This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa File: bd97fd1c-8072-482f-8e33-e42256920554.roa (raw, json) Hash identifier: a4d+eaQcLkeyjj7ZFlL0L7p8irHVqZ2iogMbll6J698= Subject key identifier: C6:7A:51:69:87:C7:F9:BB:0F:6F:14:9A:0E:CD:01:14:E9:EA:73:27 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 413AAA7C4E1982624352EA3DCD5FAAFA9621E06A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa Signing time: Thu 04 Dec 2025 00:31:05 +0000 ROA not before: Thu 04 Dec 2025 00:31:05 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3a:aa:7c:4e:19:82:62:43:52:ea:3d:cd:5f:aa:fa:96:21:e0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:31:05 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=66321ef730fb659c21d771126e1fb6991196e6bbf32605139a49298de4863729, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:11:9a:39:e5:91:59:b7:b7:fe:98:a7:eb: 88:b4:90:78:c6:0f:e9:52:6e:7b:76:73:b2:63:b5: 22:50:b9:a0:a0:5e:a7:4f:9d:a7:92:a3:c8:3a:7a: 2b:68:89:e1:12:72:7e:35:c7:90:c0:75:de:46:44: 9b:01:6d:ba:c1:ec:c0:89:43:22:cb:a3:eb:cb:58: fb:3b:bf:36:b3:a2:0d:27:d4:44:d5:a1:d3:3f:c3: c3:17:8f:40:d8:22:48:e0:3c:5b:50:c2:20:35:19: d3:06:2b:c4:9c:d8:37:93:6c:a1:19:ce:82:bf:d0: 19:5e:82:88:eb:08:48:b9:74:41:cb:de:af:d8:6d: 15:05:74:2c:b5:16:02:13:cd:5d:36:f5:d8:58:75: 33:f1:d7:17:5b:15:7c:fa:ba:fc:59:46:78:7a:cf: a3:17:00:64:65:e0:05:b5:f1:74:1a:e4:43:fb:93: 84:8f:40:b8:f6:f6:76:2c:46:fb:7a:64:05:9b:28: 96:39:11:7f:7a:2f:b8:fa:59:b3:73:8c:7b:af:b0: 2f:ef:e8:41:24:86:66:74:4e:33:a2:59:e7:ac:a8: e9:9f:66:48:8b:e1:e2:3d:fc:d7:31:9d:91:3e:f9: 6c:fa:3e:a1:76:71:5d:34:92:24:fd:34:d9:22:6c: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7A:51:69:87:C7:F9:BB:0F:6F:14:9A:0E:CD:01:14:E9:EA:73:27 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bd97fd1c-8072-482f-8e33-e42256920554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:2000::/40 Signature Algorithm: sha256WithRSAEncryption 18:1c:5f:b0:8e:a5:c1:78:ba:75:3b:fd:f9:b7:9a:4b:45:08: 0a:d7:5f:10:35:20:d1:72:b0:40:7a:b4:91:90:3a:3c:bc:66: 00:ac:5f:f7:7a:9f:ec:84:08:49:2c:da:12:1b:ef:b3:57:d7: 37:a1:03:d3:6f:91:68:2f:a4:d6:04:01:c8:ef:b9:04:f7:e3: a7:9d:b3:9b:95:f4:ff:c9:9b:1c:4e:93:61:42:ea:08:a0:64: ee:b8:0c:00:8a:25:ab:82:48:e5:37:02:82:3e:2f:a4:37:91: 93:7e:67:52:f8:52:c5:07:a3:70:cb:af:06:54:cb:4a:a8:03: cd:2a:1f:a1:4d:70:93:70:ce:ef:47:f9:0f:c0:26:b8:32:de: 03:0a:ea:7c:a0:71:01:f4:32:54:cf:f0:41:b6:bb:53:e7:a2: 84:72:bd:84:90:28:39:0c:d8:d7:37:66:f3:b5:de:61:ac:ad: 65:d6:f0:3f:1f:fb:5b:06:5c:80:aa:c5:8a:6a:2f:a8:00:2d: 85:40:92:5b:70:09:e3:c2:40:30:f7:72:19:08:83:30:cf:28: bc:b0:ae:d6:64:57:2d:71:47:fc:68:0d:31:49:ed:f4:6c:31: bc:d6:1b:79:c1:48:ca:42:7c:13:11:ad:51:95:0b:49:d8:bb: fb:7c:f6:98 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQTqqfE4ZgmJDUuo9zV+q+pYh4GowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMzEwNVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANjYzMjFlZjczMGZiNjU5YzIxZDc3 MTEyNmUxZmI2OTkxMTk2ZTZiYmYzMjYwNTEzOWE0OTI5OGRlNDg2MzcyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueERmjnlkVm3t/6Yp+uItJB4xg/p Um57dnOyY7UiULmgoF6nT52nkqPIOnoraInhEnJ+NceQwHXeRkSbAW26wezAiUMi y6Pry1j7O782s6INJ9RE1aHTP8PDF49A2CJI4DxbUMIgNRnTBivEnNg3k2yhGc6C v9AZXoKI6whIuXRBy96v2G0VBXQstRYCE81dNvXYWHUz8dcXWxV8+rr8WUZ4es+j FwBkZeAFtfF0GuRD+5OEj0C49vZ2LEb7emQFmyiWORF/ei+4+lmzc4x7r7Av7+hB JIZmdE4zolnnrKjpn2ZIi+HiPfzXMZ2RPvls+j6hdnFdNJIk/TTZImw2vQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMZ6UWmHx/m7D28Umg7NARTp6nMnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JkOTdmZDFjLTgwNzItNDgyZi04ZTMzLWU0MjI1NjkyMDU1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacCAwDQYJKoZIhvcNAQELBQADggEBABgcX7COpcF4unU7/fm3 mktFCArXXxA1INFysEB6tJGQOjy8ZgCsX/d6n+yECEks2hIb77NX1zehA9NvkWgv pNYEAcjvuQT346eds5uV9P/JmxxOk2FC6gigZO64DACKJauCSOU3AoI+L6Q3kZN+ Z1L4UsUHo3DLrwZUy0qoA80qH6FNcJNwzu9H+Q/AJrgy3gMK6nygcQH0MlTP8EG2 u1PnooRyvYSQKDkM2Nc3ZvO13mGsrWXW8D8f+1sGXICqxYpqL6gALYVAkltwCePC QDD3chkIgzDPKLywrtZkVy1xR/xoDTFJ7fRsMbzWG3nBSMpCfBMRrVGVC0nYu/t8 9pg= -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:37 2025 by rpki-client