This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa File: d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa (raw, json) Hash identifier: lSGCmpRfaH5+jOsz2vRBNpJ/dcGQiGAa+9oFUk4Gb+M= Subject key identifier: F5:3B:5B:08:B9:4C:C2:49:8F:15:54:3A:37:D8:28:85:67:EC:BD:FF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 500661409B8CAD375ABDC05CD56FA3BDD1F9C6F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa Signing time: Sat 06 Dec 2025 00:00:06 +0000 ROA not before: Sat 06 Dec 2025 00:00:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da20::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:06:61:40:9b:8c:ad:37:5a:bd:c0:5c:d5:6f:a3:bd:d1:f9:c6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 6 00:00:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=94e1ce6d1367c52a0cfe45ee242ee0cd3d01d5ff83198ec296749bbad2b7725d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:49:5e:b1:c2:26:03:4d:e6:68:0f:3e:27: 6d:de:cb:7d:0d:c5:81:c9:4c:2e:76:7a:33:96:03: f8:e4:7b:14:27:70:2f:9a:a1:c3:cb:b7:12:52:96: e0:5b:e9:4f:28:77:75:7d:b8:09:9d:6a:9f:42:fb: 99:db:89:6f:79:95:0d:6a:6c:28:94:28:4d:aa:b8: 5d:f0:2a:8b:ea:64:19:36:3c:e3:3c:06:3c:29:f8: 66:59:c7:80:a9:48:82:81:53:17:df:60:09:11:72: 13:ba:b5:d3:c4:f3:b9:f1:09:65:be:6a:50:d8:5e: ae:34:81:e4:6a:b3:8f:42:d3:cd:e7:2d:20:19:13: a3:70:52:d7:6e:45:c5:58:a4:6d:2e:5f:84:5e:92: 32:97:5b:89:a7:d2:2e:27:16:cd:26:a7:6d:5a:bd: 51:ad:8e:33:fa:12:0c:d0:56:22:57:25:69:69:33: 1a:59:12:53:4c:5a:0d:f0:7f:90:b8:ba:31:00:71: b8:29:c4:8d:39:04:95:d0:ab:e0:82:f9:9f:1a:4d: cb:9d:c7:43:25:54:ec:e6:d6:a0:df:72:d2:f5:11: 9d:70:28:49:cb:c4:fa:a9:cd:b3:87:b7:7b:2b:2e: c7:25:05:82:3a:ab:63:1f:e2:26:48:ac:50:ca:e7: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3B:5B:08:B9:4C:C2:49:8F:15:54:3A:37:D8:28:85:67:EC:BD:FF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d73c0a51-ab7b-4878-bdff-e08b6181edbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da20::/28 Signature Algorithm: sha256WithRSAEncryption 8e:33:82:9a:ec:af:f0:c9:3d:0b:3e:b5:99:2f:73:c9:d4:e9: c6:fb:90:da:71:72:d1:b3:24:b4:9e:a6:22:6f:ed:e0:1f:01: 42:4e:f0:19:9d:06:8f:eb:6e:b5:99:a9:3b:15:91:ab:18:4c: 7d:05:f6:72:9b:8e:09:d8:e4:43:4c:46:73:b8:be:21:2c:a2: e8:d5:48:e7:d6:b1:1f:15:df:ce:79:94:b2:39:c0:2f:66:c2: d8:26:2d:17:84:1b:d1:00:a6:05:e8:29:4b:17:59:6b:ef:48: 45:79:45:5f:8f:c7:fc:01:17:7f:d6:32:92:df:41:0e:23:fe: 23:5e:1b:6a:fd:95:46:bc:6a:6c:39:99:9b:ef:92:b4:84:28: 92:bc:4f:f6:ae:ea:c5:30:f2:1c:b9:89:e0:30:9f:ae:b4:8f: 74:5f:f8:19:fa:2b:43:e3:df:c7:69:6a:91:a1:76:e5:a9:a9: 12:e9:1e:53:59:ad:41:81:a2:d2:24:b9:dc:d2:f2:92:ab:3d: 69:0c:66:40:d1:4a:db:c6:bf:39:47:bb:32:0d:13:f4:39:b0: 8e:d6:fc:a0:f2:0f:ec:a0:8e:73:4e:be:a5:75:66:45:d7:50: 5d:5c:16:e1:b9:b2:14:09:f9:10:63:36:32:38:8b:28:2e:1b: c1:af:0c:60 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUUAZhQJuMrTdavcBc1W+jvdH5xvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNjAwMDAwNloX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAOTRlMWNlNmQxMzY3YzUyYTBjZmU0 NWVlMjQyZWUwY2QzZDAxZDVmZjgzMTk4ZWMyOTY3NDliYmFkMmI3NzI1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eJJXrHCJgNN5mgPPidt3st9DcWB yUwudnozlgP45HsUJ3AvmqHDy7cSUpbgW+lPKHd1fbgJnWqfQvuZ24lveZUNamwo lChNqrhd8CqL6mQZNjzjPAY8KfhmWceAqUiCgVMX32AJEXITurXTxPO58QllvmpQ 2F6uNIHkarOPQtPN5y0gGROjcFLXbkXFWKRtLl+EXpIyl1uJp9IuJxbNJqdtWr1R rY4z+hIM0FYiVyVpaTMaWRJTTFoN8H+QuLoxAHG4KcSNOQSV0KvggvmfGk3LncdD JVTs5tag33LS9RGdcChJy8T6qc2zh7d7Ky7HJQWCOqtjH+ImSKxQyudHmwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPU7Wwi5TMJJjxVUOjfYKIVn7L3/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q3M2MwYTUxLWFiN2ItNDg3OC1iZGZmLWUwOGI2MTgxZWRiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUEJAbaIDANBgkqhkiG9w0BAQsFAAOCAQEAjjOCmuyv8Mk9Cz61mS9z ydTpxvuQ2nFy0bMktJ6mIm/t4B8BQk7wGZ0Gj+tutZmpOxWRqxhMfQX2cpuOCdjk Q0xGc7i+ISyi6NVI59axHxXfznmUsjnAL2bC2CYtF4Qb0QCmBegpSxdZa+9IRXlF X4/H/AEXf9Yykt9BDiP+I14bav2VRrxqbDmZm++StIQokrxP9q7qxTDyHLmJ4DCf rrSPdF/4GforQ+Pfx2lqkaF25ampEukeU1mtQYGi0iS53NLykqs9aQxmQNFK28a/ OUe7Mg0T9Dmwjtb8oPIP7KCOc06+pXVmRddQXVwW4bmyFAn5EGM2MjiLKC4bwa8M YA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:28 2025 by rpki-client