0:5c:12:aa:d7:a3:a7:22:fe:83: 09:0f:73:79:78:4e:18:00:f7:ed:f8:24:27:97:71: af:3c:7d:7a:b2:67:30:c5:ba:1f:82:58:1d:05:36: 21:7b:4f:1b:28:df:9b:92:e0:96:c6:bf:2c:8d:4f: 7e:9e:56:ab:d0:c9:a9:3a:e4:eb:65:ba:2f:66:1d: 3f:5a:9b:4d:47:ff:c2:dd:c9:dc:f7:04:f1:d6:9a: 3b:34:3d:9b:b6:e0:b2:12:93:b2:a5:66:13:03:5c: 53:b4:c2:cc:7c:8c:65:fb:14:8a:e0:80:c0:de:fb: 50:ed:b7:81:8a:5c:11:af:f7:c0:7c:8b:61:46:cd: 0c:cf:ed:25:89:68:80:c6:d8:14:b3:95:a8:95:36: 53:7b:f0:e0:8b:cb:89:17:36:18:f3:9a:75:60:9a: 68:58:37:23:c6:b9:1f:be:00:56:79:04:fd:98:7e: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:3D:A5:2D:59:8D:4F:5F:66:65:BD:F1:9B:16:44:2C:9B:4C:7E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4fc06eea-29d8-4164-887f-1ef4caf5b8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:8800::/40 Signature Algorithm: sha256WithRSAEncryption 04:02:96:fd:0b:fd:91:af:63:14:2e:4c:6a:f6:96:2d:e4:84: f2:cb:f7:2a:1b:5c:cf:fb:2f:0f:ad:5b:7c:bf:e6:d9:7c:e4: 72:e2:f4:8d:f4:74:b9:28:37:ac:e7:1b:9c:85:a8:36:e0:14: 20:d9:7e:d6:cf:25:25:be:33:ee:a2:25:ac:f2:1e:10:92:a8: 91:07:6c:0d:06:3d:90:a9:59:ca:f7:d8:ea:3a:34:86:e5:0c: d4:8f:32:c6:31:de:34:25:54:32:c3:0e:08:3e:78:f3:9f:66: 13:d4:41:c7:a4:78:0b:62:4d:92:9b:8e:11:2f:da:71:ac:ad: b9:f7:67:e8:34:47:6c:13:12:14:ed:66:ec:54:d1:e3:19:03: 05:1d:0e:5f:59:e6:75:b9:04:2d:ec:b2:08:84:a3:14:72:e0: 4a:53:2a:36:d8:e2:35:40:cf:b8:94:d7:98:18:d0:cf:07:3e: cc:79:8c:32:5e:6e:ed:ac:5d:b8:58:48:92:78:db:c9:4d:f4: f4:a7:80:36:be:a2:72:87:7c:b6:06:26:5c:15:e7:14:d5:47: e9:b7:20:bd:32:05:83:e8:89:24:0e:6b:82:61:d6:87:16:92: a6:0a:74:8e:ec:f4:9c:aa:5b:43:98:bb:6e:8d:66:ef:4c:83: 36:19:ec:95 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUH4BKHbcilg0zLFRvWkXLbPqpHPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNzAwMDA1MFoX DTI2MDIyNTIzNTk1OVowejFJMEcGA1UEBRNAMDUzMzliZTdhNmMxOWJkZjJhMzM5 ZmIyNTY1Y2I0OWE3OTMxZTM5Y2FlN2M0MDEzNWFmYmViZTcyZDQ5OTEyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvtV9wtqjuzT+n2IWdA88iIWewJY GTGcwHnF/F/bkBsDFbKL+QLOW3FT+rolm9Kg79R/Dk099BPigq4csfXprC0Y4oyG ArJFLWxW6xwW0tBcEqrXo6ci/oMJD3N5eE4YAPft+CQnl3GvPH16smcwxbofglgd BTYhe08bKN+bkuCWxr8sjU9+nlar0MmpOuTrZbovZh0/WptNR//C3cnc9wTx1po7 ND2btuCyEpOypWYTA1xTtMLMfIxl+xSK4IDA3vtQ7beBilwRr/fAfIthRs0Mz+0l iWiAxtgUs5WolTZTe/Dgi8uJFzYY85p1YJpoWDcjxrkfvgBWeQT9mH7OjQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIj4PaUtWY1PX2ZlvfGbFkQsm0x+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmYzA2ZWVhLTI5ZDgtNDE2NC04ODdmLTFlZjRjYWY1YjhlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYIgwDQYJKoZIhvcNAQELBQADggEBAAQClv0L/ZGvYxQuTGr2 li3khPLL9yobXM/7Lw+tW3y/5tl85HLi9I30dLkoN6znG5yFqDbgFCDZftbPJSW+ M+6iJazyHhCSqJEHbA0GPZCpWcr32Oo6NIblDNSPMsYx3jQlVDLDDgg+ePOfZhPU QcekeAtiTZKbjhEv2nGsrbn3Z+g0R2wTEhTtZuxU0eMZAwUdDl9Z5nW5BC3ssgiE oxRy4EpTKjbY4jVAz7iU15gY0M8HPsx5jDJebu2sXbhYSJJ428lN9PSngDa+onKH fLYGJlwV5xTVR+m3IL0yBYPoiSQOa4Jh1ocWkqYKdI7s9JyqW0OYu26NZu9MgzYZ 7JU= -----END CERTIFICATE-----Generated at Sat Dec 6 14:14:38 2025 by rpki-client