This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa File: d1071032-5bb5-48fb-ad34-13668ce372b7.roa (raw, json) Hash identifier: ZQJGSHL4g5bJs7dhat8NnvcszMnEGJc4DCX6t8duLxU= Subject key identifier: 59:A9:FA:75:85:21:CC:19:E7:45:72:12:FE:CC:34:06:BA:17:7B:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73498A2F6084BC4AB4B8A01E6411D6A86320BC06 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa Signing time: Wed 26 Nov 2025 00:00:37 +0000 ROA not before: Wed 26 Nov 2025 00:00:37 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:49:8a:2f:60:84:bc:4a:b4:b8:a0:1e:64:11:d6:a8:63:20:bc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 26 00:00:37 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=06a6edc0042843afab6b810d8196ab4430c1a9c616fc7491c800c4b7619e0557, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:35:82:89:da:b0:17:93:6f:6a:31:51:6b:2c: 91:e4:60:a3:01:6d:a7:c4:90:ce:9f:05:2d:6a:1a: 44:ba:c8:8f:cc:34:5a:62:20:ed:b8:a0:79:53:65: 16:71:cd:ef:04:ca:a8:e1:82:f0:e3:28:72:e0:59: 8f:50:22:62:d2:d4:78:87:59:f6:b7:e3:98:5d:1e: 1d:be:10:c3:0e:77:df:8a:b0:14:97:e8:1b:28:13: ae:6d:e1:7d:e6:6a:08:ef:fd:f9:7a:76:43:e2:ae: 2e:41:ae:1b:da:b7:6e:e8:9b:63:d9:3c:de:e5:53: ed:ce:3a:cc:5c:d2:17:dc:30:2f:f3:9a:42:cc:c7: a6:26:05:43:46:c7:3d:e3:58:40:4e:bc:6d:1b:9e: 01:ac:83:b2:d3:ae:63:47:e8:c0:84:b7:5f:b9:b3: b1:d4:ce:15:a9:5c:60:ac:02:e7:b6:03:41:75:cb: c9:4d:25:23:39:5f:39:34:fa:50:52:94:f4:ca:89: f5:14:fc:dd:8c:f6:f8:8e:a8:b2:c8:a2:b8:f8:ed: f7:e9:59:66:94:d2:6e:27:dd:e9:20:7d:98:61:53: a2:12:26:73:d7:6d:dc:04:28:8a:6c:51:09:a7:2f: c5:a2:c8:3e:96:d0:a7:10:2f:bc:81:3b:dd:05:5a: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A9:FA:75:85:21:CC:19:E7:45:72:12:FE:CC:34:06:BA:17:7B:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1071032-5bb5-48fb-ad34-13668ce372b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2d::/36 Signature Algorithm: sha256WithRSAEncryption 61:3f:5f:37:9d:67:60:3a:98:5a:43:e2:f1:1b:f5:b1:dd:17: 2e:a4:e8:88:b4:2f:7f:06:e0:b9:bc:f4:46:ef:3f:af:e8:43: 43:fc:9a:76:13:22:52:af:5e:e2:da:85:47:04:8e:a1:e7:91: 28:45:13:8c:9f:ea:1e:d2:19:1d:f2:bf:4c:21:15:cb:9e:00: 4e:82:d0:9e:7b:e2:70:cb:d6:f6:3a:fb:43:2c:34:4a:06:be: 75:a1:39:59:79:6d:0a:55:05:7b:aa:7b:ba:49:db:11:fe:00: db:f4:cd:9c:8c:d8:f8:ce:dd:ad:48:55:f3:86:11:26:b7:5a: a9:0d:e8:49:bf:cd:83:62:1e:82:94:a9:ee:ee:fe:3a:e7:4d: ef:da:20:88:ee:12:14:dc:ff:b1:10:7e:a7:d8:2e:ad:79:e1: 62:cd:55:68:ac:ea:2e:7b:1f:b5:e9:29:3b:30:2f:1f:47:e4: 5d:19:6b:a9:1c:1f:2b:80:6a:04:cd:42:0b:5a:21:95:8d:22: 11:98:6b:f3:37:b3:a8:27:4e:b9:1c:80:be:09:a8:f5:27:df: 35:6a:91:04:6c:d0:aa:b0:dc:18:9d:b7:6d:50:3f:a5:9e:cd: b5:f0:cd:1a:1b:3f:bc:2c:59:62:fd:06:52:0f:8f:06:14:07: b8:c0:a8:ee -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc0mKL2CEvEq0uKAeZBHWqGMgvAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNjAwMDAzN1oX DTI2MDIyNDIzNTk1OVowejFJMEcGA1UEBRNAMDZhNmVkYzAwNDI4NDNhZmFiNmI4 MTBkODE5NmFiNDQzMGMxYTljNjE2ZmM3NDkxYzgwMGM0Yjc2MTllMDU1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TWCidqwF5NvajFRayyR5GCjAW2n xJDOnwUtahpEusiPzDRaYiDtuKB5U2UWcc3vBMqo4YLw4yhy4FmPUCJi0tR4h1n2 t+OYXR4dvhDDDnffirAUl+gbKBOubeF95moI7/35enZD4q4uQa4b2rdu6Jtj2Tze 5VPtzjrMXNIX3DAv85pCzMemJgVDRsc941hATrxtG54BrIOy065jR+jAhLdfubOx 1M4VqVxgrALntgNBdcvJTSUjOV85NPpQUpT0yon1FPzdjPb4jqiyyKK4+O336Vlm lNJuJ93pIH2YYVOiEiZz123cBCiKbFEJpy/Fosg+ltCnEC+8gTvdBVrVcwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFmp+nWFIcwZ50VyEv7MNAa6F3tRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxMDcxMDMyLTViYjUtNDhmYi1hZDM0LTEzNjY4Y2UzNzJiNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLQAwDQYJKoZIhvcNAQELBQADggEBAGE/XzedZ2A6mFpD4vEb 9bHdFy6k6Ii0L38G4Lm89EbvP6/oQ0P8mnYTIlKvXuLahUcEjqHnkShFE4yf6h7S GR3yv0whFcueAE6C0J574nDL1vY6+0MsNEoGvnWhOVl5bQpVBXuqe7pJ2xH+ANv0 zZyM2PjO3a1IVfOGESa3WqkN6Em/zYNiHoKUqe7u/jrnTe/aIIjuEhTc/7EQfqfY Lq154WLNVWis6i57H7XpKTswLx9H5F0Za6kcHyuAagTNQgtaIZWNIhGYa/M3s6gn TrkcgL4JqPUn3zVqkQRs0Kqw3Bidt21QP6WezbXwzRobP7wsWWL9BlIPjwYUB7jA qO4= -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:57 2025 by rpki-client