This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa File: eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa (raw, json) Hash identifier: AgUzdn8jE94utptNPow5EV910OvcEO3+jR5DvAOmBDM= Subject key identifier: F3:F4:1A:14:06:83:50:A5:61:81:C3:35:9E:62:E3:16:B5:69:2E:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62A6A2EFD9B82FDD4AB994187EEBFA439824025C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa Signing time: Thu 04 Dec 2025 00:11:01 +0000 ROA not before: Thu 04 Dec 2025 00:11:01 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a6:a2:ef:d9:b8:2f:dd:4a:b9:94:18:7e:eb:fa:43:98:24:02:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:11:01 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=1067d62d6ce580abb403eaf3e64b888294720389f8539b167ef188a1435d8291, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:2b:84:5e:69:08:37:0f:a2:20:66:82:44: 2e:d7:6f:c4:b7:1b:62:93:fc:9b:df:53:88:c9:1d: e9:7b:6b:19:62:91:e1:e0:b1:82:64:4c:1d:29:8f: 01:8a:af:1b:ec:e9:1d:00:5d:d5:2f:e9:29:45:2d: a1:ba:f4:ad:4d:ec:3f:29:c1:c7:94:2f:2a:1f:b0: bc:c8:4a:0c:59:19:6f:f0:16:2e:b9:83:5f:de:7b: 11:22:2b:17:73:65:bd:42:ab:aa:bf:f6:25:21:3e: 90:e6:32:2f:9c:6f:5c:81:e1:5b:a5:83:2a:d1:0d: 8a:7a:2f:77:40:4c:11:df:7b:00:c2:01:36:93:63: a0:98:17:6b:bf:9f:ef:32:9f:6b:57:02:c4:d7:a4: 0d:4b:13:42:57:f6:e1:18:e7:2f:a9:c9:73:1a:91: 70:e2:9f:96:3f:e2:05:8b:ac:40:cc:1e:5f:f7:5c: e1:62:f3:c9:d3:87:96:b3:ef:1f:a2:00:2f:b1:d5: 13:e8:74:94:75:de:80:7b:ec:b3:4a:8e:19:78:a4: a0:c8:09:4d:5a:15:32:43:98:16:9d:b8:a2:40:59: 35:68:de:e0:8e:45:c2:e7:a2:1d:3d:ab:3c:ed:6e: 94:12:9e:30:8c:b9:c6:4c:ec:e9:34:16:85:9b:0e: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F4:1A:14:06:83:50:A5:61:81:C3:35:9E:62:E3:16:B5:69:2E:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:800::/40 Signature Algorithm: sha256WithRSAEncryption a9:7c:8e:cf:6a:93:1e:30:c1:8a:5c:44:59:28:f4:3e:20:a4: 33:ef:85:63:da:6a:c9:24:bd:6a:b9:0c:45:ce:26:86:58:9f: e7:b9:4a:56:67:c7:78:a1:ff:2c:dc:48:da:1c:d7:96:21:94: 3a:4d:c1:a8:f6:f7:5e:97:e2:3c:50:ee:2d:ad:4a:81:8c:9d: 9b:8b:65:84:22:26:d3:9e:08:6f:56:fc:46:e2:ca:d1:82:f4: e2:91:80:fa:3a:50:6b:13:1f:4e:0f:fe:e4:7a:29:14:70:15: 82:4c:8d:c1:71:81:be:07:5f:53:c6:62:f0:b2:a4:e2:4f:cb: 4e:e4:8b:ec:30:3f:6b:44:1a:8b:11:23:a6:a3:e4:8e:33:a5: 0c:c0:a4:b3:e1:bb:21:e8:cd:e3:b9:0e:81:c3:84:36:65:f2: 82:17:f2:d6:d0:9c:bf:51:03:48:6c:b5:0c:f3:31:b1:e1:83: 32:dd:e1:f2:67:4a:11:b8:3a:32:97:69:5e:c0:5a:fe:84:3a: 2c:3c:d0:5d:fd:c0:af:c6:b6:6d:d8:41:9e:80:0a:db:92:eb: ed:3d:5a:9c:b8:4d:8b:22:b1:cf:f1:5a:02:69:1d:f3:63:3f: b4:0d:44:04:60:27:b9:5f:56:ff:bb:70:2c:f4:3c:77:32:2c: 93:6f:72:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYqai79m4L91KuZQYfuv6Q5gkAlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMTEwMVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAMTA2N2Q2MmQ2Y2U1ODBhYmI0MDNl YWYzZTY0Yjg4ODI5NDcyMDM4OWY4NTM5YjE2N2VmMTg4YTE0MzVkODI5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf8rhF5pCDcPoiBmgkQu12/Etxti k/yb31OIyR3pe2sZYpHh4LGCZEwdKY8Biq8b7OkdAF3VL+kpRS2huvStTew/KcHH lC8qH7C8yEoMWRlv8BYuuYNf3nsRIisXc2W9Qquqv/YlIT6Q5jIvnG9cgeFbpYMq 0Q2Kei93QEwR33sAwgE2k2OgmBdrv5/vMp9rVwLE16QNSxNCV/bhGOcvqclzGpFw 4p+WP+IFi6xAzB5f91zhYvPJ04eWs+8fogAvsdUT6HSUdd6Ae+yzSo4ZeKSgyAlN WhUyQ5gWnbiiQFk1aN7gjkXC56IdPas87W6UEp4wjLnGTOzpNBaFmw4TiQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPP0GhQGg1ClYYHDNZ5i4xa1aS7TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VlYzdhZDVlLWY2NTYtNGViYy04YmUyLWMzYTQyZmQwMDNjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNggwDQYJKoZIhvcNAQELBQADggEBAKl8js9qkx4wwYpcRFko 9D4gpDPvhWPaaskkvWq5DEXOJoZYn+e5SlZnx3ih/yzcSNoc15YhlDpNwaj2916X 4jxQ7i2tSoGMnZuLZYQiJtOeCG9W/EbiytGC9OKRgPo6UGsTH04P/uR6KRRwFYJM jcFxgb4HX1PGYvCypOJPy07ki+wwP2tEGosRI6aj5I4zpQzApLPhuyHozeO5DoHD hDZl8oIX8tbQnL9RA0hstQzzMbHhgzLd4fJnShG4OjKXaV7AWv6EOiw80F39wK/G tm3YQZ6ACtuS6+09Wpy4TYsisc/xWgJpHfNjP7QNRARgJ7lfVv+7cCz0PHcyLJNv cn0= -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:34 2025 by rpki-client