This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab754b4b-74fd-42c1-8298-33b9dac12e67.roa File: ab754b4b-74fd-42c1-8298-33b9dac12e67.roa (raw, json) Hash identifier: KxAif4VPxPVsj13yEVsgWyvcgBV4RFdvcrvdKlsn1SM= Subject key identifier: 52:9A:EB:57:0D:D3:F1:AC:EC:97:5B:15:C8:1D:CE:25:ED:23:1D:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21CCFB174353795EB3E93C75BD26DECE11691FC6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab754b4b-74fd-42c1-8298-33b9dac12e67.roa Signing time: Wed 26 Nov 2025 00:00:53 +0000 ROA not before: Wed 26 Nov 2025 00:00:53 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cc:fb:17:43:53:79:5e:b3:e9:3c:75:bd:26:de:ce:11:69:1f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:00:53 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=6736f2430867fdc76c8f23ba1e1f9c1625c0324dbcfedf473933d45c8a5114f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9d:0c:f4:e4:d8:57:16:0b:cc:6d:1a:3c:18: 0e:b4:64:cf:dc:75:87:16:6c:18:af:3d:9f:3f:79: 95:4c:34:42:c8:6b:7f:93:c6:05:76:01:f0:b2:e3: ff:02:1e:fd:55:0e:8d:a1:69:22:4d:30:e3:30:c6: 24:6a:ba:1d:9b:7d:45:e7:59:7b:78:11:31:54:32: c9:fa:1c:ff:73:13:28:04:ea:46:08:15:bb:d9:71: 0d:a7:08:25:ab:82:e9:24:e9:d8:fc:84:94:db:a3: 3e:cb:fc:0b:b1:c1:6e:2d:15:55:b7:73:de:72:00: c7:db:47:48:9d:bf:21:7d:0f:ae:6e:f1:5d:8b:61: da:e7:07:2d:1a:8b:63:59:1b:21:3b:7a:c7:2f:3d: da:1f:bc:7c:0c:01:9b:75:c4:cf:f5:96:c3:75:05: 7d:5e:65:4e:9a:3f:16:50:ed:66:2c:80:f7:dc:9b: 33:0c:8f:66:a4:65:71:25:da:4c:e2:d6:a4:64:5c: f3:11:74:b4:dc:20:74:6e:25:95:83:18:60:b1:3c: e8:aa:a3:6c:1b:5b:15:81:e2:5e:d2:db:5e:2d:f7: 76:7d:14:b3:0c:4d:e8:9b:d8:96:ad:15:7b:44:2e: a4:00:76:a8:99:8f:1d:77:88:e8:b7:8f:65:8c:06: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9A:EB:57:0D:D3:F1:AC:EC:97:5B:15:C8:1D:CE:25:ED:23:1D:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab754b4b-74fd-42c1-8298-33b9dac12e67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:c800::/40 Signature Algorithm: sha256WithRSAEncryption ac:db:d0:52:41:4b:f1:70:c6:5d:0d:d7:e8:46:3c:62:cf:88: c1:6d:14:e8:14:94:56:6d:fd:b9:85:39:b6:58:12:c7:48:86: f0:a4:c8:3d:34:8b:7d:ac:08:60:7a:59:f8:f8:07:a1:28:ac: f8:a8:9a:98:55:50:43:7a:22:4b:39:b2:b5:1c:3e:6d:f6:7a: 5c:09:45:98:e0:46:8e:ef:77:b2:a6:ca:4a:0e:5c:d4:06:ba: 95:8f:00:fd:e5:81:50:9d:91:46:93:f7:bd:9b:cd:ca:16:ef: 8c:b1:df:50:19:6d:8e:de:d2:67:da:90:0b:b1:16:f4:f2:ff: 72:d8:b4:a3:2a:2e:1d:33:ec:a0:88:9d:60:e5:1f:e4:87:a3: f2:1f:73:9b:9d:45:d0:67:4f:e0:cb:d5:4d:30:03:e6:76:84: ca:4b:d5:79:70:80:27:52:d1:a1:fe:10:76:7b:31:7d:c0:ec: 25:d9:ea:b7:93:fd:fb:71:5c:9e:80:50:70:a9:8d:e2:34:88: d7:f2:5b:40:b9:b7:93:3e:79:61:f8:df:04:52:5a:f7:c0:42: 69:ed:56:dc:10:b5:90:ac:13:93:c7:9f:20:0b:23:ef:d3:df: 96:a4:eb:41:fc:d5:65:8d:7d:1f:03:18:15:ca:ac:66:60:a3: fb:af:f7:5e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIcz7F0NTeV6z6Tx1vSbezhFpH8YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDA1M1oX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNANjczNmYyNDMwODY3ZmRjNzZjOGYy M2JhMWUxZjljMTYyNWMwMzI0ZGJjZmVkZjQ3MzkzM2Q0NWM4YTUxMTRmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9J0M9OTYVxYLzG0aPBgOtGTP3HWH FmwYrz2fP3mVTDRCyGt/k8YFdgHwsuP/Ah79VQ6NoWkiTTDjMMYkarodm31F51l7 eBExVDLJ+hz/cxMoBOpGCBW72XENpwglq4LpJOnY/ISU26M+y/wLscFuLRVVt3Pe cgDH20dInb8hfQ+ubvFdi2Ha5wctGotjWRshO3rHLz3aH7x8DAGbdcTP9ZbDdQV9 XmVOmj8WUO1mLID33JszDI9mpGVxJdpM4takZFzzEXS03CB0biWVgxhgsTzoqqNs G1sVgeJe0tteLfd2fRSzDE3om9iWrRV7RC6kAHaomY8dd4jot49ljAacRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFKa61cN0/Gs7JdbFcgdziXtIx2LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiNzU0YjRiLTc0ZmQtNDJjMS04Mjk4LTMzYjlkYWMxMmU2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaucgwDQYJKoZIhvcNAQELBQADggEBAKzb0FJBS/Fwxl0N1+hG PGLPiMFtFOgUlFZt/bmFObZYEsdIhvCkyD00i32sCGB6Wfj4B6EorPiomphVUEN6 Iks5srUcPm32elwJRZjgRo7vd7KmykoOXNQGupWPAP3lgVCdkUaT972bzcoW74yx 31AZbY7e0mfakAuxFvTy/3LYtKMqLh0z7KCInWDlH+SHo/Ifc5udRdBnT+DL1U0w A+Z2hMpL1XlwgCdS0aH+EHZ7MX3A7CXZ6reT/ftxXJ6AUHCpjeI0iNfyW0C5t5M+ eWH43wRSWvfAQmntVtwQtZCsE5PHnyALI+/T35ak60H81WWNfR8DGBXKrGZgo/uv 914= -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:00 2025 by rpki-client