This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/817269f2-96fa-459a-a02d-a57162c8041a.roa File: 817269f2-96fa-459a-a02d-a57162c8041a.roa (raw, json) Hash identifier: js6qbyyHzlk5MVUIhdpSvGXdBAhCBFKRaCu+s0H3lrk= Subject key identifier: 4E:DC:4B:89:C3:B5:FC:9F:A6:9B:F8:AA:1F:92:89:2D:F1:20:03:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 097F76CC9BCF0A627CCDEDA5E90EEF786943C4FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/817269f2-96fa-459a-a02d-a57162c8041a.roa Signing time: Thu 04 Dec 2025 00:00:58 +0000 ROA not before: Thu 04 Dec 2025 00:00:58 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7f:76:cc:9b:cf:0a:62:7c:cd:ed:a5:e9:0e:ef:78:69:43:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:00:58 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=fc14ff562181ec79a0d14e8844f6d76865971ee2a6c70dd30204069c96c9ca15, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:c9:fa:fe:3d:5d:b1:4a:32:8f:9d:66:e4: 09:e0:08:45:dc:35:a4:26:03:e3:8a:8e:5e:2a:24: 4c:0d:0b:64:00:29:bc:6f:55:09:1a:36:55:be:0c: a8:53:41:35:28:94:0d:89:c6:01:30:12:3d:42:2e: 9c:f5:c2:fd:79:8b:e8:27:21:3b:e6:b6:de:e3:6e: dd:6f:f8:93:f5:f1:f2:69:8b:6d:2f:5c:ce:bb:35: f9:1a:1f:1a:07:72:8e:bf:34:ba:63:25:05:30:62: d0:8b:b4:ea:0d:0d:cd:16:23:8b:66:eb:0f:da:52: c7:bd:00:d0:25:f9:d9:34:7c:55:1d:58:d8:1b:03: 9b:f5:01:5a:d0:e0:b8:3b:e6:a8:03:bd:cb:15:f3: c6:44:53:db:81:a2:c9:20:2a:d8:c4:f9:27:34:47: 10:47:3c:b4:f5:45:b5:29:ea:87:b7:06:b2:e1:e8: a0:60:66:0a:d1:60:5c:88:0c:b7:f8:91:c6:58:1e: 24:22:bc:39:7d:1e:c3:4d:07:99:93:e5:e6:69:43: ac:a4:47:2a:b0:e5:fb:b1:13:68:9e:53:2b:56:22: 21:fe:3b:0c:54:d5:8c:5a:15:1b:18:37:67:64:df: 13:b1:9e:7b:7d:57:3f:b4:76:bb:e2:88:d1:ee:7f: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DC:4B:89:C3:B5:FC:9F:A6:9B:F8:AA:1F:92:89:2D:F1:20:03:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/817269f2-96fa-459a-a02d-a57162c8041a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e::/32 Signature Algorithm: sha256WithRSAEncryption 8a:0b:34:b6:4d:93:1a:1e:a5:74:48:3d:f4:41:aa:e6:54:60: b3:83:a6:43:fd:8b:f2:c4:67:24:96:21:56:6f:0f:8d:ca:8d: 1b:da:8d:9e:7b:42:97:70:4c:23:ea:e2:9f:4f:cd:a7:4d:21: a5:e6:4d:b5:61:4a:f8:9c:6b:14:b5:56:e9:d8:61:04:58:07: 1e:9e:aa:a2:48:fd:40:52:6e:d0:d0:c8:b2:ca:5a:25:0a:ca: 5f:94:a9:e5:be:4d:dd:a5:15:18:da:23:a0:e3:9c:c2:a9:d3: b1:d3:53:30:96:eb:f4:6c:36:ae:56:be:65:5d:f5:e0:50:4d: 26:ba:13:a9:bc:c9:c1:9d:bb:db:19:cb:44:d5:18:a7:07:08: 8e:d2:7c:b5:df:c8:f6:5b:db:95:49:e3:25:c8:89:45:e7:78: 9f:62:01:51:ec:aa:53:2f:51:df:ce:cf:b2:34:b0:e9:4a:3d: f6:7f:3d:ca:d2:ed:0c:d2:8d:a7:2f:fb:f3:ea:f7:24:30:86: e2:77:77:0c:d0:88:81:2c:aa:df:f1:11:51:56:c2:ce:0a:fb: 3a:96:f8:f2:c3:07:d2:b9:76:c9:cf:f9:e0:fe:79:a7:e8:1d: 57:6f:b0:ff:99:11:5e:d4:91:2c:e3:d2:f1:05:fb:00:2f:18: 85:21:06:7b -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUCX92zJvPCmJ8ze2l6Q7veGlDxPowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDA1OFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAZmMxNGZmNTYyMTgxZWM3OWEwZDE0 ZTg4NDRmNmQ3Njg2NTk3MWVlMmE2YzcwZGQzMDIwNDA2OWM5NmM5Y2ExNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/LJ+v49XbFKMo+dZuQJ4AhF3DWk JgPjio5eKiRMDQtkACm8b1UJGjZVvgyoU0E1KJQNicYBMBI9Qi6c9cL9eYvoJyE7 5rbe427db/iT9fHyaYttL1zOuzX5Gh8aB3KOvzS6YyUFMGLQi7TqDQ3NFiOLZusP 2lLHvQDQJfnZNHxVHVjYGwOb9QFa0OC4O+aoA73LFfPGRFPbgaLJICrYxPknNEcQ Rzy09UW1KeqHtway4eigYGYK0WBciAy3+JHGWB4kIrw5fR7DTQeZk+XmaUOspEcq sOX7sRNonlMrViIh/jsMVNWMWhUbGDdnZN8TsZ57fVc/tHa74ojR7n98QQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFE7cS4nDtfyfppv4qh+SiS3xIAP6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxNzI2OWYyLTk2ZmEtNDU5YS1hMDJkLWE1NzE2MmM4MDQxYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaHjANBgkqhkiG9w0BAQsFAAOCAQEAigs0tk2TGh6ldEg99EGq 5lRgs4OmQ/2L8sRnJJYhVm8PjcqNG9qNnntCl3BMI+rin0/Np00hpeZNtWFK+Jxr FLVW6dhhBFgHHp6qokj9QFJu0NDIsspaJQrKX5Sp5b5N3aUVGNojoOOcwqnTsdNT MJbr9Gw2rla+ZV314FBNJroTqbzJwZ272xnLRNUYpwcIjtJ8td/I9lvblUnjJciJ Red4n2IBUeyqUy9R387PsjSw6Uo99n89ytLtDNKNpy/78+r3JDCG4nd3DNCIgSyq 3/ERUVbCzgr7Opb48sMH0rl2yc/54P55p+gdV2+w/5kRXtSRLOPS8QX7AC8YhSEG ew== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:51 2025 by rpki-client