This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa File: 51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa (raw, json) Hash identifier: nZ6ZR0VPtJU8WaMcYHgKTYqkIMea2juLgF7a7w0x5+4= Subject key identifier: 96:DE:5A:E7:CA:BD:10:92:40:A3:12:A8:EA:A1:8F:98:EA:CB:A0:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6394A26610EC24749373DE8A83261702D86D4214 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa Signing time: Tue 02 Dec 2025 00:01:27 +0000 ROA not before: Tue 02 Dec 2025 00:01:27 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:94:a2:66:10:ec:24:74:93:73:de:8a:83:26:17:02:d8:6d:42:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:01:27 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=78352ce37086958d773bf86dc57c931488b4eaed26f93e3057baac9066358f69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3e:27:d8:b9:e4:45:d1:c5:c1:3b:42:6d:aa: 02:98:06:fd:c1:d4:bf:62:7e:3f:7c:03:6f:1f:4a: b9:29:67:a5:37:be:a9:4e:24:08:36:1d:68:c2:73: 4a:e3:ea:5c:b4:b5:7e:d8:0f:90:1b:2e:48:9f:0a: 4f:e3:9f:5a:ab:df:df:3c:93:0a:23:f0:ba:0e:ee: 96:6b:25:e3:af:e4:d2:d2:24:74:a1:3d:f2:0c:65: 62:17:eb:78:10:13:29:09:50:ae:f8:5d:a0:4c:1f: 55:4f:6a:6f:c1:78:46:81:df:bd:62:a0:67:33:fb: 60:f4:5f:17:34:13:05:29:c8:98:61:3b:23:1f:c3: 01:9b:75:f9:ab:bf:8e:e6:dc:db:f0:d6:cf:d6:44: 52:15:eb:cf:78:13:d3:fe:55:c9:ee:63:58:89:d8: a5:38:ad:80:35:20:16:69:ef:f5:d6:37:f1:73:86: c8:39:55:c1:85:cf:e5:8b:18:d3:cb:77:86:f6:b6: ad:c6:10:be:a7:11:f7:00:c3:fd:8e:c4:f5:0e:1c: 49:f1:d3:15:2d:c1:5f:35:5d:87:84:90:13:5a:e7: 98:27:29:4f:14:a4:65:98:0f:e8:b8:aa:a2:bc:0b: bf:74:66:6e:92:45:b1:4a:69:1f:d6:b3:09:54:af: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DE:5A:E7:CA:BD:10:92:40:A3:12:A8:EA:A1:8F:98:EA:CB:A0:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a24143-8f19-4f2c-81a0-4046fe0d0f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6000::/40 Signature Algorithm: sha256WithRSAEncryption 87:22:b9:f6:f2:ba:a7:c5:0a:83:09:ee:b0:51:41:08:55:36: df:7f:a1:3c:c3:27:1b:da:5a:05:e8:d8:3b:49:4f:ea:e8:f9: 70:64:c9:b2:d2:80:54:b6:47:f1:f8:29:22:b3:7a:3e:30:18: e9:38:ee:7c:02:99:97:cd:66:cc:38:85:15:19:9e:00:02:3a: d8:78:7e:ad:3f:86:95:e0:12:18:a1:f3:34:72:7e:fa:87:b3: af:96:1d:25:0e:c6:50:1b:2b:aa:05:be:24:11:e2:22:82:f6: e2:f4:20:e4:c0:e9:48:bf:33:30:69:fb:a0:9d:7b:ee:9f:a8: 8e:54:8b:ac:93:09:37:66:21:a8:b3:be:35:a1:d3:7d:4e:e2: 5c:de:21:ab:7f:48:fc:c2:65:a2:4f:e0:aa:d9:f2:c7:97:3e: 5e:18:3f:3e:48:a8:92:b8:84:56:d8:96:3b:83:9a:c5:51:b3: 1d:90:40:18:24:7e:da:30:1c:c9:27:40:b9:33:f3:4b:cf:50: ab:41:70:c7:98:78:cd:f9:f2:ec:a7:6e:ea:df:c0:67:b2:d1: dd:8e:d7:bf:cf:a8:11:5f:2d:34:59:a0:43:ac:4c:37:78:78: d4:65:00:46:33:b0:6f:b7:15:88:43:88:ad:37:d7:51:55:f4: 29:36:7c:d7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY5SiZhDsJHSTc96KgyYXAthtQhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDEyN1oX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNANzgzNTJjZTM3MDg2OTU4ZDc3M2Jm ODZkYzU3YzkzMTQ4OGI0ZWFlZDI2ZjkzZTMwNTdiYWFjOTA2NjM1OGY2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9T4n2LnkRdHFwTtCbaoCmAb9wdS/ Yn4/fANvH0q5KWelN76pTiQINh1ownNK4+pctLV+2A+QGy5InwpP459aq9/fPJMK I/C6Du6WayXjr+TS0iR0oT3yDGViF+t4EBMpCVCu+F2gTB9VT2pvwXhGgd+9YqBn M/tg9F8XNBMFKciYYTsjH8MBm3X5q7+O5tzb8NbP1kRSFevPeBPT/lXJ7mNYidil OK2ANSAWae/11jfxc4bIOVXBhc/lixjTy3eG9ratxhC+pxH3AMP9jsT1DhxJ8dMV LcFfNV2HhJATWueYJylPFKRlmA/ouKqivAu/dGZukkWxSmkf1rMJVK9uQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJbeWufKvRCSQKMSqOqhj5jqy6C4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxYTI0MTQzLThmMTktNGYyYy04MWEwLTQwNDZmZTBkMGY2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/2AwDQYJKoZIhvcNAQELBQADggEBAIciufbyuqfFCoMJ7rBR QQhVNt9/oTzDJxvaWgXo2DtJT+ro+XBkybLSgFS2R/H4KSKzej4wGOk47nwCmZfN Zsw4hRUZngACOth4fq0/hpXgEhih8zRyfvqHs6+WHSUOxlAbK6oFviQR4iKC9uL0 IOTA6Ui/MzBp+6Cde+6fqI5Ui6yTCTdmIaizvjWh031O4lzeIat/SPzCZaJP4KrZ 8seXPl4YPz5IqJK4hFbYljuDmsVRsx2QQBgkftowHMknQLkz80vPUKtBcMeYeM35 8uynburfwGey0d2O17/PqBFfLTRZoEOsTDd4eNRlAEYzsG+3FYhDiK0311FV9Ck2 fNc= -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:15 2025 by rpki-client