This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6780a697-ebb3-4b18-8703-c9b7cf9ab225.roa File: 6780a697-ebb3-4b18-8703-c9b7cf9ab225.roa (raw, json) Hash identifier: wYHANadKZeivtsrgwIwunpjMs++foKwl+42xyCrJt6U= Subject key identifier: 4F:55:3B:E6:5A:F8:2D:98:5D:B7:B5:13:AF:13:14:96:B4:BE:32:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 329DD5C2AFEBE9F32270E3DC53BFB5D0E852E3FE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6780a697-ebb3-4b18-8703-c9b7cf9ab225.roa Signing time: Thu 04 Dec 2025 00:31:40 +0000 ROA not before: Thu 04 Dec 2025 00:31:40 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:9d:d5:c2:af:eb:e9:f3:22:70:e3:dc:53:bf:b5:d0:e8:52:e3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:31:40 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=cf4ced2622991a804991d4326a5e4fd583f295d341b864825aaed6edea973e3a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:8c:c3:e1:ac:af:6f:e0:b4:9a:44:31:73: 58:f8:4a:9b:51:cf:4f:d3:8e:35:07:66:b3:2c:c2: 73:b1:e5:97:91:9d:2a:21:f4:18:d1:24:bf:bd:f6: 9f:dc:b9:a9:05:0c:a1:35:ee:89:da:e0:29:ac:12: dd:0e:0d:3a:04:fa:4e:ee:a4:13:e7:55:37:18:36: d9:f3:58:41:b4:f5:f7:f3:d9:bd:a5:47:22:ee:0d: 34:20:71:0f:87:c9:08:1e:07:eb:76:fe:2e:f6:fb: 24:0b:a0:b6:cd:cb:da:a7:1f:fa:65:c5:ce:b0:a6: 3b:a3:6d:be:93:52:2f:98:b7:14:3f:e9:6e:32:e3: 3d:5f:87:96:6a:20:4a:66:10:a0:81:bf:40:92:f3: e8:f7:64:6a:cf:a0:c9:fa:46:fd:0f:f2:30:58:6e: 84:7b:ba:95:5d:52:61:20:d4:37:c2:62:42:5e:ee: ad:6a:a4:2f:ad:22:86:9f:07:4d:89:d7:7c:d7:ee: e7:76:4b:42:8e:3c:95:bd:a2:de:1c:6b:eb:6c:01: a6:9b:da:61:85:16:bc:1f:37:e5:28:ea:24:3e:d7: fc:b8:4a:9b:0f:6a:2a:e6:15:06:b3:ce:e6:b7:87: f2:ba:91:07:a5:78:ee:a8:3c:cf:07:ca:57:a8:2d: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:55:3B:E6:5A:F8:2D:98:5D:B7:B5:13:AF:13:14:96:B4:BE:32:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6780a697-ebb3-4b18-8703-c9b7cf9ab225.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8c00::/38 Signature Algorithm: sha256WithRSAEncryption 49:7f:e0:df:c0:c2:e8:3b:01:ae:fb:27:25:03:b4:e0:cc:e6: db:d7:1c:07:e0:4f:eb:15:c7:7c:b7:5f:3e:53:21:82:32:83: 22:37:e1:0c:de:02:af:fd:a3:e1:a6:dc:f6:ec:33:c3:07:72: 58:96:46:69:84:7d:b9:73:48:e0:98:03:63:89:1a:08:04:a8: 18:0d:9d:f3:3d:f6:2f:06:f5:8e:23:d8:9e:d6:e3:5b:b5:a7: 64:9b:c6:3f:33:3e:70:c0:b4:2c:5e:00:17:37:4d:2d:2c:31: 6f:e3:a4:4d:df:71:15:c4:41:52:51:a7:55:b8:15:94:25:33: c2:55:9b:3c:27:fd:73:fd:a6:b6:09:c2:88:e8:16:ba:3d:67: 52:89:f3:9f:03:66:f7:53:30:57:86:64:f0:35:ca:7c:a3:dc: dc:0f:b2:45:cc:8d:3e:73:c6:55:f2:99:65:70:76:f8:86:de: 8d:94:58:a4:db:af:d4:22:87:27:63:fb:ad:f7:72:6b:b1:4e: 53:68:77:dc:60:1a:ab:26:e3:ff:fd:9c:a8:73:85:3d:86:1b: 2c:52:c8:b3:aa:15:60:5d:4f:50:c5:6f:64:21:51:63:5d:9e: db:ba:8e:28:d8:46:6e:62:2e:9d:71:fd:26:bd:f4:59:2f:18: d2:9f:2f:8b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMp3Vwq/r6fMicOPcU7+10OhS4/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzE0MFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAY2Y0Y2VkMjYyMjk5MWE4MDQ5OTFk NDMyNmE1ZTRmZDU4M2YyOTVkMzQxYjg2NDgyNWFhZWQ2ZWRlYTk3M2UzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnSMw+Gsr2/gtJpEMXNY+EqbUc9P 0441B2azLMJzseWXkZ0qIfQY0SS/vfaf3LmpBQyhNe6J2uAprBLdDg06BPpO7qQT 51U3GDbZ81hBtPX389m9pUci7g00IHEPh8kIHgfrdv4u9vskC6C2zcvapx/6ZcXO sKY7o22+k1IvmLcUP+luMuM9X4eWaiBKZhCggb9AkvPo92Rqz6DJ+kb9D/IwWG6E e7qVXVJhINQ3wmJCXu6taqQvrSKGnwdNidd81+7ndktCjjyVvaLeHGvrbAGmm9ph hRa8HzflKOokPtf8uEqbD2oq5hUGs87mt4fyupEHpXjuqDzPB8pXqC22NQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE9VO+Za+C2YXbe1E68TFJa0vjL2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3ODBhNjk3LWViYjMtNGIxOC04NzAzLWM5YjdjZjlhYjIyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEIwwDQYJKoZIhvcNAQELBQADggEBAEl/4N/Awug7Aa77JyUD tODM5tvXHAfgT+sVx3y3Xz5TIYIygyI34QzeAq/9o+Gm3PbsM8MHcliWRmmEfblz SOCYA2OJGggEqBgNnfM99i8G9Y4j2J7W41u1p2Sbxj8zPnDAtCxeABc3TS0sMW/j pE3fcRXEQVJRp1W4FZQlM8JVmzwn/XP9prYJwojoFro9Z1KJ858DZvdTMFeGZPA1 ynyj3NwPskXMjT5zxlXymWVwdviG3o2UWKTbr9Qihydj+633cmuxTlNod9xgGqsm 4//9nKhzhT2GGyxSyLOqFWBdT1DFb2QhUWNdntu6jijYRm5iLp1x/Sa99FkvGNKf L4s= -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:55 2025 by rpki-client