This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa File: 5637e746-68a9-4187-b79d-5e4d4b5c348e.roa (raw, json) Hash identifier: l+VZt/bbWDXarSlpyvyq/dy562we+DTt8ox3S7S3ysI= Subject key identifier: 59:FE:97:C0:02:07:E2:CB:9A:AE:BB:28:5D:9A:07:C5:56:68:6F:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 032BB4A1083EC83D3C90D271BAC2A48FD8862816 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa Signing time: Thu 04 Dec 2025 00:00:07 +0000 ROA not before: Thu 04 Dec 2025 00:00:07 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2c:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2b:b4:a1:08:3e:c8:3d:3c:90:d2:71:ba:c2:a4:8f:d8:86:28:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:00:07 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=fa024a6d3196025fe6e2afb4edf6dc479ab0a15b2adf40b9baa6ef41c1e0bbf3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:63:9d:6c:15:36:64:9e:66:e5:90:1b:e9:8d: 24:8e:d2:53:68:e0:70:8d:e0:b4:cd:0b:da:97:c7: c2:d1:ac:a6:1a:14:1c:b4:1b:d4:75:69:b5:1a:e7: 92:26:1d:ba:64:f0:cb:f8:ab:0f:13:59:f0:4f:7d: 09:da:ef:ef:95:0c:83:fb:34:40:c1:36:a6:a7:7c: 16:96:47:15:58:e3:fb:7e:05:9a:b3:4f:a0:b3:8b: b8:9a:01:77:f7:36:a9:c0:d1:eb:69:fb:96:48:e1: 57:7a:3d:08:93:59:6c:b6:18:8b:6b:cd:f0:1c:24: 19:0f:b8:9a:8f:b8:6a:f4:b0:76:51:bb:92:f6:e9: 6d:92:15:cf:c2:53:ba:0a:34:71:3c:f6:20:f7:93: 21:3a:4f:b8:b3:74:c7:81:31:38:87:c7:a6:d8:99: ba:27:47:21:25:2a:10:48:1b:cd:e8:a1:7f:e0:aa: 73:6a:77:1b:cc:c8:bd:26:9a:88:c4:c4:74:98:25: 55:44:dd:bf:60:90:55:0d:8a:f0:e9:90:e0:7a:de: c3:ab:de:2d:b5:6b:40:b7:45:47:35:30:fa:7f:45: 59:42:24:c0:1c:ea:b3:14:f4:f7:b4:29:b8:ef:e7: 43:19:ed:27:97:27:b8:00:13:01:39:d3:e9:b7:3f: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:97:C0:02:07:E2:CB:9A:AE:BB:28:5D:9A:07:C5:56:68:6F:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2c:8000::/36 Signature Algorithm: sha256WithRSAEncryption a1:eb:b0:68:d3:a5:dd:ff:67:25:9f:f5:54:a5:f2:b6:77:e8: c1:84:2b:49:07:39:39:80:d1:70:7c:89:84:de:c5:8d:31:fe: a9:b6:df:64:87:8e:a4:e9:63:3f:14:5c:24:0f:d2:45:86:08: 73:a0:de:38:1d:09:fc:af:1a:3b:4b:2f:31:f6:1e:19:74:44: ba:bb:c4:07:56:bd:7d:cd:e8:d2:39:d1:c7:82:7c:78:14:bc: ba:78:66:83:fd:0a:20:28:3d:e5:54:de:d6:43:0d:3b:39:04: 5e:de:37:e3:18:d4:b4:f1:b5:bd:59:57:d9:ef:96:1b:d9:ec: db:8d:ef:62:cc:88:15:3a:f9:d0:38:94:4b:f5:65:25:a9:5c: 8c:49:8b:e8:f0:91:d0:f2:ba:06:0e:0b:7f:d4:81:70:35:c5: 98:ec:0b:66:08:bd:f4:89:f6:0e:be:44:1b:2c:d0:86:14:fd: 35:d5:18:c3:f6:51:77:be:e7:08:bc:a1:e3:c7:27:8d:de:f7: 52:88:a9:fe:fd:3f:05:19:84:e5:e2:87:9a:f6:52:59:0e:15: 82:19:fd:35:75:a3:cb:be:46:c9:76:5f:68:66:f5:42:1f:dd: 2e:f3:e7:d3:49:50:13:f4:51:4b:52:c0:4a:bd:13:75:6e:5a: 54:f3:d3:f6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAyu0oQg+yD08kNJxusKkj9iGKBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDAwN1oX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAZmEwMjRhNmQzMTk2MDI1ZmU2ZTJh ZmI0ZWRmNmRjNDc5YWIwYTE1YjJhZGY0MGI5YmFhNmVmNDFjMWUwYmJmMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mOdbBU2ZJ5m5ZAb6Y0kjtJTaOBw jeC0zQval8fC0aymGhQctBvUdWm1GueSJh26ZPDL+KsPE1nwT30J2u/vlQyD+zRA wTamp3wWlkcVWOP7fgWas0+gs4u4mgF39zapwNHrafuWSOFXej0Ik1lsthiLa83w HCQZD7iaj7hq9LB2UbuS9ultkhXPwlO6CjRxPPYg95MhOk+4s3THgTE4h8em2Jm6 J0chJSoQSBvN6KF/4KpzancbzMi9JpqIxMR0mCVVRN2/YJBVDYrw6ZDget7Dq94t tWtAt0VHNTD6f0VZQiTAHOqzFPT3tCm47+dDGe0nlye4ABMBOdPptz+x6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFn+l8ACB+LLmq67KF2aB8VWaG/9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MzdlNzQ2LTY4YTktNDE4Ny1iNzlkLTVlNGQ0YjVjMzQ4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLIAwDQYJKoZIhvcNAQELBQADggEBAKHrsGjTpd3/ZyWf9VSl 8rZ36MGEK0kHOTmA0XB8iYTexY0x/qm232SHjqTpYz8UXCQP0kWGCHOg3jgdCfyv GjtLLzH2Hhl0RLq7xAdWvX3N6NI50ceCfHgUvLp4ZoP9CiAoPeVU3tZDDTs5BF7e N+MY1LTxtb1ZV9nvlhvZ7NuN72LMiBU6+dA4lEv1ZSWpXIxJi+jwkdDyugYOC3/U gXA1xZjsC2YIvfSJ9g6+RBss0IYU/TXVGMP2UXe+5wi8oePHJ43e91KIqf79PwUZ hOXih5r2UlkOFYIZ/TV1o8u+Rsl2X2hm9UIf3S7z59NJUBP0UUtSwEq9E3VuWlTz 0/Y= -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:29 2025 by rpki-client