This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa File: 2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa (raw, json) Hash identifier: pas5kHPzznqJ7rvm7Psg9IrmqgGJwscX/jOXffQMgig= Subject key identifier: B8:29:CD:61:0D:E3:05:7A:C3:6E:84:8D:15:B8:84:1F:75:43:DE:B3 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 30458242E68144C9BBBFAF5FED14D1B1CBFB0381 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa Signing time: Sat 06 Dec 2025 00:10:04 +0000 ROA not before: Sat 06 Dec 2025 00:10:04 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f8:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:45:82:42:e6:81:44:c9:bb:bf:af:5f:ed:14:d1:b1:cb:fb:03:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Dec 6 00:10:04 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=3d510b07164a77c43038632d054fffb5bdc0d3a9741fe734d84e1a580e65e905, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:ef:1f:dd:e5:54:6b:c8:d4:1d:11:32:e3: 48:48:0f:b1:35:a7:4a:fe:96:95:3b:53:0c:ec:22: d0:3f:c1:ef:76:93:29:8f:00:ae:fd:08:07:05:a8: 62:32:f0:14:7f:22:de:26:be:a5:c0:78:13:06:62: 47:5c:11:11:07:bf:5b:4c:e0:c8:89:82:55:e3:85: 93:0c:7e:01:bb:0e:d2:3f:7d:d8:42:bc:9b:81:b6: b1:ed:a7:1e:4f:68:49:b9:e2:07:1f:25:60:e0:24: 0b:ac:b7:05:1e:f2:42:23:a4:93:a8:8c:3b:af:26: 2c:42:a5:b5:1c:63:c5:6f:99:11:3b:ce:21:ec:f4: 7a:88:94:76:ec:35:6d:9b:79:d7:8b:a4:e4:49:00: 17:d9:82:9d:f3:8e:1a:c9:e4:c9:32:61:7f:2a:07: 12:2f:6d:34:e3:88:a2:e5:6c:59:45:60:9a:ae:63: 7d:81:ac:00:7b:f2:d4:25:fd:db:e3:bb:af:dd:07: e4:7d:6d:0d:ea:30:c6:9a:7a:8e:ce:08:59:2c:96: 2c:27:71:ac:e1:cb:d6:68:a2:62:3d:7f:97:c2:63: e5:6c:7a:e9:e3:e0:c8:76:f1:4d:64:57:11:83:20: cc:63:bf:72:f3:7b:c8:ef:3e:c6:e3:a2:12:a1:b1: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:29:CD:61:0D:E3:05:7A:C3:6E:84:8D:15:B8:84:1F:75:43:DE:B3 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f8:4000::/40 Signature Algorithm: sha256WithRSAEncryption 16:6d:76:49:45:69:4a:23:67:c6:44:87:be:88:be:51:53:bd: 7e:b6:2f:ae:93:43:26:1a:73:80:b7:16:67:20:d4:02:55:21: 69:02:ce:fc:50:56:5c:46:19:d2:d3:f5:f8:11:b7:dc:c6:fc: c5:01:ad:60:9c:41:12:3e:ac:5f:87:81:05:1a:37:77:2b:94: ba:f0:09:00:7d:89:d7:20:36:30:69:f4:46:22:2a:91:f5:52: 17:c5:0c:13:4d:c5:16:10:7a:36:76:77:a2:78:c0:e4:1c:7b: 89:91:50:76:69:2d:93:6d:64:40:e3:64:d9:67:d6:df:e0:62: bb:75:8b:b8:80:d1:b1:a4:67:72:26:c5:53:21:f8:bb:1a:90: 7b:9a:62:c6:e1:b7:bc:14:92:4c:8b:8a:b7:79:44:11:aa:e5: f1:d1:6f:4e:ac:85:b9:75:4a:42:f0:b4:6d:6f:5d:b6:7f:e6: cc:58:49:9f:4e:86:ef:d6:34:42:c5:0e:3a:1d:93:35:7d:a5: 01:fd:cb:08:19:3b:66:96:8c:40:53:83:b2:18:b9:90:f5:dd: d5:c2:5c:ba:24:b5:e7:56:1a:ae:03:4f:c5:a8:58:b6:2a:cf: c5:fe:d1:15:90:19:a3:b7:ef:a5:2c:d8:bf:ce:1a:8a:17:03: 00:dd:a3:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMEWCQuaBRMm7v69f7RTRscv7A4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MTIwNjAwMTAwNFoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAM2Q1MTBiMDcxNjRhNzdjNDMwMzg2 MzJkMDU0ZmZmYjViZGMwZDNhOTc0MWZlNzM0ZDg0ZTFhNTgwZTY1ZTkwNTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKnvH93lVGvI1B0RMuNISA+xNadK /paVO1MM7CLQP8HvdpMpjwCu/QgHBahiMvAUfyLeJr6lwHgTBmJHXBERB79bTODI iYJV44WTDH4Buw7SP33YQrybgbax7aceT2hJueIHHyVg4CQLrLcFHvJCI6STqIw7 ryYsQqW1HGPFb5kRO84h7PR6iJR27DVtm3nXi6TkSQAX2YKd844ayeTJMmF/KgcS L20044ii5WxZRWCarmN9gawAe/LUJf3b47uv3QfkfW0N6jDGmnqOzghZLJYsJ3Gs 4cvWaKJiPX+XwmPlbHrp4+DIdvFNZFcRgyDMY79y83vI7z7G46ISobG15QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLgpzWEN4wV6w26EjRW4hB91Q96zMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzJjN2RjOTllLTE2YzUtNDMxMi1iNjEzLWFjNDJlOGI1MmYxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+EAwDQYJKoZIhvcNAQELBQADggEBABZtdklFaUojZ8ZEh76I vlFTvX62L66TQyYac4C3Fmcg1AJVIWkCzvxQVlxGGdLT9fgRt9zG/MUBrWCcQRI+ rF+HgQUaN3crlLrwCQB9idcgNjBp9EYiKpH1UhfFDBNNxRYQejZ2d6J4wOQce4mR UHZpLZNtZEDjZNln1t/gYrt1i7iA0bGkZ3ImxVMh+LsakHuaYsbht7wUkkyLird5 RBGq5fHRb06shbl1SkLwtG1vXbZ/5sxYSZ9Ohu/WNELFDjodkzV9pQH9ywgZO2aW jEBTg7IYuZD13dXCXLoktedWGq4DT8WoWLYqz8X+0RWQGaO376Us2L/OGooXAwDd o8U= -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:50 2025 by rpki-client