This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa File: 830000fc-9d46-461c-8155-e409ef5fadcc.roa (raw, json) Hash identifier: Mvb6CI/7oJdZyPXTO+b0iHRlV7WAmp596MqBLEVllTA= Subject key identifier: 2A:F2:75:5E:A7:C2:A2:39:FB:14:87:47:FD:D5:DC:7D:8C:87:F8:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02CC7F57D2E31AFE7AE428CD803994072668F22C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa Signing time: Sun 30 Nov 2025 00:01:38 +0000 ROA not before: Sun 30 Nov 2025 00:01:38 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cc:7f:57:d2:e3:1a:fe:7a:e4:28:cd:80:39:94:07:26:68:f2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:01:38 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=53fdcaaf8795ad7b0ea2bdbf99c81622a26ecdd6bf228bf7844e809ea717eebb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:ba:b8:a5:bb:a9:18:2e:96:07:d3:e7:2c: 06:82:ae:dd:19:96:c8:4f:f4:13:66:38:37:0f:88: 0e:c6:90:3d:05:a8:4c:f7:e7:3b:7a:97:a9:9c:f1: e7:ba:ff:1f:db:96:a0:85:6a:25:89:d4:87:e6:23: 1f:85:39:ec:fd:33:79:b6:f8:c9:84:e1:04:a5:43: 79:b3:d7:e6:f0:24:7d:a3:58:54:3a:9b:64:dd:f0: 2e:86:4b:73:1d:17:59:59:ac:68:e0:ae:e0:b3:1c: 14:36:fc:34:5e:a4:9a:f7:64:1d:d6:3d:f2:bc:7c: 7e:71:06:81:d6:22:11:e3:01:f8:ab:34:a2:d1:bc: d4:b7:0b:fc:6d:6f:05:f7:b8:29:04:0c:ca:39:4d: f0:f6:47:d1:cf:85:33:93:41:5d:77:bb:60:e6:94: 4f:75:38:fb:30:be:63:b5:4f:59:cd:bb:f8:f9:f5: 92:77:25:09:62:1c:d5:05:f7:cf:0c:8b:13:fa:50: 61:e1:c2:5e:1c:74:10:09:2f:b3:f2:00:24:74:29: 04:2d:0e:be:5d:86:43:58:2f:4b:07:76:35:e2:d9: 6e:a5:77:4c:b3:65:65:83:19:63:43:73:eb:09:df: 5d:bd:f6:b5:bf:bc:74:f9:04:37:23:21:47:2f:07: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:75:5E:A7:C2:A2:39:FB:14:87:47:FD:D5:DC:7D:8C:87:F8:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830000fc-9d46-461c-8155-e409ef5fadcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f080::/48 Signature Algorithm: sha256WithRSAEncryption 33:57:74:69:43:14:22:94:91:8e:bd:fb:b9:e0:a0:f5:a7:ff: 04:b0:cb:45:c3:c1:72:45:1b:5c:af:60:0e:44:c5:7b:5e:1b: 29:2c:56:3b:c3:e8:80:4b:8e:a4:a3:00:29:1f:3a:2a:45:cb: 45:72:09:ea:83:70:e0:ee:d0:4b:37:57:a6:75:84:ac:a6:8a: 0e:5d:0a:da:e2:79:19:80:00:8b:83:7b:f5:5c:ac:aa:76:84: f8:ac:d8:6d:cd:30:78:0c:01:de:a0:71:8b:dd:e1:80:e9:75: b0:b7:11:1c:61:d4:37:2c:92:72:34:2d:a2:3a:68:cf:3c:68: a2:7c:d3:bd:38:8e:5a:98:13:f5:96:23:ff:67:d1:5b:48:db: 14:1d:8a:82:23:30:ee:6a:95:73:4d:d5:a8:fa:96:10:c4:0f: 7b:e8:5d:cf:04:2d:dd:92:4e:44:58:ad:59:e7:f6:10:2c:49: 6b:9e:be:91:b1:44:30:94:1c:75:56:04:fb:ad:2a:11:a1:aa: 78:b6:c9:f1:7d:bd:39:3d:bb:93:97:6f:22:43:ac:c9:d3:ad: 2b:41:e8:60:dd:7b:59:1e:0b:98:4e:53:b7:f1:d3:e5:89:de: f0:74:89:04:5d:c5:40:0a:24:86:ef:79:f9:cb:0c:7c:f4:c3: 6b:85:59:12 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAsx/V9LjGv565CjNgDmUByZo8iwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEzMDAwMDEzOFoX DTI2MDIyODIzNTk1OVowejFJMEcGA1UEBRNANTNmZGNhYWY4Nzk1YWQ3YjBlYTJi ZGJmOTljODE2MjJhMjZlY2RkNmJmMjI4YmY3ODQ0ZTgwOWVhNzE3ZWViYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqW6uKW7qRgulgfT5ywGgq7dGZbI T/QTZjg3D4gOxpA9BahM9+c7epepnPHnuv8f25aghWolidSH5iMfhTns/TN5tvjJ hOEEpUN5s9fm8CR9o1hUOptk3fAuhktzHRdZWaxo4K7gsxwUNvw0XqSa92Qd1j3y vHx+cQaB1iIR4wH4qzSi0bzUtwv8bW8F97gpBAzKOU3w9kfRz4Uzk0Fdd7tg5pRP dTj7ML5jtU9Zzbv4+fWSdyUJYhzVBffPDIsT+lBh4cJeHHQQCS+z8gAkdCkELQ6+ XYZDWC9LB3Y14tlupXdMs2VlgxljQ3PrCd9dvfa1v7x0+QQ3IyFHLwfW8wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCrydV6nwqI5+xSHR/3V3H2Mh/i+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMDAwMGZjLTlkNDYtNDYxYy04MTU1LWU0MDllZjVmYWRjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYfCAMA0GCSqGSIb3DQEBCwUAA4IBAQAzV3RpQxQilJGOvfu5 4KD1p/8EsMtFw8FyRRtcr2AORMV7XhspLFY7w+iAS46kowApHzoqRctFcgnqg3Dg 7tBLN1emdYSspooOXQra4nkZgACLg3v1XKyqdoT4rNhtzTB4DAHeoHGL3eGA6XWw txEcYdQ3LJJyNC2iOmjPPGiifNO9OI5amBP1liP/Z9FbSNsUHYqCIzDuapVzTdWo +pYQxA976F3PBC3dkk5EWK1Z5/YQLElrnr6RsUQwlBx1VgT7rSoRoap4tsnxfb05 PbuTl28iQ6zJ060rQehg3XtZHguYTlO38dPlid7wdIkEXcVACiSG73n5ywx89MNr hVkS -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:00 2025 by rpki-client