This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa File: b424c862-bbee-4123-87b5-a8a734d27574.roa (raw, json) Hash identifier: bUGLaXz7wQ6b9Q0Zm+gkBGve9buD4R0Wk0Cua8xtCoI= Subject key identifier: 39:1C:E0:49:B8:13:B2:23:19:3D:FF:99:16:72:29:A9:D0:F9:12:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E57A915F502267C187AC7BC7FB307F0CB2DB416 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa Signing time: Thu 04 Dec 2025 00:40:26 +0000 ROA not before: Thu 04 Dec 2025 00:40:26 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:57:a9:15:f5:02:26:7c:18:7a:c7:bc:7f:b3:07:f0:cb:2d:b4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:40:26 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=621332f65597d0042f0e80edb442e5b58b6134ca08ecd52defbe35ea28caff1a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:54:8b:3b:00:3f:a3:c3:de:3f:3a:15:72: dc:2e:3f:f3:06:6e:b2:2b:9e:f9:b5:b4:bc:58:44: da:00:bb:b7:63:fc:bf:10:c5:36:2b:54:69:9c:67: fb:bd:af:19:0a:d6:47:f2:ed:52:e1:d2:5d:93:14: ef:50:bf:ce:03:ea:c8:48:3c:92:80:6e:b0:4b:41: 71:18:56:ec:92:4f:eb:6a:eb:81:f4:65:aa:36:a5: d9:69:12:a0:b0:d7:13:4b:c9:0f:65:5b:d4:4e:f6: 42:4b:4c:2b:f8:80:af:91:e9:92:d4:fd:e4:9e:66: 61:e4:97:ee:c3:ea:62:4a:51:5c:1d:fa:fa:e4:20: 0d:cf:44:1d:d3:ee:92:fe:33:db:3e:a6:29:7f:d5: f8:27:60:fc:86:78:2c:9a:e5:25:34:0b:58:8e:d6: 04:e8:68:08:b8:0c:d4:ea:2c:c6:9a:b6:29:3d:00: fc:8d:0f:d1:d8:64:d1:bb:e1:b3:87:55:31:5f:15: 04:79:f3:ff:a2:46:ac:59:71:bf:f3:5c:11:f4:52: d1:b5:d2:b5:f5:98:1b:fc:8a:4d:5a:67:73:f9:a4: 16:05:59:47:42:66:2d:27:0c:59:5c:1d:22:a4:db: ce:c7:0a:04:92:a7:d8:6f:d7:e2:db:6b:ff:99:51: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1C:E0:49:B8:13:B2:23:19:3D:FF:99:16:72:29:A9:D0:F9:12:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b424c862-bbee-4123-87b5-a8a734d27574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 45:09:5f:65:f5:c5:2b:22:82:7a:c1:e4:28:51:e9:2f:35:22: 98:3c:6f:af:58:2e:f4:aa:76:91:f8:aa:8c:6e:48:77:4c:a2: fd:18:90:a4:b2:a5:b2:bc:3a:00:0f:af:45:2d:d2:6f:12:61: f7:9d:c4:e1:43:01:5a:b7:d9:55:93:45:1c:8a:29:7c:2e:8c: 71:ee:83:62:46:42:6e:9e:37:51:cb:9c:86:32:f6:3d:4f:7e: 86:9e:11:62:7f:5d:12:9f:0e:95:56:03:1c:96:07:5a:62:8d: 62:9a:5e:fc:25:2c:48:da:05:4c:76:23:0c:c6:96:fe:40:70: fc:5a:27:31:78:37:e8:2d:46:4d:50:f7:b4:57:5c:e4:c7:84: e9:fe:b8:ca:bf:eb:bb:eb:6e:7a:67:05:c4:b4:2b:f4:00:78: 2e:2a:99:db:67:e0:bd:2c:54:43:71:de:c2:09:8c:c2:b0:06: a0:f6:b4:32:b3:7e:1c:bf:d1:20:5a:8d:81:70:d3:4c:69:d0: 52:0d:5b:5b:00:79:2a:9c:73:c5:a3:c1:a6:8b:e1:d4:5e:19: 8d:0b:21:d9:9c:04:bf:75:5f:29:a8:55:79:d1:71:93:d9:3e: 00:5c:f1:84:30:f2:1e:0b:f6:fd:ca:8d:6f:b4:2e:1c:82:35: 5b:b3:c7:dd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULlepFfUCJnwYese8f7MH8MsttBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwNDAyNloX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANjIxMzMyZjY1NTk3ZDAwNDJmMGU4 MGVkYjQ0MmU1YjU4YjYxMzRjYTA4ZWNkNTJkZWZiZTM1ZWEyOGNhZmYxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35NUizsAP6PD3j86FXLcLj/zBm6y K575tbS8WETaALu3Y/y/EMU2K1RpnGf7va8ZCtZH8u1S4dJdkxTvUL/OA+rISDyS gG6wS0FxGFbskk/rauuB9GWqNqXZaRKgsNcTS8kPZVvUTvZCS0wr+ICvkemS1P3k nmZh5Jfuw+piSlFcHfr65CANz0Qd0+6S/jPbPqYpf9X4J2D8hngsmuUlNAtYjtYE 6GgIuAzU6izGmrYpPQD8jQ/R2GTRu+Gzh1UxXxUEefP/okasWXG/81wR9FLRtdK1 9Zgb/IpNWmdz+aQWBVlHQmYtJwxZXB0ipNvOxwoEkqfYb9fi22v/mVER5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDkc4Em4E7IjGT3/mRZyKanQ+RKEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I0MjRjODYyLWJiZWUtNDEyMy04N2I1LWE4YTczNGQyNzU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/wjAMA0GCSqGSIb3DQEBCwUAA4IBAQBFCV9l9cUrIoJ6weQo UekvNSKYPG+vWC70qnaR+KqMbkh3TKL9GJCksqWyvDoAD69FLdJvEmH3ncThQwFa t9lVk0Uciil8Loxx7oNiRkJunjdRy5yGMvY9T36GnhFif10Snw6VVgMclgdaYo1i ml78JSxI2gVMdiMMxpb+QHD8WicxeDfoLUZNUPe0V1zkx4Tp/rjKv+u76256ZwXE tCv0AHguKpnbZ+C9LFRDcd7CCYzCsAag9rQys34cv9EgWo2BcNNMadBSDVtbAHkq nHPFo8Gmi+HUXhmNCyHZnAS/dV8pqFV50XGT2T4AXPGEMPIeC/b9yo1vtC4cgjVb s8fd -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:12 2025 by rpki-client