This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa File: f872164c-416d-44ed-81ce-172f02efdfbf.roa (raw, json) Hash identifier: 42FGX5NF/g9AHeuUxI4lNjx4tipqTXFZh4ZEJu5gmh0= Subject key identifier: DB:92:EA:49:07:F8:D4:EA:B9:DF:DB:26:42:C8:14:07:5E:4E:D1:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E96B7764DAF6A3C0BDBF2ACB683C397484704D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa Signing time: Tue 25 Nov 2025 00:00:10 +0000 ROA not before: Tue 25 Nov 2025 00:00:10 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da26::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:96:b7:76:4d:af:6a:3c:0b:db:f2:ac:b6:83:c3:97:48:47:04:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 25 00:00:10 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=4dd9a14fe439eeb6e24b484820c1ba51529d3f6d8381f12d344e38355b66fb3a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:79:41:c9:e1:ee:ab:d1:a7:ea:f2:fc:1d:f7: 5e:95:70:7c:63:ee:a7:d2:88:54:dc:14:5e:c6:ad: 82:94:16:80:66:27:18:b9:f3:83:9a:19:ca:29:c1: ca:b8:28:c2:60:00:08:36:4f:28:5a:a2:0c:09:b9: dc:0d:f0:66:1f:0c:45:44:ad:dc:05:10:ce:ca:d1: 8d:e4:c0:83:62:fb:bb:70:de:b4:fb:5b:43:8e:e5: 0a:2b:36:ba:d5:07:1f:56:14:4d:ee:02:dc:5a:f1: be:4a:3a:c7:59:29:7a:cc:48:61:d9:e2:c5:34:ec: 95:7f:1d:5c:8a:2f:dd:dc:cb:f1:bd:56:94:b2:51: d4:76:c9:d6:c5:26:06:0e:2b:e5:ad:d6:90:67:d5: 6e:c5:0e:3b:9d:c0:05:3c:2f:b8:e8:03:31:27:ba: fd:cd:bd:23:b7:38:bb:4f:5f:ff:02:95:ce:6d:e6: a0:bb:97:7f:dc:a7:7a:e7:08:e5:ca:20:d8:dd:84: a5:b0:0e:4a:71:04:0b:67:3b:e2:c9:f2:0b:06:e5: ab:42:d4:c3:f0:cb:63:15:33:99:58:51:8f:5d:07: d1:c6:18:ab:57:ac:ee:22:89:2f:7f:0d:c5:31:06: ad:5a:e3:0c:da:20:71:ec:2a:92:97:92:89:33:a7: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:92:EA:49:07:F8:D4:EA:B9:DF:DB:26:42:C8:14:07:5E:4E:D1:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da26::/36 Signature Algorithm: sha256WithRSAEncryption 1f:84:46:49:8e:57:86:f4:35:fe:1f:6b:37:02:ef:f7:9f:08: 74:8f:f6:0d:a1:d9:5c:2e:64:9e:44:8f:3f:b9:6e:21:a7:f9: 48:5f:c0:af:68:2f:e9:9a:57:df:7f:56:a8:08:4d:82:d3:15: d6:5e:57:d8:cd:c9:2b:4f:a4:b4:9a:e3:6b:6c:3a:cd:88:3f: b0:06:39:48:44:50:ac:65:28:ad:8b:5d:d3:09:1d:84:87:83: e1:b0:ea:d1:05:b8:74:00:5d:53:ac:47:6d:24:04:39:26:09: b6:f9:2f:97:30:99:5f:20:53:bb:71:0d:ba:ff:bd:25:9e:31: e4:d5:6f:e5:12:51:a8:07:7c:98:35:14:fe:0a:4e:53:06:51: 24:84:48:c1:8a:32:ea:3a:f1:c3:45:4c:a6:49:c2:95:8a:42: 70:d8:a1:bb:64:f0:19:00:1a:cf:90:49:9d:60:d7:d1:6a:4b: da:c7:0d:6b:24:28:3e:10:2e:62:67:83:d7:fe:d7:aa:82:fb: ac:28:c4:ce:5b:04:72:5c:18:1a:3a:78:b9:cc:85:9d:ac:f2: 64:9d:c2:a4:2b:20:13:25:d7:00:99:d3:1a:78:7a:f7:bf:d0: 65:9d:7e:93:06:f9:18:30:13:99:af:c7:f1:49:d8:b0:48:44: 4d:fc:b6:58 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbpa3dk2vajwL2/KstoPDl0hHBNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyNTAwMDAxMFoX DTI2MDIyMzIzNTk1OVowejFJMEcGA1UEBRNANGRkOWExNGZlNDM5ZWViNmUyNGI0 ODQ4MjBjMWJhNTE1MjlkM2Y2ZDgzODFmMTJkMzQ0ZTM4MzU1YjY2ZmIzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53lByeHuq9Gn6vL8HfdelXB8Y+6n 0ohU3BRexq2ClBaAZicYufODmhnKKcHKuCjCYAAINk8oWqIMCbncDfBmHwxFRK3c BRDOytGN5MCDYvu7cN60+1tDjuUKKza61QcfVhRN7gLcWvG+SjrHWSl6zEhh2eLF NOyVfx1cii/d3MvxvVaUslHUdsnWxSYGDivlrdaQZ9VuxQ47ncAFPC+46AMxJ7r9 zb0jtzi7T1//ApXObeagu5d/3Kd65wjlyiDY3YSlsA5KcQQLZzviyfILBuWrQtTD 8MtjFTOZWFGPXQfRxhirV6zuIokvfw3FMQatWuMM2iBx7CqSl5KJM6eBSwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNuS6kkH+NTqud/bJkLIFAdeTtFeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y4NzIxNjRjLTQxNmQtNDRlZC04MWNlLTE3MmYwMmVmZGZiZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJgAwDQYJKoZIhvcNAQELBQADggEBAB+ERkmOV4b0Nf4fazcC 7/efCHSP9g2h2VwuZJ5Ejz+5biGn+UhfwK9oL+maV99/VqgITYLTFdZeV9jNyStP pLSa42tsOs2IP7AGOUhEUKxlKK2LXdMJHYSHg+Gw6tEFuHQAXVOsR20kBDkmCbb5 L5cwmV8gU7txDbr/vSWeMeTVb+USUagHfJg1FP4KTlMGUSSESMGKMuo68cNFTKZJ wpWKQnDYobtk8BkAGs+QSZ1g19FqS9rHDWskKD4QLmJng9f+16qC+6woxM5bBHJc GBo6eLnMhZ2s8mSdwqQrIBMl1wCZ0xp4eve/0GWdfpMG+RgwE5mvx/FJ2LBIRE38 tlg= -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:54 2025 by rpki-client