This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa File: b82c715e-5b6d-400a-a87e-497b43db313b.roa (raw, json) Hash identifier: Xtzk4YTcO+f3geycU0K5eFx8H8M2Mw+9NgbORiaXEWk= Subject key identifier: B1:D9:38:2C:5C:76:E7:41:4D:39:73:49:C2:B9:F5:11:41:41:42:AE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3FCCAA78F05169F257066D8B1E4B21219BE49292 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa Signing time: Tue 02 Dec 2025 00:00:44 +0000 ROA not before: Tue 02 Dec 2025 00:00:44 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cc:aa:78:f0:51:69:f2:57:06:6d:8b:1e:4b:21:21:9b:e4:92:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:00:44 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=c79e929ea082e8d30075bc63e4737b996884e8e349f8a6dae29bd4b6509d6620, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dd:6a:5e:61:56:14:15:c3:21:d5:fb:9d:3d: 82:fc:94:9c:e2:ee:56:35:3e:64:6f:c8:7a:ca:71: a5:bd:a3:be:9b:3d:5a:4e:12:a9:a2:46:56:c3:b9: 3c:cd:6f:11:97:5c:f5:4a:68:54:40:24:cd:0d:7e: a0:15:16:87:b5:0a:a3:2b:ef:fb:c7:e5:59:59:74: 65:d1:49:65:05:f9:bc:30:e8:a1:40:91:65:dd:52: 6b:12:df:a4:d3:97:2e:b2:4c:a3:2a:29:d9:69:63: 44:53:b6:ae:94:da:1a:33:5d:24:bf:22:b6:a9:45: cd:aa:3b:8a:c8:79:25:a8:ae:e8:9b:e3:48:9d:db: f2:a1:6a:44:94:49:8a:44:99:1a:32:a9:db:d8:9e: 95:46:66:77:4d:7f:12:91:c9:05:49:06:f3:8c:8e: c5:6c:ca:b1:82:95:05:92:f1:1c:0a:3e:07:67:79: c0:eb:3a:85:b9:c9:05:c4:fe:8f:85:d4:80:f5:fa: 0a:99:e9:e6:90:0c:6a:31:da:93:3d:80:e2:49:0a: 79:4d:92:21:c8:8e:2f:5d:55:21:78:52:2d:dd:45: 9a:5e:ad:fb:81:96:36:95:59:62:b5:10:54:be:c3: cc:51:a6:0d:98:ad:8d:ec:21:25:e9:67:30:1b:24: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:38:2C:5C:76:E7:41:4D:39:73:49:C2:B9:F5:11:41:41:42:AE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 7a:80:4d:c3:e7:e2:b7:57:cb:7e:a0:78:f2:ed:dc:0c:c2:64: b1:a5:11:26:b3:19:31:90:44:e9:e4:98:6a:bd:ee:00:db:f5: ed:5d:bd:9f:b6:05:52:67:37:33:ce:bc:8b:70:af:27:9a:af: 02:45:75:12:16:8c:c8:8f:18:2a:4a:ad:78:6e:11:56:a4:99: 7c:f7:cc:bd:7e:6a:21:bc:66:fd:41:9f:78:9d:d6:b7:9b:4a: 91:0e:39:1f:98:ad:8d:4e:24:74:f4:9f:d7:99:7c:18:05:11: 8a:a5:a8:b7:a4:41:d4:5e:e5:8b:b8:4a:5b:b2:b4:42:f8:11: 93:a9:28:cf:7d:ed:cb:81:e5:74:dc:7a:5a:e4:73:ab:68:f3: d3:54:a7:5c:2c:97:e8:32:98:f7:67:71:74:36:e5:1d:ed:fe: dc:17:6c:50:33:b8:53:6c:5d:d5:81:76:15:96:a0:3f:ab:2a: 8b:f6:18:4f:85:67:f8:05:1f:24:0a:16:e3:67:a7:b4:86:8d: 66:38:2f:2f:1c:73:05:a5:51:5d:97:ad:4f:61:b2:0a:70:dd: a0:8c:30:55:b8:ba:46:fa:9f:24:b6:b9:65:f2:dd:39:f2:90: 7c:08:f8:c9:4d:06:1a:3e:06:81:6b:bb:6c:de:c0:85:ff:bc: f9:15:e2:97 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUP8yqePBRafJXBm2LHkshIZvkkpIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDA0NFoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAYzc5ZTkyOWVhMDgyZThkMzAwNzVi YzYzZTQ3MzdiOTk2ODg0ZThlMzQ5ZjhhNmRhZTI5YmQ0YjY1MDlkNjYyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt1qXmFWFBXDIdX7nT2C/JSc4u5W NT5kb8h6ynGlvaO+mz1aThKpokZWw7k8zW8Rl1z1SmhUQCTNDX6gFRaHtQqjK+/7 x+VZWXRl0UllBfm8MOihQJFl3VJrEt+k05cuskyjKinZaWNEU7aulNoaM10kvyK2 qUXNqjuKyHklqK7om+NIndvyoWpElEmKRJkaMqnb2J6VRmZ3TX8SkckFSQbzjI7F bMqxgpUFkvEcCj4HZ3nA6zqFuckFxP6PhdSA9foKmenmkAxqMdqTPYDiSQp5TZIh yI4vXVUheFIt3UWaXq37gZY2lVlitRBUvsPMUaYNmK2N7CEl6WcwGyRdMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLHZOCxcdudBTTlzScK59RFBQUKuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4MmM3MTVlLTViNmQtNDAwYS1hODdlLTQ5N2I0M2RiMzEzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ijAMA0GCSqGSIb3DQEBCwUAA4IBAQB6gE3D5+K3V8t+oHjy 7dwMwmSxpREmsxkxkETp5Jhqve4A2/XtXb2ftgVSZzczzryLcK8nmq8CRXUSFozI jxgqSq14bhFWpJl898y9fmohvGb9QZ94nda3m0qRDjkfmK2NTiR09J/XmXwYBRGK pai3pEHUXuWLuEpbsrRC+BGTqSjPfe3LgeV03Hpa5HOraPPTVKdcLJfoMpj3Z3F0 NuUd7f7cF2xQM7hTbF3VgXYVlqA/qyqL9hhPhWf4BR8kChbjZ6e0ho1mOC8vHHMF pVFdl61PYbIKcN2gjDBVuLpG+p8ktrll8t058pB8CPjJTQYaPgaBa7ts3sCF/7z5 FeKX -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:16 2025 by rpki-client