This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa File: 6863d6e5-517f-4f3b-8358-e9965de82700.roa (raw, json) Hash identifier: /lH5Z/mq5XH3SuFcUeShbK/iQKFC7VwPRO49q1BubGE= Subject key identifier: B9:2A:46:63:19:17:73:F2:C9:B7:81:A0:C6:18:A2:46:FE:AB:E5:8A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 60520B9132331687E15D10B6B01B23D8D5614865 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa Signing time: Tue 02 Dec 2025 00:00:11 +0000 ROA not before: Tue 02 Dec 2025 00:00:11 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:52:0b:91:32:33:16:87:e1:5d:10:b6:b0:1b:23:d8:d5:61:48:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:00:11 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=f0b57265f0c072c3a600b1b48d7fc9ec5683ed1bffb6ec98567f0a012ebb4c3b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:eb:ff:3f:79:cd:31:d6:b3:06:24:33:3f: 84:31:f3:5c:57:4b:83:6c:6f:c9:d5:b5:b7:4a:aa: 6c:b1:c6:e0:04:61:63:53:ff:fb:f4:9f:bf:c0:99: f0:14:e0:34:88:e8:f3:e1:b6:39:5a:19:e1:7b:0b: 2a:6f:e8:a9:13:ac:c3:9a:04:4a:0d:52:38:49:48: 6a:23:dc:83:60:db:43:a6:f4:50:e9:d6:80:0f:fd: ea:f4:15:96:71:5d:35:d6:b4:be:f8:4d:05:db:eb: 08:30:cb:36:88:1a:8d:14:17:4c:8b:ac:e6:a4:c9: 2c:46:ba:5e:a7:32:3c:b1:9b:62:9c:08:08:f3:4d: bf:09:73:52:13:95:53:19:9c:35:b8:88:83:2e:67: 74:fb:ef:ce:16:c3:60:1d:d8:44:0d:26:4a:5a:9b: 95:19:a1:d7:38:bc:b4:a1:59:a5:9b:d7:6c:92:41: f6:70:fa:38:ac:0b:8c:27:f5:aa:36:c0:c7:3f:28: 32:f1:d4:e5:3e:03:0d:4f:cf:c9:ce:a0:c6:68:a8: a7:8a:d5:f1:23:a5:9c:d6:dd:38:21:57:a6:6d:50: 51:f0:a5:8a:eb:c8:bc:67:2a:bc:0e:a8:17:c9:5e: e4:ae:db:3e:2c:50:55:24:2f:bc:e8:70:96:10:c2: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2A:46:63:19:17:73:F2:C9:B7:81:A0:C6:18:A2:46:FE:AB:E5:8A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6863d6e5-517f-4f3b-8358-e9965de82700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 36:03:01:1a:7a:09:0b:89:e5:52:8d:44:6a:82:33:1e:f9:a4: 8c:f5:f2:19:e8:4e:17:1e:dd:46:5a:46:4e:c2:a2:78:19:cf: 82:ae:40:ce:f4:1d:bc:4f:69:10:62:05:89:33:91:45:25:21: 16:bf:35:bb:70:76:e8:e3:51:79:c3:0e:31:f9:3b:28:a1:a4: d6:ee:50:4b:7e:ed:3d:4f:26:4a:0e:08:8c:73:26:53:8f:34: 41:20:f6:8f:e0:79:7b:5e:10:c1:21:05:69:d2:96:7f:65:a8: 9c:d3:f0:eb:72:32:05:97:f1:d9:48:6c:f3:bf:a2:ba:81:a6: f6:3f:a4:ab:4a:10:90:91:f7:87:e4:aa:b6:b3:8e:7f:a3:9a: 5f:a1:94:91:80:3c:3c:52:b7:78:e1:2e:1b:75:6f:ac:9c:59: 75:6f:e1:4b:4a:e1:e4:b4:54:52:29:84:1a:9c:fb:70:ba:b2: db:a8:98:89:a3:f2:9f:ad:7b:14:07:03:36:17:7b:b0:21:59: bc:eb:b1:c8:b0:6a:2d:ec:7e:68:fd:14:11:95:75:a5:e7:37: fc:25:e4:c8:25:23:b7:77:92:a3:09:d0:06:f5:c7:14:0a:35: 01:60:f1:13:8f:21:b5:ae:9c:a9:f6:b8:d5:4e:02:3d:92:33: 91:59:95:b7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYFILkTIzFofhXRC2sBsj2NVhSGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDAxMVoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAZjBiNTcyNjVmMGMwNzJjM2E2MDBi MWI0OGQ3ZmM5ZWM1NjgzZWQxYmZmYjZlYzk4NTY3ZjBhMDEyZWJiNGMzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZXr/z95zTHWswYkMz+EMfNcV0uD bG/J1bW3SqpsscbgBGFjU//79J+/wJnwFOA0iOjz4bY5Whnhewsqb+ipE6zDmgRK DVI4SUhqI9yDYNtDpvRQ6daAD/3q9BWWcV011rS++E0F2+sIMMs2iBqNFBdMi6zm pMksRrpepzI8sZtinAgI802/CXNSE5VTGZw1uIiDLmd0++/OFsNgHdhEDSZKWpuV GaHXOLy0oVmlm9dskkH2cPo4rAuMJ/WqNsDHPygy8dTlPgMNT8/JzqDGaKinitXx I6Wc1t04IVembVBR8KWK68i8Zyq8DqgXyV7krts+LFBVJC+86HCWEMIz2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLkqRmMZF3PyybeBoMYYokb+q+WKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY4NjNkNmU1LTUxN2YtNGYzYi04MzU4LWU5OTY1ZGU4MjcwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8sjAMA0GCSqGSIb3DQEBCwUAA4IBAQA2AwEaegkLieVSjURq gjMe+aSM9fIZ6E4XHt1GWkZOwqJ4Gc+CrkDO9B28T2kQYgWJM5FFJSEWvzW7cHbo 41F5ww4x+TsooaTW7lBLfu09TyZKDgiMcyZTjzRBIPaP4Hl7XhDBIQVp0pZ/Zaic 0/DrcjIFl/HZSGzzv6K6gab2P6SrShCQkfeH5Kq2s45/o5pfoZSRgDw8Urd44S4b dW+snFl1b+FLSuHktFRSKYQanPtwurLbqJiJo/KfrXsUBwM2F3uwIVm867HIsGot 7H5o/RQRlXWl5zf8JeTIJSO3d5KjCdAG9ccUCjUBYPETjyG1rpyp9rjVTgI9kjOR WZW3 -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:38 2025 by rpki-client