This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa File: c7310f55-3b12-4798-80ca-47e95f2e091c.roa (raw, json) Hash identifier: m8/h73f9gGFI2eM6GOFeYPoh6efAmQAGHu4jxWYFlO8= Subject key identifier: 8E:EB:73:7C:D9:10:44:FC:FA:3B:D0:81:8C:9C:D6:B1:97:3B:B0:67 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D937395C7626B9FEC1EE018041B9C63D7F58273 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa Signing time: Wed 03 Dec 2025 00:11:04 +0000 ROA not before: Wed 03 Dec 2025 00:11:04 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:93:73:95:c7:62:6b:9f:ec:1e:e0:18:04:1b:9c:63:d7:f5:82:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 3 00:11:04 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=4c3325286c4bcb22292f88b122a64c8051c086bad00a6df63d018fb79f3551ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:ff:c0:77:28:49:73:42:a5:ac:80:5b:4f: 0e:f6:01:57:1f:72:d9:fa:71:d3:57:41:dc:c6:19: e1:80:74:ae:4b:90:44:b9:6e:ad:bd:52:2d:67:d4: 65:36:52:5f:2f:84:9a:8f:73:96:30:fe:a9:ba:b8: 70:a8:59:4e:3e:dc:b3:6f:26:d5:fa:e9:32:2d:a0: 14:2f:c4:9f:5e:a5:e7:a3:b4:08:d6:f1:37:f0:53: c0:81:d9:42:9e:36:27:6a:f6:7a:f9:12:b8:aa:ba: 86:41:a4:a8:49:b8:87:9b:df:e3:48:fc:aa:dc:56: d8:82:79:e4:00:65:63:ac:fd:6b:24:aa:ab:92:f2: 63:cf:ab:d6:f4:1e:c9:d7:fa:0b:3d:fc:f7:25:aa: c7:e6:34:78:ce:88:84:08:4e:d2:a6:80:7d:ca:49: b5:f4:2b:e1:9c:e3:49:eb:05:02:09:71:16:6c:de: 95:51:af:75:d7:7e:4b:39:d3:94:7e:d4:f5:0d:47: 26:01:d2:50:96:cd:9e:29:a7:b8:55:b9:a9:ce:f6: d8:35:05:a5:1e:1c:35:28:6a:6b:ff:09:bf:8e:c8: 7f:dd:29:09:04:63:aa:2a:6b:e4:db:c3:5d:98:af: 51:a1:d5:b6:78:31:16:36:72:08:ae:a3:bc:55:9d: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:73:7C:D9:10:44:FC:FA:3B:D0:81:8C:9C:D6:B1:97:3B:B0:67 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7310f55-3b12-4798-80ca-47e95f2e091c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e000::/40 Signature Algorithm: sha256WithRSAEncryption 43:8b:95:6b:a6:9b:22:b9:48:46:22:0f:42:cb:c2:36:d9:d1: a5:53:13:e6:de:8e:08:34:51:ea:00:cf:92:f3:49:50:ef:a3: 80:d3:c7:c7:06:a7:a3:35:45:31:88:34:e3:82:d3:1a:e9:f4: 3c:6a:dc:e1:89:63:8c:4b:0e:1e:94:51:24:f0:cd:59:fe:91: 5b:5e:5b:5c:5c:3b:3d:80:18:cc:56:ae:a6:f8:76:10:06:96: ae:d9:ed:25:db:39:6c:17:0b:3d:cc:b0:54:31:fc:94:52:91: 82:cd:f7:95:79:52:e7:96:0b:74:d3:f3:4b:22:e7:04:e0:b4: 55:ce:de:47:4d:34:01:2d:16:17:f4:c4:ae:a5:16:51:20:26: b0:93:a5:0b:ac:76:c6:a6:0f:ee:23:e7:a6:e5:e1:b1:fa:39: 24:5c:d9:38:81:99:57:9e:2c:b6:a0:98:ea:d0:25:48:60:3b: fe:e2:83:df:b4:85:e1:4a:8e:eb:34:79:1b:14:19:2a:72:c1: 66:56:36:de:45:50:fd:bc:7a:5b:7f:b3:6b:5b:d8:0a:f4:37: ca:bf:63:c7:04:2c:56:af:ab:1e:eb:3e:6d:fe:a2:20:1b:ae: b1:99:44:c5:54:8c:e7:6c:4d:7f:c4:2d:4a:9e:c4:fb:ec:9e: a7:bc:d7:95 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfZNzlcdia5/sHuAYBBucY9f1gnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMTEwNFoX DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNANGMzMzI1Mjg2YzRiY2IyMjI5MmY4 OGIxMjJhNjRjODA1MWMwODZiYWQwMGE2ZGY2M2QwMThmYjc5ZjM1NTFlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLf/wHcoSXNCpayAW08O9gFXH3LZ +nHTV0HcxhnhgHSuS5BEuW6tvVItZ9RlNlJfL4Saj3OWMP6purhwqFlOPtyzbybV +ukyLaAUL8SfXqXno7QI1vE38FPAgdlCnjYnavZ6+RK4qrqGQaSoSbiHm9/jSPyq 3FbYgnnkAGVjrP1rJKqrkvJjz6vW9B7J1/oLPfz3JarH5jR4zoiECE7SpoB9ykm1 9CvhnONJ6wUCCXEWbN6VUa91135LOdOUftT1DUcmAdJQls2eKae4VbmpzvbYNQWl Hhw1KGpr/wm/jsh/3SkJBGOqKmvk28NdmK9RodW2eDEWNnIIrqO8VZ30EQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI7rc3zZEET8+jvQgYyc1rGXO7BnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3MzEwZjU1LTNiMTItNDc5OC04MGNhLTQ3ZTk1ZjJlMDkxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaeAwDQYJKoZIhvcNAQELBQADggEBAEOLlWummyK5SEYiD0LL wjbZ0aVTE+bejgg0UeoAz5LzSVDvo4DTx8cGp6M1RTGINOOC0xrp9Dxq3OGJY4xL Dh6UUSTwzVn+kVteW1xcOz2AGMxWrqb4dhAGlq7Z7SXbOWwXCz3MsFQx/JRSkYLN 95V5UueWC3TT80si5wTgtFXO3kdNNAEtFhf0xK6lFlEgJrCTpQusdsamD+4j56bl 4bH6OSRc2TiBmVeeLLagmOrQJUhgO/7ig9+0heFKjus0eRsUGSpywWZWNt5FUP28 elt/s2tb2Ar0N8q/Y8cELFavqx7rPm3+oiAbrrGZRMVUjOdsTX/ELUqexPvsnqe8 15U= -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:37 2025 by rpki-client