This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa File: 7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa (raw, json) Hash identifier: LBgmoW4l9zmzDpjQRTuCAPDycNJ6iY0Z1xSTHXWbLkI= Subject key identifier: 51:85:A1:C4:8B:8B:50:86:AA:D5:D4:70:D5:A9:D6:F7:32:66:7C:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1CB0AF566CC722C6B12741697BD227C576AD1133 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa Signing time: Wed 03 Dec 2025 00:10:09 +0000 ROA not before: Wed 03 Dec 2025 00:10:09 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b0:af:56:6c:c7:22:c6:b1:27:41:69:7b:d2:27:c5:76:ad:11:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 3 00:10:09 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=d9ae73528ba6f49abe7af7d27ab43933faf605ca1dea5a5aabe5acf46468d127, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:f7:47:40:57:5e:a7:2e:10:0c:62:0b:12: 2f:33:10:22:95:01:34:92:7c:01:d4:51:f7:3f:1f: 79:b6:73:57:b1:b9:c2:65:da:62:d0:7f:ae:06:18: 3f:26:71:15:2b:6a:cf:15:bc:72:11:ba:b2:1b:78: d3:73:01:c6:59:b6:f5:96:6a:c6:27:47:f1:6f:aa: ec:71:da:30:56:03:67:71:0a:e4:72:7a:59:97:8a: 98:e8:4d:09:78:be:41:e5:ce:20:ba:2c:3e:f5:65: 1f:00:03:c4:28:e3:52:1b:3c:79:1e:b8:44:41:4f: a0:d4:c3:36:f1:31:29:78:7b:45:4e:45:0a:a9:79: b9:e9:65:a8:e7:62:e5:d3:ca:cf:4c:74:ed:7c:16: 45:91:89:9b:dd:07:58:ea:06:41:e2:b5:dc:4a:03: 59:7c:15:41:bc:1f:41:f1:5f:4b:92:f5:69:2f:19: 32:f2:25:ff:71:71:74:b0:14:e8:ea:98:14:30:ae: 11:5b:30:44:2e:93:28:45:d3:12:c7:7f:ea:6c:fb: b3:22:af:d3:f3:fd:85:a9:21:f6:b5:80:30:b5:25: 4d:e0:96:21:94:f3:c5:9f:70:c5:52:52:88:97:ce: 50:0b:84:65:e1:2e:8d:90:16:6d:22:dd:00:13:99: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:85:A1:C4:8B:8B:50:86:AA:D5:D4:70:D5:A9:D6:F7:32:66:7C:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1080::/48 Signature Algorithm: sha256WithRSAEncryption 8c:cb:7b:c3:2e:8f:39:07:7e:47:b9:49:ab:b0:20:4f:b6:ff: 1b:a1:52:5a:9e:cc:bc:c7:7c:95:ec:76:f1:eb:d5:5e:7f:df: 8a:98:eb:f1:c9:30:b8:d9:03:a0:d8:65:ba:1a:55:6c:3d:b5: 0c:90:4d:4f:20:2f:c9:cd:17:43:5d:c5:12:b6:40:68:a0:8c: 1a:ca:75:a7:b0:e7:8f:09:d9:ac:38:4a:cd:aa:58:5b:46:81: 3f:5a:e2:49:e3:64:a8:f9:a0:53:38:ce:d7:e0:83:f0:98:1c: 18:e5:5d:97:71:cf:ba:32:7e:2f:8b:20:ad:b2:ea:5a:ad:7a: 8b:b2:00:80:2e:48:db:1a:93:9d:31:cc:bd:0e:f8:25:2a:c1: 6a:93:1b:50:9c:ce:2d:68:78:0b:54:68:d8:e0:a0:58:52:58: 32:22:1e:00:2f:19:64:53:cd:05:04:7b:2c:ed:7b:86:ee:c7: 56:dc:b0:b6:08:06:6b:d4:78:13:3d:fd:3a:36:f1:61:66:f4: 62:1e:53:9e:42:bf:d8:48:18:27:36:4c:f4:5a:be:80:57:c1: a4:e6:38:5e:28:7c:e8:fd:fe:a7:c9:08:a1:44:55:5f:03:1a: cf:45:1f:05:9a:0b:77:3c:c7:9c:12:00:c9:e4:f4:81:b3:88: 81:4b:62:43 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHLCvVmzHIsaxJ0Fpe9InxXatETMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMTAwOVoX DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNAZDlhZTczNTI4YmE2ZjQ5YWJlN2Fm N2QyN2FiNDM5MzNmYWY2MDVjYTFkZWE1YTVhYWJlNWFjZjQ2NDY4ZDEyNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOX3R0BXXqcuEAxiCxIvMxAilQE0 knwB1FH3Px95tnNXsbnCZdpi0H+uBhg/JnEVK2rPFbxyEbqyG3jTcwHGWbb1lmrG J0fxb6rscdowVgNncQrkcnpZl4qY6E0JeL5B5c4guiw+9WUfAAPEKONSGzx5HrhE QU+g1MM28TEpeHtFTkUKqXm56WWo52Ll08rPTHTtfBZFkYmb3QdY6gZB4rXcSgNZ fBVBvB9B8V9LkvVpLxky8iX/cXF0sBTo6pgUMK4RWzBELpMoRdMSx3/qbPuzIq/T 8/2FqSH2tYAwtSVN4JYhlPPFn3DFUlKIl85QC4Rl4S6NkBZtIt0AE5mYBwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFGFocSLi1CGqtXUcNWp1vcyZnxlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdhYzUwOGI4LTMzYzMtNDdkNC1hYzhhLTFjMjVmMzdkYjNjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xCAMA0GCSqGSIb3DQEBCwUAA4IBAQCMy3vDLo85B35HuUmr sCBPtv8boVJansy8x3yV7Hbx69Vef9+KmOvxyTC42QOg2GW6GlVsPbUMkE1PIC/J zRdDXcUStkBooIwaynWnsOePCdmsOErNqlhbRoE/WuJJ42So+aBTOM7X4IPwmBwY 5V2Xcc+6Mn4viyCtsuparXqLsgCALkjbGpOdMcy9DvglKsFqkxtQnM4taHgLVGjY 4KBYUlgyIh4ALxlkU80FBHss7XuG7sdW3LC2CAZr1HgTPf06NvFhZvRiHlOeQr/Y SBgnNkz0Wr6AV8Gk5jheKHzo/f6nyQihRFVfAxrPRR8Fmgt3PMecEgDJ5PSBs4iB S2JD -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:17 2025 by rpki-client