This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa File: f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa (raw, json) Hash identifier: k48+v1wkXsaMYhYVVxs962/gSj7/s2asdpGXuf1Psl4= Subject key identifier: C3:DC:17:2B:7B:E0:2D:34:BA:F0:CA:49:CD:3E:FF:1D:8E:3D:7E:64 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12B7C7CA8A2CAB41CCFF4C9CA2C7CE10BE0181D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa Signing time: Tue 02 Dec 2025 00:01:11 +0000 ROA not before: Tue 02 Dec 2025 00:01:11 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b7:c7:ca:8a:2c:ab:41:cc:ff:4c:9c:a2:c7:ce:10:be:01:81:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:01:11 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=e9d0a5a934b23679b81b213cc9d39c9f041c70d28aa36fbe8e0f2c1eecfd31be, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:b9:a1:43:59:07:1a:2a:d3:02:c9:18:24: 59:ac:d0:f5:53:67:8b:a0:ab:b3:8a:eb:6d:94:f8: 07:b1:33:6f:47:33:62:22:8c:17:ff:ce:74:b9:fe: bf:49:22:d6:cb:4f:2a:91:2f:3a:0f:1f:d6:ce:ae: 18:fe:da:9c:71:2d:a3:f7:14:69:ed:c5:4e:58:21: 5f:28:d3:f8:fb:ed:44:6f:d8:a9:f4:3e:74:70:80: 4f:4c:54:eb:ac:23:a1:60:7c:d9:1e:58:a4:5b:f7: 07:73:fb:bd:ac:5b:b8:c7:ce:12:27:78:67:e1:9e: 20:4c:e2:ea:53:e4:9b:77:27:4f:ec:45:dd:87:11: 21:13:5e:6a:9f:cd:0c:d6:f0:3f:22:80:7d:e0:6c: 58:70:1c:31:a3:a6:b9:f0:80:3a:a4:e9:a2:93:58: 48:96:4e:c8:55:6a:b1:44:b0:e8:b7:7d:b2:d0:39: 6d:78:6a:8c:3f:6c:da:42:43:7b:d0:4c:cf:50:ac: 62:e8:d1:f0:32:0b:7d:10:dd:db:3e:c5:6e:03:aa: 5c:ef:8d:13:c4:96:fb:c1:4f:61:aa:5a:02:42:21: 44:cf:d1:2d:46:0b:1a:c1:b4:21:6a:7d:13:45:21: f5:3a:ce:c5:b7:1b:96:e0:2b:ca:93:a3:ac:86:00: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:17:2B:7B:E0:2D:34:BA:F0:CA:49:CD:3E:FF:1D:8E:3D:7E:64 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4020::/48 Signature Algorithm: sha256WithRSAEncryption 05:f5:05:5f:db:8d:30:28:1c:71:a4:f6:0e:88:21:96:91:47: 46:9d:bb:63:ed:b6:f8:f4:9a:28:ff:41:ad:71:ae:15:2a:b1: 25:a0:13:7b:38:46:b4:39:7d:84:5c:bf:cf:66:21:b8:7b:56: 99:c2:89:74:5e:01:82:9c:e3:78:06:c0:00:b9:58:17:50:8d: 4c:c6:5f:ba:59:48:15:66:5a:50:79:e5:f2:48:fa:39:62:2f: 84:b4:3e:a0:4d:77:bf:de:ab:af:70:30:30:07:f9:81:42:71: 71:c6:21:6d:66:fd:a1:a0:f2:6b:4f:9e:5c:a4:34:bc:a1:49: 82:e2:b2:ea:a0:7b:83:83:b2:3a:93:43:f4:44:b3:4d:43:6a: a0:c9:5c:fe:04:6d:e7:34:c0:d1:85:a4:77:7a:72:77:ad:85: 4f:93:23:41:dd:39:09:0c:45:51:5b:54:29:12:30:c6:2c:06: 21:2f:d6:b5:3d:59:96:c8:de:27:4f:54:b1:4c:a3:23:1f:3b: f4:69:62:af:c1:32:6a:fa:1e:9f:4d:dd:73:a1:a6:70:ec:8e: f0:07:10:f1:bd:c3:21:61:52:2e:96:94:fa:ee:c1:42:79:25: 00:3a:56:1b:76:f3:b4:75:c9:07:7c:43:40:b9:e6:a5:3e:a7: 42:bc:06:1e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUErfHyoosq0HM/0ycosfOEL4BgdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDExMVoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAZTlkMGE1YTkzNGIyMzY3OWI4MWIy MTNjYzlkMzljOWYwNDFjNzBkMjhhYTM2ZmJlOGUwZjJjMWVlY2ZkMzFiZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVy5oUNZBxoq0wLJGCRZrND1U2eL oKuziuttlPgHsTNvRzNiIowX/850uf6/SSLWy08qkS86Dx/Wzq4Y/tqccS2j9xRp 7cVOWCFfKNP4++1Eb9ip9D50cIBPTFTrrCOhYHzZHlikW/cHc/u9rFu4x84SJ3hn 4Z4gTOLqU+SbdydP7EXdhxEhE15qn80M1vA/IoB94GxYcBwxo6a58IA6pOmik1hI lk7IVWqxRLDot32y0DlteGqMP2zaQkN70EzPUKxi6NHwMgt9EN3bPsVuA6pc740T xJb7wU9hqloCQiFEz9EtRgsawbQhan0TRSH1Os7FtxuW4CvKk6OshgDaJwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMPcFyt74C00uvDKSc0+/x2OPX5kMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3ZWM4NTUyLTdkZGItNDk3OC1iYjhjLWZjOTdkMDYyNWI0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEAgMA0GCSqGSIb3DQEBCwUAA4IBAQAF9QVf240wKBxxpPYO iCGWkUdGnbtj7bb49Joo/0Gtca4VKrEloBN7OEa0OX2EXL/PZiG4e1aZwol0XgGC nON4BsAAuVgXUI1Mxl+6WUgVZlpQeeXySPo5Yi+EtD6gTXe/3quvcDAwB/mBQnFx xiFtZv2hoPJrT55cpDS8oUmC4rLqoHuDg7I6k0P0RLNNQ2qgyVz+BG3nNMDRhaR3 enJ3rYVPkyNB3TkJDEVRW1QpEjDGLAYhL9a1PVmWyN4nT1SxTKMjHzv0aWKvwTJq +h6fTd1zoaZw7I7wBxDxvcMhYVIulpT67sFCeSUAOlYbdvO0dckHfENAuealPqdC vAYe -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:34 2025 by rpki-client