This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa File: 996429fb-4fb5-4437-9fbd-29531436e253.roa (raw, json) Hash identifier: EkZGthqS/CzU/xvJPXCK32VTaCmGxVGPFtutvJ108w0= Subject key identifier: E6:37:C8:E3:16:96:30:D7:C3:B2:98:0D:CE:DF:56:31:C9:33:C8:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23CA8C6AE23517EC4D24B496C72140C9CDA9C31D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa Signing time: Thu 04 Dec 2025 00:00:54 +0000 ROA not before: Thu 04 Dec 2025 00:00:54 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ca:8c:6a:e2:35:17:ec:4d:24:b4:96:c7:21:40:c9:cd:a9:c3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:00:54 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=88329384defb618d7825d07bf1ebf9b669cce73e32d103f683d4489e5eb5251e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:c7:fc:bd:2e:c2:bf:83:af:29:5e:f5:a2: 9a:d3:90:b4:61:b3:35:fb:42:99:ea:a2:ae:9b:16: a0:81:07:2d:bb:c3:9c:d4:4c:1e:1a:3d:91:8e:a7: a7:a2:b4:47:f1:7a:c2:f7:48:6e:7d:5c:59:da:00: d6:f5:dc:8e:1e:65:e2:ab:0d:97:4f:45:f6:bf:f3: a4:43:87:a5:2d:3d:a8:8b:2e:22:f1:20:70:11:62: 5a:c2:2a:e1:66:16:51:95:88:cf:90:2f:6a:9f:a9: 74:01:30:b8:d6:cf:ce:1b:c7:c3:bb:14:d1:c9:64: f4:e0:7e:51:28:ac:97:57:af:43:44:40:59:b2:95: 9e:0b:78:c6:67:57:04:b3:2a:dc:4a:84:91:63:83: 09:97:43:5f:dc:6f:7d:2c:59:07:e6:1e:fd:96:33: 99:cb:84:79:c6:52:6b:4c:ce:42:3d:41:90:b7:28: 25:bb:10:f8:f2:11:4a:28:36:72:35:4e:bc:ac:20: 93:36:3b:b4:85:cc:d2:7a:01:2b:d3:4b:fb:7a:3f: e7:1c:da:ff:77:32:8a:7e:d1:4f:f5:4d:08:5f:d3: 2d:55:8e:b2:35:ba:66:38:b0:20:d5:68:8d:53:ab: 30:8a:7e:d5:55:57:7d:b0:9f:22:19:4d:a9:89:eb: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:37:C8:E3:16:96:30:D7:C3:B2:98:0D:CE:DF:56:31:C9:33:C8:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:c000::/40 Signature Algorithm: sha256WithRSAEncryption 07:a8:c0:6a:dc:fc:29:79:d0:5e:a8:90:a7:b2:b4:e0:0b:4d: 17:b6:5c:d4:50:e2:38:78:66:cb:c6:40:d9:d7:24:77:f1:4f: e7:d7:a6:fc:31:14:e8:14:6a:d0:d1:43:51:9d:23:a5:75:58: cc:5f:e0:63:a8:7c:b6:77:54:53:d0:54:86:a8:d3:98:7a:9a: f0:d3:c2:30:55:5a:fe:5c:5a:46:52:d8:68:40:4a:54:f2:47: e8:54:59:e1:1c:aa:e7:fb:31:ad:cf:f0:b3:ec:94:d5:9a:29: 94:ef:b1:01:82:44:27:63:9b:98:c8:0d:8a:de:a1:ee:28:fa: d3:3d:91:90:44:ae:c9:eb:a4:e3:cf:97:c4:ae:a0:d1:6c:a2: bd:4b:70:73:2a:00:a8:7d:38:9e:8d:cb:3c:ba:0a:43:f4:e9: 4f:4d:51:5e:7f:71:6d:4a:03:bf:0e:dd:b8:bd:93:28:0b:2a: 21:43:0b:9f:c5:0c:eb:0b:e4:b8:be:b0:5d:5f:c9:61:59:e9: 5d:d9:06:0d:71:42:5e:ff:45:0c:5f:41:e0:1b:9b:5d:cc:69: ed:b3:89:07:e1:b8:ad:d1:57:cc:37:18:75:da:cc:8a:8e:9a: df:bb:91:5c:06:b2:11:16:4a:a5:9a:33:fb:75:d6:7f:06:d6: d8:b3:e2:a5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUI8qMauI1F+xNJLSWxyFAyc2pwx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMDA1NFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAODgzMjkzODRkZWZiNjE4ZDc4MjVk MDdiZjFlYmY5YjY2OWNjZTczZTMyZDEwM2Y2ODNkNDQ4OWU1ZWI1MjUxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06zH/L0uwr+Dryle9aKa05C0YbM1 +0KZ6qKumxaggQctu8Oc1EweGj2RjqenorRH8XrC90hufVxZ2gDW9dyOHmXiqw2X T0X2v/OkQ4elLT2oiy4i8SBwEWJawirhZhZRlYjPkC9qn6l0ATC41s/OG8fDuxTR yWT04H5RKKyXV69DREBZspWeC3jGZ1cEsyrcSoSRY4MJl0Nf3G99LFkH5h79ljOZ y4R5xlJrTM5CPUGQtygluxD48hFKKDZyNU68rCCTNju0hczSegEr00v7ej/nHNr/ dzKKftFP9U0IX9MtVY6yNbpmOLAg1WiNU6swin7VVVd9sJ8iGU2pievnxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOY3yOMWljDXw7KYDc7fVjHJM8iWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NjQyOWZiLTRmYjUtNDQzNy05ZmJkLTI5NTMxNDM2ZTI1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaucAwDQYJKoZIhvcNAQELBQADggEBAAeowGrc/Cl50F6okKey tOALTRe2XNRQ4jh4ZsvGQNnXJHfxT+fXpvwxFOgUatDRQ1GdI6V1WMxf4GOofLZ3 VFPQVIao05h6mvDTwjBVWv5cWkZS2GhASlTyR+hUWeEcquf7Ma3P8LPslNWaKZTv sQGCRCdjm5jIDYreoe4o+tM9kZBErsnrpOPPl8SuoNFsor1LcHMqAKh9OJ6Nyzy6 CkP06U9NUV5/cW1KA78O3bi9kygLKiFDC5/FDOsL5Li+sF1fyWFZ6V3ZBg1xQl7/ RQxfQeAbm13Mae2ziQfhuK3RV8w3GHXazIqOmt+7kVwGshEWSqWaM/t11n8G1tiz 4qU= -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:15 2025 by rpki-client