This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa File: 070bdab9-7162-422b-9f8a-f8d4ae428be1.roa (raw, json) Hash identifier: ZjXrGviszwTY//L59f2dcaHdDP1Vnf7oJSms6YsILug= Subject key identifier: 47:CC:63:28:79:7D:AC:9E:11:89:0B:AE:42:BF:59:CE:A6:8F:EC:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69F3419CCF22B028FB5A8A27BA6AE0744380E9E0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa Signing time: Wed 10 Dec 2025 00:00:35 +0000 ROA not before: Wed 10 Dec 2025 00:00:35 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f3:41:9c:cf:22:b0:28:fb:5a:8a:27:ba:6a:e0:74:43:80:e9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 10 00:00:35 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a1b768d2243b0e5d199bec46736869783c23eb2a11f1e2580cecec359351179c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:f0:d6:18:d7:f6:63:2a:49:00:86:53:24: d5:bd:3a:bf:29:40:4c:94:c0:e4:26:52:77:6a:ce: 97:03:b9:29:6e:59:d5:7f:d3:c5:0e:74:d0:67:1e: 8d:b8:5e:b8:2e:f3:75:28:12:fd:04:2e:d2:22:19: ff:fa:b9:61:4d:ae:f3:60:85:e7:ca:f4:c7:3a:5b: ed:e9:01:19:5c:7f:9a:ff:9d:4e:1b:2e:73:f3:32: 81:45:97:24:2b:03:91:83:ff:3a:12:e8:fe:54:d8: ce:a7:8d:5c:5d:7c:47:3c:15:c0:e1:c1:b7:92:7d: 58:2e:c2:6e:f9:e0:2d:bd:79:2f:53:63:76:bd:69: c6:b3:98:13:61:bb:2a:1c:f1:2e:1c:ad:22:cb:a0: b0:d0:b6:20:a9:97:d8:0d:87:7d:73:3a:ac:56:04: 8d:3f:88:dd:52:72:da:94:9a:c4:0b:25:f6:99:ca: 6a:60:9d:47:2c:8c:92:86:12:76:29:18:fc:dc:75: bc:06:64:6c:37:91:9d:3b:74:30:09:9f:c5:34:73: 07:6b:51:b6:8f:84:d9:1b:be:5a:61:9d:02:92:57: 5f:ae:2f:65:a3:78:ba:66:2d:c5:d5:be:2b:16:81: 72:7b:f7:0f:81:cd:53:c6:d1:0f:e7:ec:fa:5a:dc: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CC:63:28:79:7D:AC:9E:11:89:0B:AE:42:BF:59:CE:A6:8F:EC:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/37 Signature Algorithm: sha256WithRSAEncryption c5:c8:05:0b:44:03:1a:db:32:c7:74:04:d0:9b:b6:b1:2c:7c: ad:81:85:ca:21:52:d3:9a:64:d4:8b:db:3c:bb:cb:e4:01:00: 0d:fb:4c:32:8f:a8:cd:2d:ab:b3:e6:7c:b5:ce:1a:d1:8d:45: 3f:bb:ac:11:45:06:d6:64:2b:a0:0b:72:27:92:cc:ad:1f:7c: 37:3d:d1:18:3c:ca:71:85:47:b0:f5:d6:06:0a:6b:02:a4:14: 6a:25:a3:94:94:b5:f8:08:90:fa:25:91:20:97:eb:7b:01:8d: cc:f0:19:4e:99:94:48:cd:4e:89:d9:1f:c6:c2:76:e6:b9:49: 12:f2:61:ab:80:b3:c8:05:a3:bb:3b:a3:c0:71:f5:9d:7f:9c: e7:65:77:69:00:bd:70:1f:52:d1:2c:49:90:36:3c:94:6f:c6: 43:9a:cb:94:bc:f4:43:7d:21:6b:06:54:a4:e2:0a:be:d0:99: 9e:f6:a7:5d:e9:b1:98:15:85:31:a9:ba:d0:f3:99:7d:49:76: c4:6a:0f:8f:ce:5f:b9:2a:47:a6:a2:9d:4d:5f:bf:f4:2f:c4: 6f:cc:72:00:d1:fc:f3:2c:55:e1:bf:8d:97:97:bb:db:46:33: 49:5b:76:7c:84:71:73:a5:fa:3d:5a:08:51:85:1a:f7:9b:09: ae:74:ea:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUafNBnM8isCj7WoonumrgdEOA6eAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIxMDAwMDAzNVoX DTI2MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYTFiNzY4ZDIyNDNiMGU1ZDE5OWJl YzQ2NzM2ODY5NzgzYzIzZWIyYTExZjFlMjU4MGNlY2VjMzU5MzUxMTc5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxTw1hjX9mMqSQCGUyTVvTq/KUBM lMDkJlJ3as6XA7kpblnVf9PFDnTQZx6NuF64LvN1KBL9BC7SIhn/+rlhTa7zYIXn yvTHOlvt6QEZXH+a/51OGy5z8zKBRZckKwORg/86Euj+VNjOp41cXXxHPBXA4cG3 kn1YLsJu+eAtvXkvU2N2vWnGs5gTYbsqHPEuHK0iy6Cw0LYgqZfYDYd9czqsVgSN P4jdUnLalJrECyX2mcpqYJ1HLIyShhJ2KRj83HW8BmRsN5GdO3QwCZ/FNHMHa1G2 j4TZG75aYZ0Ckldfri9lo3i6Zi3F1b4rFoFye/cPgc1TxtEP5+z6WtxXcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEfMYyh5fayeEYkLrkK/Wc6mj+zyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3MGJkYWI5LTcxNjItNDIyYi05ZjhhLWY4ZDRhZTQyOGJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAMXIBQtEAxrbMsd0BNCb trEsfK2BhcohUtOaZNSL2zy7y+QBAA37TDKPqM0tq7PmfLXOGtGNRT+7rBFFBtZk K6ALcieSzK0ffDc90Rg8ynGFR7D11gYKawKkFGolo5SUtfgIkPolkSCX63sBjczw GU6ZlEjNTonZH8bCdua5SRLyYauAs8gFo7s7o8Bx9Z1/nOdld2kAvXAfUtEsSZA2 PJRvxkOay5S89EN9IWsGVKTiCr7QmZ72p13psZgVhTGputDzmX1JdsRqD4/OX7kq R6ainU1fv/QvxG/McgDR/PMsVeG/jZeXu9tGM0lbdnyEcXOl+j1aCFGFGvebCa50 6jM= -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:30 2025 by rpki-client