This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa File: ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa (raw, json) Hash identifier: 4FLCT2axF0fZaPmU2WXSSPvbl8Qb2KOBkEqSHa/po00= Subject key identifier: D5:3B:4E:0F:51:0B:5D:D5:41:68:D5:A6:F2:C0:C7:CE:D7:90:1E:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 32FAF2EBC6D945C1142005745556D157137129D0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa Signing time: Thu 04 Dec 2025 00:10:26 +0000 ROA not before: Thu 04 Dec 2025 00:10:26 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fa:f2:eb:c6:d9:45:c1:14:20:05:74:55:56:d1:57:13:71:29:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:10:26 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=d589a3e4c48dd35d7181a1d6554cc2200e297e73d89c33821e2052b22f128d45, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:c5:c4:4f:a9:ac:0f:01:c5:2d:4b:90:f4: ef:98:a9:fb:70:53:8b:a8:11:2c:4e:e6:85:06:84: 55:ad:37:67:d6:79:64:4d:40:6b:89:74:8b:3d:2f: f0:39:3d:d3:99:39:9c:e1:5c:1b:98:74:31:1f:9f: a9:c2:4a:3d:ec:b7:ac:d0:90:86:b2:f7:8c:06:2f: 5e:d8:90:55:e1:ed:59:b3:54:80:7f:dc:95:76:9e: d0:cd:0e:67:e0:49:3f:6c:d2:12:66:0d:e5:98:98: f5:03:1a:02:30:88:e8:b6:bb:d0:7c:7b:b9:d4:62: fd:db:23:ca:77:08:37:38:ee:18:a6:6f:88:67:9d: 8f:8f:e1:28:2d:66:c5:d4:3f:b3:fe:6c:95:c0:43: 98:f9:70:06:4c:c5:ed:22:47:80:c8:f7:07:a6:fa: 56:6d:db:66:85:72:f0:21:ae:04:9a:3a:ec:ae:02: ea:a6:0a:67:85:c1:d7:4c:2c:ad:4a:ab:54:c1:03: 6b:99:e9:ec:ed:a5:c3:6d:1e:a1:0b:a1:6f:d3:2a: d5:00:76:c2:30:ba:0b:1b:49:a8:50:61:2c:a5:e6: 70:f0:d6:c2:31:d1:3f:af:66:fd:94:96:c0:6f:f6: a5:fa:9a:29:f8:4f:7d:86:5b:8f:13:ff:6b:49:5d: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3B:4E:0F:51:0B:5D:D5:41:68:D5:A6:F2:C0:C7:CE:D7:90:1E:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae908e37-68c8-401d-9ecf-fd9a8d785f85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:7000::/40 Signature Algorithm: sha256WithRSAEncryption 17:1b:ad:9e:82:3c:f9:9b:39:2c:31:cc:a5:7f:8e:10:7b:51: d4:a5:de:30:cf:6a:da:c0:15:c7:a2:dc:22:02:c6:d0:fc:25: dc:54:56:e8:ef:00:f8:82:b3:9e:e3:48:24:39:e3:fb:8d:5f: 76:29:4e:9d:d6:89:b2:ac:38:29:0c:da:b0:a2:f6:82:4f:14: 8a:96:ec:92:92:53:1f:a6:5e:4b:7f:78:34:31:5f:03:06:79: 1d:20:c3:39:d9:e5:9e:65:4c:67:d7:0f:93:36:f8:4d:6b:8a: bc:9d:18:df:6a:a4:e3:b8:f8:f5:80:61:6e:52:76:7b:a0:10: 78:a5:83:77:a8:fb:57:06:58:14:90:ad:0d:ac:14:ab:e5:83: 04:94:85:62:b7:b9:87:44:3f:82:fc:b1:e8:6b:b4:46:b8:da: cd:68:68:fb:dd:9a:0f:6e:5f:ca:ef:0b:0b:4c:02:a4:5a:70: 74:0a:89:34:11:94:65:27:31:84:b1:a1:28:f0:74:1a:03:98: e3:a8:b1:62:f9:de:e5:3b:25:8e:fb:70:42:a4:2e:08:5c:3f: 0d:c5:da:e6:c1:66:c3:5f:ee:e9:b7:0a:49:a1:4f:ad:e9:48: e8:cd:b1:20:b8:93:8b:14:ce:67:a7:0f:b0:a4:f1:f2:1f:ba: d1:28:d4:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMvry68bZRcEUIAV0VVbRVxNxKdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMTAyNloX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAZDU4OWEzZTRjNDhkZDM1ZDcxODFh MWQ2NTU0Y2MyMjAwZTI5N2U3M2Q4OWMzMzgyMWUyMDUyYjIyZjEyOGQ0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tbFxE+prA8BxS1LkPTvmKn7cFOL qBEsTuaFBoRVrTdn1nlkTUBriXSLPS/wOT3TmTmc4VwbmHQxH5+pwko97Les0JCG sveMBi9e2JBV4e1Zs1SAf9yVdp7QzQ5n4Ek/bNISZg3lmJj1AxoCMIjotrvQfHu5 1GL92yPKdwg3OO4Ypm+IZ52Pj+EoLWbF1D+z/myVwEOY+XAGTMXtIkeAyPcHpvpW bdtmhXLwIa4EmjrsrgLqpgpnhcHXTCytSqtUwQNrmens7aXDbR6hC6Fv0yrVAHbC MLoLG0moUGEspeZw8NbCMdE/r2b9lJbAb/al+pop+E99hluPE/9rSV1BbQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNU7Tg9RC13VQWjVpvLAx87XkB6aMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlOTA4ZTM3LTY4YzgtNDAxZC05ZWNmLWZkOWE4ZDc4NWY4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNnAwDQYJKoZIhvcNAQELBQADggEBABcbrZ6CPPmbOSwxzKV/ jhB7UdSl3jDPatrAFcei3CICxtD8JdxUVujvAPiCs57jSCQ54/uNX3YpTp3WibKs OCkM2rCi9oJPFIqW7JKSUx+mXkt/eDQxXwMGeR0gwznZ5Z5lTGfXD5M2+E1riryd GN9qpOO4+PWAYW5SdnugEHilg3eo+1cGWBSQrQ2sFKvlgwSUhWK3uYdEP4L8sehr tEa42s1oaPvdmg9uX8rvCwtMAqRacHQKiTQRlGUnMYSxoSjwdBoDmOOosWL53uU7 JY77cEKkLghcPw3F2ubBZsNf7um3CkmhT63pSOjNsSC4k4sUzmenD7Ck8fIfutEo 1DA= -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:52 2025 by rpki-client