This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ec6127-d27d-45b6-9dbe-0c546cb3d8b6.roa File: e1ec6127-d27d-45b6-9dbe-0c546cb3d8b6.roa (raw, json) Hash identifier: n2VncQ5ErzxNCzcCN0Lhe5/roUGGHUES+0q28tWeGZY= Subject key identifier: E9:78:E1:3B:BB:C6:28:B9:14:99:47:CD:1B:DB:58:FE:7E:81:41:BA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CA7035EE963A901FC95E44819F1285555D43831 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ec6127-d27d-45b6-9dbe-0c546cb3d8b6.roa Signing time: Thu 04 Dec 2025 00:21:14 +0000 ROA not before: Thu 04 Dec 2025 00:21:14 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a7:03:5e:e9:63:a9:01:fc:95:e4:48:19:f1:28:55:55:d4:38:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:21:14 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=25c8eaf444c7b238aed6245f9fdc599f271b145e5b89c30ac6c120c2362321b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:a9:65:a9:40:c9:0a:fd:05:8b:32:cf:df: e7:71:e8:22:0d:aa:1a:6f:05:46:66:c2:84:62:0f: e9:f8:af:c2:40:8a:e6:69:bf:ec:4d:8d:c0:a5:c8: fb:bd:c4:ae:4a:3b:83:03:f7:93:7b:43:63:f6:e4: ff:bc:d3:22:ce:84:bf:4c:82:b6:9a:bf:27:ff:7b: 51:f9:3d:72:75:3c:75:23:9b:3e:6f:77:87:77:92: db:ea:ba:93:ba:ed:f6:e0:66:29:e4:c8:08:76:6f: a8:79:00:04:9f:cc:66:d9:04:66:fe:c6:7f:0a:02: de:13:45:4f:77:78:b2:d9:d2:f0:88:54:92:c0:2d: c2:81:ae:7a:17:68:c3:93:de:39:3f:75:8d:e5:55: 48:a2:11:22:d5:94:7d:93:55:b7:34:ec:e0:d7:11: 3c:15:bd:2a:c7:0f:7c:3b:cc:c5:da:af:53:25:54: 94:71:55:bb:47:33:bf:6c:3b:6e:15:a0:cf:20:2a: 29:40:8c:e0:3b:0d:95:54:ea:37:9b:2b:e7:09:d2: 02:3b:fd:c2:5b:1e:26:01:6b:22:b3:27:80:62:5a: 0d:2f:27:60:09:31:59:38:d2:b2:c8:f4:29:84:84: e2:8e:1b:bb:98:db:57:79:89:a9:63:87:8a:36:39: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:78:E1:3B:BB:C6:28:B9:14:99:47:CD:1B:DB:58:FE:7E:81:41:BA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ec6127-d27d-45b6-9dbe-0c546cb3d8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:c000::/40 Signature Algorithm: sha256WithRSAEncryption ae:cb:08:f3:23:17:f8:de:e0:bd:c2:0e:fd:cf:4b:77:83:7f: f7:9b:03:86:4f:a1:f4:aa:74:c0:1d:4c:49:88:29:0e:5e:0f: 92:47:8f:5b:2c:16:d5:71:28:f0:98:6a:08:87:c2:f9:3f:bd: cf:57:4a:64:46:15:c0:f9:9f:94:11:8e:8c:1c:d1:50:fa:08: 05:16:d6:74:c1:5c:fd:d0:4e:ff:fd:86:51:d5:08:1e:49:3d: 86:e2:a0:1a:ec:51:46:83:14:7e:54:42:20:1d:c0:d3:34:6d: d2:e5:7e:41:b2:f1:d9:27:98:60:2a:7f:fd:80:b9:74:2f:90: 0d:03:1e:ac:60:e4:74:61:6d:bd:bb:e9:4e:b1:86:12:0b:1e: ff:75:eb:f1:bd:60:55:5e:04:39:59:d5:1f:9a:14:42:68:4a: 6f:65:f3:67:39:e0:21:6b:7f:83:c8:d7:09:60:4d:35:e7:36: 6f:e6:74:16:2e:64:70:69:16:53:7d:72:31:9c:cf:f7:ef:be: 36:3b:c1:92:c7:cf:74:22:53:09:f7:6c:92:71:02:1f:bb:5c: ef:b4:4b:a1:45:c8:68:4f:31:4a:f9:e8:11:39:2a:1c:dd:62: b5:30:25:cd:eb:d5:38:98:41:4a:7d:89:f4:07:f0:90:b1:11: ee:59:b5:ae -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDKcDXuljqQH8leRIGfEoVVXUODEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMjExNFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAMjVjOGVhZjQ0NGM3YjIzOGFlZDYy NDVmOWZkYzU5OWYyNzFiMTQ1ZTViODljMzBhYzZjMTIwYzIzNjIzMjFiMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknqpZalAyQr9BYsyz9/ncegiDaoa bwVGZsKEYg/p+K/CQIrmab/sTY3Apcj7vcSuSjuDA/eTe0Nj9uT/vNMizoS/TIK2 mr8n/3tR+T1ydTx1I5s+b3eHd5Lb6rqTuu324GYp5MgIdm+oeQAEn8xm2QRm/sZ/ CgLeE0VPd3iy2dLwiFSSwC3Cga56F2jDk945P3WN5VVIohEi1ZR9k1W3NOzg1xE8 Fb0qxw98O8zF2q9TJVSUcVW7RzO/bDtuFaDPICopQIzgOw2VVOo3myvnCdICO/3C Wx4mAWsisyeAYloNLydgCTFZONKyyPQphITijhu7mNtXeYmpY4eKNjnMOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOl44Tu7xii5FJlHzRvbWP5+gUG6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxZWM2MTI3LWQyN2QtNDViNi05ZGJlLTBjNTQ2Y2IzZDhiNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8cAwDQYJKoZIhvcNAQELBQADggEBAK7LCPMjF/je4L3CDv3P S3eDf/ebA4ZPofSqdMAdTEmIKQ5eD5JHj1ssFtVxKPCYagiHwvk/vc9XSmRGFcD5 n5QRjowc0VD6CAUW1nTBXP3QTv/9hlHVCB5JPYbioBrsUUaDFH5UQiAdwNM0bdLl fkGy8dknmGAqf/2AuXQvkA0DHqxg5HRhbb276U6xhhILHv916/G9YFVeBDlZ1R+a FEJoSm9l82c54CFrf4PI1wlgTTXnNm/mdBYuZHBpFlN9cjGcz/fvvjY7wZLHz3Qi Uwn3bJJxAh+7XO+0S6FFyGhPMUr56BE5KhzdYrUwJc3r1TiYQUp9ifQH8JCxEe5Z ta4= -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:08 2025 by rpki-client