This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa File: 5f4586d3-447b-4c16-87c7-c068a92e5e74.roa (raw, json) Hash identifier: iGbbR9G0L1i+eeGWcl+LG5TU38RTHS63t0RpVedirdc= Subject key identifier: 8F:E5:B2:F9:84:7F:90:F4:DD:09:25:DF:7F:F8:CC:81:1C:60:CC:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 76C2E2D590BDD0BD6B190361ED8047417D85DFC4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa Signing time: Wed 03 Dec 2025 00:10:27 +0000 ROA not before: Wed 03 Dec 2025 00:10:27 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c2:e2:d5:90:bd:d0:bd:6b:19:03:61:ed:80:47:41:7d:85:df:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 3 00:10:27 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=1707a85ff70e36b327b7fb0c9bb31f00f9e1d99a04d91e942e1c0f1020fe9e49, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:91:48:99:1c:9f:b6:58:31:30:73:0c:ec: f1:d5:14:0c:8f:53:09:c3:97:0c:08:e9:4b:29:e3: a6:9a:b1:de:29:bf:b5:22:4b:5f:39:95:05:e6:76: 9a:a2:bc:43:3b:28:00:9b:df:2b:6e:f4:b1:96:61: 4a:92:a2:2a:c7:01:c8:4c:89:95:a4:b2:70:f1:ce: e4:5d:30:3c:2b:37:13:84:77:b7:94:e9:dc:0b:6a: e0:f5:9a:c7:8c:fb:de:2f:f9:d3:ad:5b:20:c0:3d: 32:01:ab:ec:bc:7a:e4:57:7a:c1:98:aa:fc:2b:7e: d1:aa:f6:df:c2:96:c2:92:74:1b:d0:79:65:7f:9d: 96:69:8f:b1:0d:91:57:11:8e:a5:3e:1b:81:d9:71: 4f:83:09:dd:ba:a4:e5:b9:4b:84:dd:81:ef:50:b7: 3b:ba:d5:88:7a:66:e7:37:18:41:1b:52:b7:94:5d: 6f:eb:ce:4e:9a:ec:8b:43:e8:8f:d5:7f:33:7b:6f: 61:80:29:b9:fd:03:10:16:ac:ca:b9:0d:8f:39:37: c0:46:17:9a:d8:4a:a6:ac:29:98:70:b1:7f:e5:f1: a4:03:2a:8b:7a:38:ec:80:0d:e0:ab:36:b8:a3:7d: 51:cf:a8:31:a8:de:80:aa:6e:6a:fe:e0:32:a8:70: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E5:B2:F9:84:7F:90:F4:DD:09:25:DF:7F:F8:CC:81:1C:60:CC:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1040::/48 Signature Algorithm: sha256WithRSAEncryption b7:ec:d3:03:e4:59:77:b5:26:5b:ca:ca:35:10:41:f6:ec:fd: 57:17:e2:11:ea:b8:c6:dd:bf:63:f5:f3:2e:e1:76:dd:79:28: a8:7c:8a:67:50:30:3e:26:95:16:2f:b3:bd:bd:a3:06:24:11: 1f:07:79:f1:22:d7:d5:b2:8c:90:95:43:1c:b5:41:29:58:45: 87:5f:d7:83:31:f3:c9:d1:42:1e:eb:51:36:2d:ba:f6:ff:28: fa:89:cd:ba:5c:e4:c2:bd:81:18:68:be:9c:5b:be:e2:19:cf: 6d:bc:22:85:21:8a:dd:ae:ad:68:d3:5c:8d:10:45:a4:cc:5f: 47:c5:16:0c:c9:2f:c8:8a:8e:99:89:fc:6c:5e:00:b6:f8:53: ae:a5:f2:7f:e2:6d:da:b1:24:9c:2d:19:2c:24:8f:9c:fe:16: 6e:ba:d2:48:f1:21:45:a3:16:f6:86:d6:d1:db:a5:24:b2:c3: 91:5a:2d:e2:c9:fb:d1:1e:95:0d:90:67:54:f8:dc:00:05:5a: 39:59:d9:6f:a7:e9:07:ee:24:b0:f4:5a:dd:10:07:8f:8f:c8: f4:ac:6f:b2:c7:f6:c4:91:a1:4d:32:f1:08:31:7e:3a:45:db: 24:2f:ce:b4:37:99:d5:d5:6d:b0:35:2d:2e:43:ab:92:7e:aa: 2b:25:fc:13 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdsLi1ZC90L1rGQNh7YBHQX2F38QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMTAyN1oX DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNAMTcwN2E4NWZmNzBlMzZiMzI3Yjdm YjBjOWJiMzFmMDBmOWUxZDk5YTA0ZDkxZTk0MmUxYzBmMTAyMGZlOWU0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZaRSJkcn7ZYMTBzDOzx1RQMj1MJ w5cMCOlLKeOmmrHeKb+1IktfOZUF5naaorxDOygAm98rbvSxlmFKkqIqxwHITImV pLJw8c7kXTA8KzcThHe3lOncC2rg9ZrHjPveL/nTrVsgwD0yAavsvHrkV3rBmKr8 K37RqvbfwpbCknQb0Hllf52WaY+xDZFXEY6lPhuB2XFPgwnduqTluUuE3YHvULc7 utWIembnNxhBG1K3lF1v685OmuyLQ+iP1X8ze29hgCm5/QMQFqzKuQ2POTfARhea 2EqmrCmYcLF/5fGkAyqLejjsgA3gqza4o31Rz6gxqN6Aqm5q/uAyqHDTfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI/lsvmEf5D03Qkl33/4zIEcYMxpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDU4NmQzLTQ0N2ItNGMxNi04N2M3LWMwNjhhOTJlNWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hBAMA0GCSqGSIb3DQEBCwUAA4IBAQC37NMD5Fl3tSZbyso1 EEH27P1XF+IR6rjG3b9j9fMu4XbdeSiofIpnUDA+JpUWL7O9vaMGJBEfB3nxItfV soyQlUMctUEpWEWHX9eDMfPJ0UIe61E2Lbr2/yj6ic26XOTCvYEYaL6cW77iGc9t vCKFIYrdrq1o01yNEEWkzF9HxRYMyS/Iio6ZifxsXgC2+FOupfJ/4m3asSScLRks JI+c/hZuutJI8SFFoxb2htbR26UkssORWi3iyfvRHpUNkGdU+NwABVo5Wdlvp+kH 7iSw9FrdEAePj8j0rG+yx/bEkaFNMvEIMX46RdskL860N5nV1W2wNS0uQ6uSfqor JfwT -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:31 2025 by rpki-client