This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa File: 5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa (raw, json) Hash identifier: 7lAQMpb9hKDXZQMfO2/VQPHKiMbVGnfpkAkCuThcr9U= Subject key identifier: 24:A0:5B:EC:64:85:26:3D:1A:50:84:EF:22:A1:DA:13:5A:03:C6:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A250CEB29DC0A963595C88A1FD70E6FC40587BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa Signing time: Sun 30 Nov 2025 00:00:55 +0000 ROA not before: Sun 30 Nov 2025 00:00:55 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:25:0c:eb:29:dc:0a:96:35:95:c8:8a:1f:d7:0e:6f:c4:05:87:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:00:55 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=38a0eb27458dbae5d0f24664e690d5778f251275f07afc39e8e0b0e6c71346e1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:44:c5:d2:63:e5:3e:15:ea:2f:27:a8:50: b5:72:ea:f8:3d:e5:61:8a:9b:80:21:dd:fc:7b:27: 6d:1e:7c:90:bb:c4:7f:2b:34:b8:58:3b:4e:c0:66: e7:3b:9e:c1:b7:91:30:d9:56:ed:12:95:84:32:30: b6:6e:28:85:93:11:21:36:ce:57:75:d0:47:93:e8: ae:e2:1b:dd:68:ef:42:24:ad:0a:84:d4:18:42:66: 4f:24:4e:96:62:5f:28:28:c5:3f:61:d0:8c:82:08: 66:3e:58:13:88:ca:40:2b:d0:e6:62:40:b7:0f:b1: 45:71:1b:34:d8:14:3c:c1:0a:97:e2:45:bc:b9:d0: 42:0c:ce:c8:9f:cc:f2:c5:6f:a3:57:e2:05:c1:f0: 10:2e:e3:d1:22:b7:67:eb:96:56:2d:e2:3d:2a:a8: 93:aa:7c:5e:c6:f5:a4:3c:b0:d3:74:26:f7:26:aa: 19:81:08:1b:fb:bb:e5:49:67:57:3d:9b:be:0e:a7: 8e:4c:a3:20:66:50:43:70:ef:e3:95:1d:ea:e6:a5: 30:05:fd:2d:80:90:8a:23:42:58:e8:10:e4:06:da: 71:ca:a5:2e:69:37:4d:25:f7:d2:88:85:57:6c:b3: 48:7b:a2:b4:70:71:93:e7:91:38:9d:f6:8c:fd:f0: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A0:5B:EC:64:85:26:3D:1A:50:84:EF:22:A1:DA:13:5A:03:C6:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6080::/48 Signature Algorithm: sha256WithRSAEncryption 39:d4:66:29:62:46:6b:87:1d:42:3e:32:ea:ba:1b:16:d6:80: c9:7b:3f:02:2c:ca:22:21:d7:85:de:30:88:90:70:16:1c:f2: f2:4f:ad:73:98:4d:3b:ac:01:ad:85:f9:e8:8a:f4:f4:c6:63: c6:c3:10:f4:01:f0:29:59:29:35:31:e6:b5:7c:db:c2:bc:37: b0:f9:f2:2b:ac:b3:aa:0e:e0:c1:22:55:fe:f4:08:aa:ba:88: 2c:ea:58:38:4b:0b:ee:5b:c0:54:04:a3:20:c4:2f:43:af:74: 86:14:8d:2b:b4:31:e3:d0:78:6e:a0:1e:a5:7b:4e:63:02:30: 99:01:18:64:9e:93:a8:59:ee:a3:3c:70:74:b1:de:c0:26:50: 3f:b2:1e:bb:1e:9e:cc:3e:91:f2:82:6c:f4:3f:6d:f9:63:d6: 0e:b8:7e:ea:2b:61:fe:8d:51:5e:1a:c9:eb:e5:bd:91:e3:e5: b1:55:30:49:b5:40:24:35:36:6c:f4:c2:b9:42:45:5d:0a:9e: df:ee:d4:90:45:34:e7:d0:36:2f:51:7f:81:55:d8:0b:75:5d: 3f:5f:b2:ad:f0:0b:5c:2a:0f:95:34:3a:31:44:c7:41:5e:f2: 6e:a2:c0:01:ae:9d:3e:f5:4a:4c:91:2e:1e:ac:e0:49:18:79: 35:cb:af:d6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCiUM6yncCpY1lciKH9cOb8QFh7wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEzMDAwMDA1NVoX DTI2MDIyODIzNTk1OVowejFJMEcGA1UEBRNAMzhhMGViMjc0NThkYmFlNWQwZjI0 NjY0ZTY5MGQ1Nzc4ZjI1MTI3NWYwN2FmYzM5ZThlMGIwZTZjNzEzNDZlMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ5ExdJj5T4V6i8nqFC1cur4PeVh ipuAId38eydtHnyQu8R/KzS4WDtOwGbnO57Bt5Ew2VbtEpWEMjC2biiFkxEhNs5X ddBHk+iu4hvdaO9CJK0KhNQYQmZPJE6WYl8oKMU/YdCMgghmPlgTiMpAK9DmYkC3 D7FFcRs02BQ8wQqX4kW8udBCDM7In8zyxW+jV+IFwfAQLuPRIrdn65ZWLeI9KqiT qnxexvWkPLDTdCb3JqoZgQgb+7vlSWdXPZu+DqeOTKMgZlBDcO/jlR3q5qUwBf0t gJCKI0JY6BDkBtpxyqUuaTdNJffSiIVXbLNIe6K0cHGT55E4nfaM/fDpVQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCSgW+xkhSY9GlCE7yKh2hNaA8bhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmODA1YWE3LTc3NTctNGRmYy04ZGI4LTIyMjdlMjU2ZmIzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAGCAMA0GCSqGSIb3DQEBCwUAA4IBAQA51GYpYkZrhx1CPjLq uhsW1oDJez8CLMoiIdeF3jCIkHAWHPLyT61zmE07rAGthfnoivT0xmPGwxD0AfAp WSk1Mea1fNvCvDew+fIrrLOqDuDBIlX+9Aiquogs6lg4SwvuW8BUBKMgxC9Dr3SG FI0rtDHj0HhuoB6le05jAjCZARhknpOoWe6jPHB0sd7AJlA/sh67Hp7MPpHygmz0 P235Y9YOuH7qK2H+jVFeGsnr5b2R4+WxVTBJtUAkNTZs9MK5QkVdCp7f7tSQRTTn 0DYvUX+BVdgLdV0/X7Kt8AtcKg+VNDoxRMdBXvJuosABrp0+9UpMkS4erOBJGHk1 y6/W -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:11 2025 by rpki-client