This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa File: 86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa (raw, json) Hash identifier: cnj/CYOh/j8m4bBkOtPhhhEsb2C+0jaIYpPgskHBcvg= Subject key identifier: 34:0B:0A:ED:6B:F3:B3:A9:AF:8D:4B:0F:30:0E:FD:60:FF:7B:90:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EAD44731A1B5C2926AA9FC812E98F019E3EE724 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa Signing time: Thu 27 Nov 2025 00:00:36 +0000 ROA not before: Thu 27 Nov 2025 00:00:36 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ad:44:73:1a:1b:5c:29:26:aa:9f:c8:12:e9:8f:01:9e:3e:e7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 27 00:00:36 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=34a642c28efeb7be05324cee3cb600a0b145271384cc8e788a57ae99f823b467, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:bb:aa:dd:84:1a:59:b0:30:cd:3b:a7:d2: 14:90:5e:13:68:26:08:86:d0:39:97:bb:72:66:2b: b7:7c:4d:92:67:1b:97:91:50:a4:64:f0:3c:d4:5b: d6:81:fa:8f:f4:eb:40:11:d8:82:d3:2b:2a:4f:83: 8e:58:64:b8:56:a8:5a:f2:08:79:48:9a:94:03:c1: e6:a2:e2:f9:4f:a7:47:77:27:45:95:3a:98:8c:7b: 09:0b:94:87:7a:84:be:ef:b8:b1:3c:5d:ab:74:be: 65:e8:63:49:18:5a:73:81:e3:44:e7:8a:b0:dc:82: 96:13:c8:00:c4:d7:cd:01:b6:3a:4d:d0:d1:5b:49: c7:e7:34:05:92:c9:54:8e:06:2f:ab:18:9e:ca:f8: ee:70:5b:19:53:e0:b4:7f:54:f2:b2:32:b3:3d:1d: e3:e9:a5:d5:1b:a5:19:47:83:99:8b:df:91:c0:06: b7:d1:74:57:ad:21:7a:e6:66:dd:18:50:9c:f7:b0: 80:15:43:61:10:6d:03:2e:f8:e9:de:06:aa:dc:97: 61:a2:69:a1:38:0c:b5:e7:a6:df:2b:37:a4:c6:1d: d0:c5:ef:e2:1e:f9:ea:ba:d4:8e:e9:1a:d1:28:50: fd:86:fa:c8:2b:c5:c0:68:ea:e8:90:3c:c0:6f:24: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:0A:ED:6B:F3:B3:A9:AF:8D:4B:0F:30:0E:FD:60:FF:7B:90:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:1000::/40 Signature Algorithm: sha256WithRSAEncryption 1a:94:6b:86:95:45:39:44:14:f0:87:b3:88:20:ea:19:b9:93: 76:8f:8a:f7:dc:7e:c4:19:a0:8b:82:91:75:03:13:82:88:e8: 88:df:ab:4c:2a:11:4d:42:b8:da:44:4d:35:80:cf:ac:55:0a: f5:1b:bc:a4:6b:0d:c3:11:5a:7e:65:8e:c2:8b:9a:33:df:da: e3:c0:ba:9f:95:df:65:f1:2d:86:97:53:ae:d9:fe:69:c2:57: d4:5a:af:a9:1f:60:31:7e:18:8a:17:46:07:3a:f8:4b:89:ac: 03:ff:3d:ca:71:e2:9f:77:85:64:21:4d:f6:03:e6:fe:2b:e2: 96:5b:e1:3f:73:6d:18:65:2f:c6:5b:92:22:a5:d3:58:a4:58: f4:c1:53:23:0f:95:5d:90:f0:2c:c2:ed:15:ca:fc:6a:ae:d8: f8:7e:3f:5e:26:d1:23:e5:b6:12:8e:3e:e2:96:0a:84:11:8a: 13:62:b5:3c:cb:80:88:cb:ff:dd:15:53:39:e6:a9:01:bf:f3: a1:0e:ad:03:25:d1:97:d9:f4:37:7c:a1:2d:b1:e7:f9:c5:a7: 69:0d:33:15:dc:92:82:49:17:0d:8c:2a:5e:5c:01:ca:a3:3d: 42:96:fc:15:2e:7c:be:42:50:20:e8:6e:ca:c9:94:8e:3e:1f: ba:47:81:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDq1EcxobXCkmqp/IEumPAZ4+5yQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNzAwMDAzNloX DTI2MDIyNTIzNTk1OVowejFJMEcGA1UEBRNAMzRhNjQyYzI4ZWZlYjdiZTA1MzI0 Y2VlM2NiNjAwYTBiMTQ1MjcxMzg0Y2M4ZTc4OGE1N2FlOTlmODIzYjQ2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwim7qt2EGlmwMM07p9IUkF4TaCYI htA5l7tyZiu3fE2SZxuXkVCkZPA81FvWgfqP9OtAEdiC0ysqT4OOWGS4Vqha8gh5 SJqUA8HmouL5T6dHdydFlTqYjHsJC5SHeoS+77ixPF2rdL5l6GNJGFpzgeNE54qw 3IKWE8gAxNfNAbY6TdDRW0nH5zQFkslUjgYvqxieyvjucFsZU+C0f1TysjKzPR3j 6aXVG6UZR4OZi9+RwAa30XRXrSF65mbdGFCc97CAFUNhEG0DLvjp3gaq3Jdhommh OAy156bfKzekxh3Qxe/iHvnqutSO6RrRKFD9hvrIK8XAaOrokDzAbySiXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDQLCu1r87Opr41LDzAO/WD/e5C3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2ZWI4OGZmLTc4ZjQtNGYwOC1hMWZhLWIyOGZjM2JmMDVlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYBAwDQYJKoZIhvcNAQELBQADggEBABqUa4aVRTlEFPCHs4gg 6hm5k3aPivfcfsQZoIuCkXUDE4KI6Ijfq0wqEU1CuNpETTWAz6xVCvUbvKRrDcMR Wn5ljsKLmjPf2uPAup+V32XxLYaXU67Z/mnCV9Rar6kfYDF+GIoXRgc6+EuJrAP/ Pcpx4p93hWQhTfYD5v4r4pZb4T9zbRhlL8ZbkiKl01ikWPTBUyMPlV2Q8CzC7RXK /Gqu2Ph+P14m0SPlthKOPuKWCoQRihNitTzLgIjL/90VUznmqQG/86EOrQMl0ZfZ 9Dd8oS2x5/nFp2kNMxXckoJJFw2MKl5cAcqjPUKW/BUufL5CUCDobsrJlI4+H7pH gZw= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:12 2025 by rpki-client