This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa File: e9bdc82f-e634-4725-a517-9af23893bdd0.roa (raw, json) Hash identifier: pLeprMUnFMCz6uNNqg0i6a8l/8k6xGbC+3f+ikk2wzE= Subject key identifier: 4F:5A:05:30:FA:9C:3D:06:35:15:4F:10:B2:51:85:55:F2:1F:54:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78DA908CAAE5F2E927FF54161DD64BDB51DAC2BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa Signing time: Wed 03 Dec 2025 00:00:08 +0000 ROA not before: Wed 03 Dec 2025 00:00:08 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:da:90:8c:aa:e5:f2:e9:27:ff:54:16:1d:d6:4b:db:51:da:c2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 3 00:00:08 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=7dace7ae5eedb72b8b4f44ef050d1b4a67913520466385ff28fb10b765cfea39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5a:e4:c5:4b:bb:f1:d7:0e:e9:85:3f:e6:5f: 92:f2:cb:8c:6f:d1:15:c5:88:ac:ee:48:a8:52:2a: c2:af:99:50:1a:47:f7:1f:91:a7:c8:4a:24:60:eb: 8b:8c:91:5d:9f:be:9c:4a:db:6a:82:91:3a:53:c3: cb:9d:df:9d:7f:19:6a:27:7c:2c:1d:c5:1a:be:3c: f1:22:6d:67:c9:7a:76:0f:cb:27:96:9a:f9:cd:1c: 49:46:bf:22:3e:ca:07:01:c8:53:99:2f:d7:a0:73: 15:54:22:77:b4:46:f1:96:b4:d5:8d:f4:0d:41:06: 9f:46:5d:0c:45:fc:f9:2a:00:2c:dd:af:29:a3:da: f6:7a:85:27:a7:2d:7a:b1:c4:3c:46:3d:a0:ab:05: 64:de:1f:0e:01:1b:9b:4c:32:b8:a7:82:b7:2a:fe: 79:42:43:13:f7:73:5d:28:ce:96:13:8e:a9:fc:34: b8:a5:62:69:58:21:a7:32:23:dd:39:11:ac:cc:48: 0a:db:45:96:d6:74:f9:a5:ea:d3:c2:d7:4e:7a:36: b4:2e:c4:4d:5b:08:c5:bf:31:b1:75:00:3e:50:4a: 61:86:e0:e9:60:2f:57:3e:41:c4:3e:c5:b2:9f:aa: f8:e4:6a:bf:24:1e:65:b3:f7:63:ba:ff:80:ed:19: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5A:05:30:FA:9C:3D:06:35:15:4F:10:B2:51:85:55:F2:1F:54:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e9bdc82f-e634-4725-a517-9af23893bdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2000::/40 Signature Algorithm: sha256WithRSAEncryption 9d:ce:e5:f2:d8:fd:ed:3b:84:47:ea:48:89:58:79:ef:1e:8f: 0e:ce:26:71:20:57:8d:70:20:23:d2:0f:c6:1d:d2:b0:d9:a0: 02:0f:bb:f6:3f:11:3c:1d:79:bf:b2:a0:eb:a2:09:0c:b3:08: 26:b0:5c:7b:83:5e:f4:30:b9:3a:cc:e7:09:4a:00:5e:a4:d4: 64:5b:ea:dd:b3:53:b4:a4:7a:56:2e:12:f1:8f:64:cb:e5:b0: fd:a4:4a:f2:c6:46:d8:c3:71:91:22:7f:eb:0b:a5:c9:d3:9a: 0f:83:5c:53:32:63:93:b2:30:70:4f:f5:28:72:55:9c:27:ca: a4:4c:1d:21:1a:b7:23:02:d3:73:02:41:03:82:eb:80:e2:85: ce:27:ff:47:1a:ad:51:be:33:b2:84:1a:3c:01:23:5e:e6:62: 2e:87:9e:a0:55:15:62:47:37:e6:9d:90:c9:ff:3d:87:ba:3d: ad:53:56:63:e1:08:68:c6:85:f2:ba:93:53:fe:66:2a:ad:55: b1:f9:04:97:a4:50:00:32:11:40:3c:4c:aa:28:f5:05:95:60: 88:2c:9e:6e:57:e6:7f:48:98:1f:45:ad:58:2f:ad:03:4d:3f: a8:f5:7c:81:eb:d2:d8:42:ff:b8:9a:61:df:46:50:cd:2e:4e: 9e:af:dc:12 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeNqQjKrl8ukn/1QWHdZL21HawrwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMDAwOFoX DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNAN2RhY2U3YWU1ZWVkYjcyYjhiNGY0 NGVmMDUwZDFiNGE2NzkxMzUyMDQ2NjM4NWZmMjhmYjEwYjc2NWNmZWEzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41rkxUu78dcO6YU/5l+S8suMb9EV xYis7kioUirCr5lQGkf3H5GnyEokYOuLjJFdn76cSttqgpE6U8PLnd+dfxlqJ3ws HcUavjzxIm1nyXp2D8snlpr5zRxJRr8iPsoHAchTmS/XoHMVVCJ3tEbxlrTVjfQN QQafRl0MRfz5KgAs3a8po9r2eoUnpy16scQ8Rj2gqwVk3h8OARubTDK4p4K3Kv55 QkMT93NdKM6WE46p/DS4pWJpWCGnMiPdORGszEgK20WW1nT5perTwtdOeja0LsRN WwjFvzGxdQA+UEphhuDpYC9XPkHEPsWyn6r45Gq/JB5ls/djuv+A7RkuhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE9aBTD6nD0GNRVPELJRhVXyH1TKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U5YmRjODJmLWU2MzQtNDcyNS1hNTE3LTlhZjIzODkzYmRkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8iAwDQYJKoZIhvcNAQELBQADggEBAJ3O5fLY/e07hEfqSIlY ee8ejw7OJnEgV41wICPSD8Yd0rDZoAIPu/Y/ETwdeb+yoOuiCQyzCCawXHuDXvQw uTrM5wlKAF6k1GRb6t2zU7SkelYuEvGPZMvlsP2kSvLGRtjDcZEif+sLpcnTmg+D XFMyY5OyMHBP9ShyVZwnyqRMHSEatyMC03MCQQOC64Dihc4n/0carVG+M7KEGjwB I17mYi6HnqBVFWJHN+adkMn/PYe6Pa1TVmPhCGjGhfK6k1P+ZiqtVbH5BJekUAAy EUA8TKoo9QWVYIgsnm5X5n9ImB9FrVgvrQNNP6j1fIHr0thC/7iaYd9GUM0uTp6v 3BI= -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:28 2025 by rpki-client