This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa File: f30265ee-dfe7-4906-974a-06db74656ac8.roa (raw, json) Hash identifier: VXkcxuZunup98+3KYtB8blLJLD5tugEeTTViU6p5hJ8= Subject key identifier: 81:8E:C5:C0:0A:89:0E:08:7E:4D:89:41:9D:C8:19:C4:EA:5D:D7:B7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3928A7479E35C885BBC816961272863B3DEFA59E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa Signing time: Sun 30 Nov 2025 00:00:56 +0000 ROA not before: Sun 30 Nov 2025 00:00:56 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:28:a7:47:9e:35:c8:85:bb:c8:16:96:12:72:86:3b:3d:ef:a5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:00:56 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=5a53f6807a66142af09004bcd7e3242203f6f0863f656f741635b9f34300ceb0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:60:80:f7:08:c6:16:f4:f4:22:38:32:40: 6c:74:98:2a:6b:6b:6b:a3:15:62:51:0c:b4:dc:84: f9:f4:10:b1:f3:d2:63:2b:80:dd:44:91:6b:6c:91: 3b:34:5d:b1:9f:d7:bb:d4:02:58:e7:fc:c2:ca:b5: ce:4a:11:ea:29:dc:a5:4f:98:a0:6b:b9:82:87:93: c4:26:88:3a:e2:8b:c0:e8:a2:49:f8:ec:76:12:91: fc:b0:80:05:c8:79:5c:56:c2:f6:f0:c1:39:3c:ef: 24:5a:d7:39:b9:a8:75:25:7a:b0:6d:cd:df:da:ff: 0c:56:bd:a9:c1:bd:65:48:30:1d:bd:09:35:e7:40: 65:91:e3:1d:1d:31:c0:f2:52:b7:0f:ac:42:d0:d2: 8f:eb:36:a3:34:08:43:bf:29:f9:2b:2f:4d:8e:71: 5b:37:92:61:4d:29:08:23:a5:8d:8e:3f:fa:71:d1: cd:41:72:bc:77:aa:60:89:d2:23:dc:dc:3e:68:23: dc:80:73:a6:a6:61:01:5e:09:7b:a4:f0:9f:7b:bf: fd:69:8b:f6:d8:79:ed:bb:3a:04:34:ac:dd:cf:63: fc:18:0e:a4:e3:40:e8:ae:c4:19:c2:88:c1:ff:b1: 32:ef:90:d9:1c:9b:d5:b7:5f:77:d6:d3:d3:6c:f2: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8E:C5:C0:0A:89:0E:08:7E:4D:89:41:9D:C8:19:C4:EA:5D:D7:B7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption 17:bb:82:0f:d9:c2:4f:ba:2d:b8:df:fc:bd:72:f9:aa:87:b4: bc:aa:86:4e:04:20:18:69:36:b1:7f:7f:98:31:8c:e5:5b:53: 89:03:0e:95:44:bd:3b:ee:a5:f3:31:a9:c5:ab:bd:f8:be:72: 1e:26:8c:ee:7a:a4:08:28:04:7f:a4:e5:44:15:71:41:76:e5: ba:47:9f:df:0b:0c:d8:eb:3f:c5:74:8f:01:6c:e2:8c:e9:c6: 4b:bd:d0:c7:ba:62:74:a2:27:ad:af:1f:ea:dd:10:18:27:29: 37:51:c7:f9:c1:b0:bb:46:6a:86:78:ec:d3:95:51:2b:80:9d: 0e:84:d7:fb:06:39:d0:dc:a0:0d:b5:e0:f3:90:37:ad:f9:cf: 80:01:94:45:81:21:42:2a:13:34:a4:fa:11:42:c2:39:38:5d: 9c:b0:71:59:01:04:44:da:48:e1:b3:27:e8:59:40:08:04:12: e2:1d:59:20:e7:48:96:bc:78:64:79:20:cb:af:bb:69:22:80: e2:9c:1b:a0:65:01:2b:f5:23:d9:a0:4d:db:7f:4c:20:8f:25: 15:65:e9:83:c4:a8:a8:49:66:90:eb:df:4d:ef:75:d5:79:e3: c1:2c:60:88:89:2a:d6:1c:2a:61:62:d2:e5:b5:92:30:96:70: 02:df:df:71 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOSinR541yIW7yBaWEnKGOz3vpZ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEzMDAwMDA1NloX DTI2MDIyODIzNTk1OVowejFJMEcGA1UEBRNANWE1M2Y2ODA3YTY2MTQyYWYwOTAw NGJjZDdlMzI0MjIwM2Y2ZjA4NjNmNjU2Zjc0MTYzNWI5ZjM0MzAwY2ViMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UNggPcIxhb09CI4MkBsdJgqa2tr oxViUQy03IT59BCx89JjK4DdRJFrbJE7NF2xn9e71AJY5/zCyrXOShHqKdylT5ig a7mCh5PEJog64ovA6KJJ+Ox2EpH8sIAFyHlcVsL28ME5PO8kWtc5uah1JXqwbc3f 2v8MVr2pwb1lSDAdvQk150BlkeMdHTHA8lK3D6xC0NKP6zajNAhDvyn5Ky9NjnFb N5JhTSkII6WNjj/6cdHNQXK8d6pgidIj3Nw+aCPcgHOmpmEBXgl7pPCfe7/9aYv2 2HntuzoENKzdz2P8GA6k40DorsQZwojB/7Ey75DZHJvVt1931tPTbPIEXQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIGOxcAKiQ4Ifk2JQZ3IGcTqXde3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzMDI2NWVlLWRmZTctNDkwNi05NzRhLTA2ZGI3NDY1NmFjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMCgMA0GCSqGSIb3DQEBCwUAA4IBAQAXu4IP2cJPui243/y9 cvmqh7S8qoZOBCAYaTaxf3+YMYzlW1OJAw6VRL077qXzManFq734vnIeJozueqQI KAR/pOVEFXFBduW6R5/fCwzY6z/FdI8BbOKM6cZLvdDHumJ0oietrx/q3RAYJyk3 Ucf5wbC7RmqGeOzTlVErgJ0OhNf7BjnQ3KANteDzkDet+c+AAZRFgSFCKhM0pPoR QsI5OF2csHFZAQRE2kjhsyfoWUAIBBLiHVkg50iWvHhkeSDLr7tpIoDinBugZQEr 9SPZoE3bf0wgjyUVZemDxKioSWaQ699N73XVeePBLGCIiSrWHCphYtLltZIwlnAC 399x -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:54 2025 by rpki-client