This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32f473f-6108-48c3-a82b-020d5e3371de.roa File: e32f473f-6108-48c3-a82b-020d5e3371de.roa (raw, json) Hash identifier: VYhZuWARCLPevklnEoChsooqNdAUL9zvXAPYWATcOsc= Subject key identifier: DA:BA:03:EC:FC:E4:CC:9C:E3:1F:1B:13:F8:91:4B:B9:67:1C:2D:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 327764B84F3F98C9CE94D5E32ACFB2C4CFC77199 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32f473f-6108-48c3-a82b-020d5e3371de.roa Signing time: Sun 23 Nov 2025 00:20:31 +0000 ROA not before: Sun 23 Nov 2025 00:20:31 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:77:64:b8:4f:3f:98:c9:ce:94:d5:e3:2a:cf:b2:c4:cf:c7:71:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:20:31 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=3f193e58bd530d8f67156b161f5daf32446a87d83cf34a9f9adc5727608f69de, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:87:12:47:f3:cc:df:3d:74:1c:99:64:a6: 5d:4d:47:0c:bb:52:a7:98:c7:05:7e:55:79:ef:73: cc:a0:73:c0:ea:5c:65:0a:50:49:36:f2:6f:54:b3: e3:f0:b5:e2:2a:0a:13:2e:1b:ad:56:1f:fc:4f:43: f5:bc:6a:44:a7:44:49:47:5b:54:15:a2:fc:7a:99: bd:f7:d6:3d:0b:79:d7:87:c0:b5:f1:bb:99:8c:36: 83:84:35:9a:23:cf:cf:bd:2a:f5:95:0e:ce:78:a8: 37:ae:26:80:bf:0d:96:75:4b:b7:67:e5:fc:75:11: a9:22:3c:be:b2:53:07:2a:76:90:34:b6:83:bd:88: 25:80:83:06:00:fb:ec:e7:98:3c:83:47:aa:d0:85: 31:6b:a3:2b:0f:69:25:83:a3:2f:36:40:c2:36:ef: 8c:f5:d0:6e:8f:8d:e9:02:9e:f4:85:f1:62:35:f2: 3a:e6:de:0d:4a:c9:e6:b6:5d:9f:7e:14:59:58:ae: 95:5a:24:c8:d2:f1:e6:2d:ba:86:47:49:30:70:4e: 37:2d:c7:ab:b2:96:15:ab:82:c2:67:f2:3a:92:dc: ca:0c:11:81:ef:d5:1b:3c:30:52:54:20:a2:f6:98: f5:36:4b:4c:e5:58:5f:2b:d6:fc:c0:cf:f3:16:a6: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BA:03:EC:FC:E4:CC:9C:E3:1F:1B:13:F8:91:4B:B9:67:1C:2D:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e32f473f-6108-48c3-a82b-020d5e3371de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:c080::/48 Signature Algorithm: sha256WithRSAEncryption 73:7f:f1:d9:2f:6f:4d:68:3d:fc:fc:1c:0b:88:ab:c5:b2:59: 9b:7d:ae:99:61:1f:80:61:e7:78:88:ca:a7:4f:3f:48:01:ef: 4e:79:fd:d3:50:62:3e:76:c4:c1:14:ab:4c:87:4f:d5:ce:3b: 43:9d:77:6d:5f:83:25:e6:2a:09:6a:c2:e1:4e:80:7e:27:a1: 9b:ee:a4:51:e3:fe:3a:5a:48:9f:8d:ec:55:a4:67:81:b5:de: 22:ad:f1:1f:d2:e7:30:81:36:f8:a1:19:41:6e:1e:b1:b0:2a: 1c:8c:78:ef:be:08:78:a7:60:dd:9b:9d:af:3f:70:c7:71:af: 3b:fd:d4:5e:b7:28:82:86:38:6d:55:2d:03:97:4e:9d:f9:09: b9:b7:2b:05:47:4a:0d:61:bc:e2:33:c8:d4:e3:5b:62:e1:22: 35:40:81:7a:eb:40:b8:50:0d:6e:73:12:ed:7c:9a:f5:b7:57: 4b:d4:fe:b9:d5:b0:13:1c:74:c9:2b:63:85:6f:bf:36:eb:55: 49:29:d3:2f:61:41:2f:b0:6c:da:5e:7e:d0:f8:f1:27:6a:39: 76:ab:24:23:66:83:b1:d6:05:42:72:d8:9f:4b:6b:a4:8f:c4: 27:b2:83:16:b9:84:7f:a6:12:0f:99:0e:75:e9:ff:8e:c2:1e: 95:19:be:d3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMndkuE8/mMnOlNXjKs+yxM/HcZkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMjAzMVoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAM2YxOTNlNThiZDUzMGQ4ZjY3MTU2 YjE2MWY1ZGFmMzI0NDZhODdkODNjZjM0YTlmOWFkYzU3Mjc2MDhmNjlkZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcaHEkfzzN89dByZZKZdTUcMu1Kn mMcFflV573PMoHPA6lxlClBJNvJvVLPj8LXiKgoTLhutVh/8T0P1vGpEp0RJR1tU FaL8epm999Y9C3nXh8C18buZjDaDhDWaI8/PvSr1lQ7OeKg3riaAvw2WdUu3Z+X8 dRGpIjy+slMHKnaQNLaDvYglgIMGAPvs55g8g0eq0IUxa6MrD2klg6MvNkDCNu+M 9dBuj43pAp70hfFiNfI65t4NSsnmtl2ffhRZWK6VWiTI0vHmLbqGR0kwcE43Lcer spYVq4LCZ/I6ktzKDBGB79UbPDBSVCCi9pj1NktM5VhfK9b8wM/zFqYXaQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNq6A+z85Myc4x8bE/iRS7lnHC1EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzMmY0NzNmLTYxMDgtNDhjMy1hODJiLTAyMGQ1ZTMzNzFkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6sCAMA0GCSqGSIb3DQEBCwUAA4IBAQBzf/HZL29NaD38/BwL iKvFslmbfa6ZYR+AYed4iMqnTz9IAe9Oef3TUGI+dsTBFKtMh0/VzjtDnXdtX4Ml 5ioJasLhToB+J6Gb7qRR4/46WkifjexVpGeBtd4irfEf0ucwgTb4oRlBbh6xsCoc jHjvvgh4p2Ddm52vP3DHca87/dRetyiChjhtVS0Dl06d+Qm5tysFR0oNYbziM8jU 41ti4SI1QIF660C4UA1ucxLtfJr1t1dL1P651bATHHTJK2OFb78261VJKdMvYUEv sGzaXn7Q+PEnajl2qyQjZoOx1gVCctifS2ukj8QnsoMWuYR/phIPmQ516f+Owh6V Gb7T -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:40 2025 by rpki-client