This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0024570-5975-46f5-95db-849fb927818f.roa File: a0024570-5975-46f5-95db-849fb927818f.roa (raw, json) Hash identifier: BWlK3ZtcyNQI1tStnJT71FFYMan6xIKQSp2cFHUGdSA= Subject key identifier: 87:04:14:1C:05:DF:2B:E0:B5:F7:D3:68:D9:E1:90:05:E1:64:EA:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A4D5CC6ADBD709375081F88179742A4747D1C43 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0024570-5975-46f5-95db-849fb927818f.roa Signing time: Wed 03 Dec 2025 00:10:12 +0000 ROA not before: Wed 03 Dec 2025 00:10:12 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4d:5c:c6:ad:bd:70:93:75:08:1f:88:17:97:42:a4:74:7d:1c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 3 00:10:12 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=bd25e9199bd58a96247d700244d781ec2a197aedc8cd04c58ea66413a80cd078, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:d0:d4:1f:59:2b:6b:78:b0:54:04:73:68: eb:9e:84:2e:b1:55:7d:0a:7c:f0:d2:d8:43:52:18: 19:16:fb:01:a1:d4:86:38:a8:39:21:0f:77:2f:ac: 68:86:89:39:2d:31:b6:4b:99:ac:6f:6c:fd:46:d6: 0d:e3:f5:05:86:ec:8f:4d:97:58:8d:0b:f3:e0:f1: 9c:12:da:14:53:69:7f:05:b9:cd:6c:cf:ee:82:3f: 69:a6:e5:e6:3a:f9:bd:a0:37:63:c3:73:2b:97:7b: e5:92:80:c9:b5:3a:64:d8:48:d0:f8:01:f2:50:d8: af:8a:ec:67:ca:bc:5a:ce:16:94:cd:82:43:29:25: be:e5:e8:6d:87:2f:55:b3:27:a1:86:bd:79:48:75: 78:e9:d6:09:88:b6:78:39:f0:f0:29:1e:c1:14:fa: 6d:a2:18:5b:68:2d:2b:66:55:02:c9:1f:94:57:6a: e9:be:7b:a7:bf:69:dd:89:57:8c:18:f6:93:0c:75: 6b:5e:a4:61:64:7e:98:49:2c:c0:a8:88:92:09:f5: 97:20:6c:37:d3:43:f6:09:b8:f5:9c:8b:52:61:f9: cf:3a:48:bb:31:a3:04:ea:86:04:f0:3d:45:43:54: 81:68:26:3d:47:ca:ad:21:38:c8:06:f0:72:93:ea: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:04:14:1C:05:DF:2B:E0:B5:F7:D3:68:D9:E1:90:05:E1:64:EA:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0024570-5975-46f5-95db-849fb927818f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c040::/48 Signature Algorithm: sha256WithRSAEncryption 14:25:4c:00:92:c9:72:cd:18:b5:e7:17:e0:34:2d:70:f4:e6: b2:31:36:06:6e:13:f5:04:20:51:bd:0d:88:d8:7b:91:0d:37: a0:bb:3f:f4:88:03:9b:30:67:4b:63:44:9b:aa:a3:f6:97:76: fd:ab:d8:1c:ee:2a:5e:9b:e2:bb:9f:80:f1:78:bb:48:b8:8f: d4:49:7e:6c:35:d4:ef:92:c6:80:55:0e:09:dd:02:f0:7e:09: 65:58:97:37:6f:e1:04:40:d9:f2:e5:23:5a:e7:6d:28:d6:93: bb:c6:c4:7d:5b:4e:e3:af:13:12:86:43:2f:3e:ce:b0:f5:aa: b5:fa:b7:f7:bd:e9:d6:9f:0d:7c:9c:23:13:88:3d:11:62:dc: 78:82:c8:de:37:86:c8:8c:c0:a6:a3:b4:41:f7:90:ba:f6:89: f0:2b:d5:28:63:a0:1c:86:81:50:ce:a3:c6:2d:f2:df:f4:ea: 5a:76:30:82:ea:2f:9b:35:5c:ae:45:a4:11:47:c9:5d:1e:c4: f4:01:4a:83:cf:11:b6:31:3d:be:f0:f8:ff:05:f7:b0:c1:96: 49:c9:29:b8:d6:b9:0f:c4:cf:be:0e:df:b8:3e:57:2a:f7:85: 6b:f5:21:f0:f7:42:1a:db:64:12:81:9c:a6:64:41:cb:2b:5f: 48:96:dc:33 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOk1cxq29cJN1CB+IF5dCpHR9HEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMTAxMloX DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNAYmQyNWU5MTk5YmQ1OGE5NjI0N2Q3 MDAyNDRkNzgxZWMyYTE5N2FlZGM4Y2QwNGM1OGVhNjY0MTNhODBjZDA3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgHQ1B9ZK2t4sFQEc2jrnoQusVV9 Cnzw0thDUhgZFvsBodSGOKg5IQ93L6xohok5LTG2S5msb2z9RtYN4/UFhuyPTZdY jQvz4PGcEtoUU2l/BbnNbM/ugj9ppuXmOvm9oDdjw3Mrl3vlkoDJtTpk2EjQ+AHy UNiviuxnyrxazhaUzYJDKSW+5ehthy9Vsyehhr15SHV46dYJiLZ4OfDwKR7BFPpt ohhbaC0rZlUCyR+UV2rpvnunv2ndiVeMGPaTDHVrXqRhZH6YSSzAqIiSCfWXIGw3 00P2Cbj1nItSYfnPOki7MaME6oYE8D1FQ1SBaCY9R8qtITjIBvByk+p3xwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIcEFBwF3yvgtffTaNnhkAXhZOpMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EwMDI0NTcwLTU5NzUtNDZmNS05NWRiLTg0OWZiOTI3ODE4Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMBAMA0GCSqGSIb3DQEBCwUAA4IBAQAUJUwAkslyzRi15xfg NC1w9OayMTYGbhP1BCBRvQ2I2HuRDTeguz/0iAObMGdLY0SbqqP2l3b9q9gc7ipe m+K7n4DxeLtIuI/USX5sNdTvksaAVQ4J3QLwfgllWJc3b+EEQNny5SNa520o1pO7 xsR9W07jrxMShkMvPs6w9aq1+rf3venWnw18nCMTiD0RYtx4gsjeN4bIjMCmo7RB 95C69onwK9UoY6AchoFQzqPGLfLf9OpadjCC6i+bNVyuRaQRR8ldHsT0AUqDzxG2 MT2+8Pj/BfewwZZJySm41rkPxM++Dt+4Plcq94Vr9SHw90Ia22QSgZymZEHLK19I ltwz -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:19 2025 by rpki-client