This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa File: 80f286b3-4a79-4e70-a311-4b9c3c54436f.roa (raw, json) Hash identifier: /JMtbUa+ajMf1QR1wMFtSNMNjfaBQcG9lHqcmOqskLA= Subject key identifier: E8:57:91:82:C0:2A:02:AC:6C:65:93:28:EB:E8:0C:78:08:2C:E4:36 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 417149B907CA474A3AAAA527B1DE50BB22047EC5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa Signing time: Thu 04 Dec 2025 00:11:03 +0000 ROA not before: Thu 04 Dec 2025 00:11:03 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:71:49:b9:07:ca:47:4a:3a:aa:a5:27:b1:de:50:bb:22:04:7e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:11:03 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=6f06cc86c7267973989103baabe0b3dfd8f3a75eeb41e196dae70b58048d12ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:43:c2:01:e0:75:bd:62:40:4a:2f:9f:f1: 96:be:96:dc:c7:7d:03:a7:ff:f8:7a:d0:ef:a1:ff: 1e:4f:8c:5f:11:18:7a:ad:8c:2b:be:f8:32:94:45: 0d:9e:2c:69:34:9b:fb:75:cb:be:59:05:48:7e:a8: af:79:05:76:76:a8:bc:9c:df:2b:ee:1b:18:ea:2d: 7f:3b:6b:4b:5d:3e:f4:b4:63:37:ee:17:11:20:c3: 58:1c:fa:aa:16:0a:76:c9:4a:f7:2f:2b:d1:73:1f: 59:b3:74:20:f3:51:9f:4a:96:0f:ff:de:5d:2b:c8: 39:1f:0e:e0:0f:6c:34:59:72:07:4a:1d:27:40:bf: 30:34:61:1c:90:3f:eb:7e:fb:33:7a:ba:bc:34:1a: 1a:a2:fe:50:cc:5e:92:76:a1:7a:45:fe:47:7c:62: 4a:e3:5a:0e:a7:45:75:be:e5:d0:ba:e3:f9:04:b7: 2d:f0:cd:94:95:f4:8a:1a:d9:1c:cd:18:1e:09:62: 90:f7:cb:3d:df:a2:d2:e9:26:c0:62:30:7f:79:b9: 94:0b:a6:b0:45:f1:1a:f1:33:54:85:06:a6:73:0d: cf:d8:1f:d4:0e:70:b3:40:73:92:e5:b9:3c:7b:ca: 02:84:09:ef:9a:32:ff:04:ae:38:fd:b0:5e:29:ba: 9a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:57:91:82:C0:2A:02:AC:6C:65:93:28:EB:E8:0C:78:08:2C:E4:36 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80f286b3-4a79-4e70-a311-4b9c3c54436f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:400::/38 Signature Algorithm: sha256WithRSAEncryption 18:42:82:82:93:7a:8a:f8:0b:cd:5e:99:67:7f:e9:2a:b3:16: 6a:3a:28:40:55:1a:cc:3b:c8:63:d4:20:a8:00:ec:28:b2:fe: 73:3e:d6:a4:9a:0e:bf:c9:47:ed:03:69:05:b5:b9:82:05:4b: 2f:b4:26:15:b5:68:2d:fc:ab:32:d2:f9:5c:71:3c:76:ad:e0: 5d:83:f0:84:f5:67:e7:19:14:fc:65:e1:8f:ac:b9:a3:b6:74: 3c:d7:a5:3d:2d:bd:4d:b1:52:01:6c:39:75:aa:ea:af:f3:32: 56:46:4f:1a:87:31:b2:b7:6d:4b:d7:4e:fa:69:db:2a:e5:30: 23:42:e8:9f:86:50:d2:17:2b:a6:fd:8a:dc:bb:40:1f:11:61: 16:2c:94:f8:15:d5:24:fd:0b:5f:ec:fc:3f:32:6f:c0:ee:39: 80:c0:f0:c3:47:ef:69:e6:18:8f:7a:d0:67:90:0c:24:cd:9b: 78:8b:a8:02:62:70:dc:5e:4c:c6:f6:7c:be:c9:17:da:e3:a9: 8c:a9:12:db:c6:63:bd:35:e9:a4:cb:67:93:9d:7c:20:a2:15: 12:ad:68:4d:54:00:94:98:f6:8c:51:89:b8:47:31:a6:7f:ed: 2f:b3:07:6e:4a:6c:c8:c9:ff:b0:7e:10:0f:ac:05:bb:10:7d: 9e:cc:50:60 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQXFJuQfKR0o6qqUnsd5QuyIEfsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMTEwM1oX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANmYwNmNjODZjNzI2Nzk3Mzk4OTEw M2JhYWJlMGIzZGZkOGYzYTc1ZWViNDFlMTk2ZGFlNzBiNTgwNDhkMTJmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UVDwgHgdb1iQEovn/GWvpbcx30D p//4etDvof8eT4xfERh6rYwrvvgylEUNnixpNJv7dcu+WQVIfqiveQV2dqi8nN8r 7hsY6i1/O2tLXT70tGM37hcRIMNYHPqqFgp2yUr3LyvRcx9Zs3Qg81GfSpYP/95d K8g5Hw7gD2w0WXIHSh0nQL8wNGEckD/rfvszerq8NBoaov5QzF6SdqF6Rf5HfGJK 41oOp0V1vuXQuuP5BLct8M2UlfSKGtkczRgeCWKQ98s936LS6SbAYjB/ebmUC6aw RfEa8TNUhQamcw3P2B/UDnCzQHOS5bk8e8oChAnvmjL/BK44/bBeKbqafwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOhXkYLAKgKsbGWTKOvoDHgILOQ2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwZjI4NmIzLTRhNzktNGU3MC1hMzExLTRiOWMzYzU0NDM2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFAQwDQYJKoZIhvcNAQELBQADggEBABhCgoKTeor4C81emWd/ 6SqzFmo6KEBVGsw7yGPUIKgA7Ciy/nM+1qSaDr/JR+0DaQW1uYIFSy+0JhW1aC38 qzLS+VxxPHat4F2D8IT1Z+cZFPxl4Y+suaO2dDzXpT0tvU2xUgFsOXWq6q/zMlZG TxqHMbK3bUvXTvpp2yrlMCNC6J+GUNIXK6b9ity7QB8RYRYslPgV1ST9C1/s/D8y b8DuOYDA8MNH72nmGI960GeQDCTNm3iLqAJicNxeTMb2fL7JF9rjqYypEtvGY701 6aTLZ5OdfCCiFRKtaE1UAJSY9oxRibhHMaZ/7S+zB25KbMjJ/7B+EA+sBbsQfZ7M UGA= -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:21 2025 by rpki-client