This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa File: 07bbdcc6-3088-4488-9174-6e4b19fef87e.roa (raw, json) Hash identifier: S0RCg5dsxL8aB42Y9MCF9evJqjumIbQ5bq9zOysv9LA= Subject key identifier: 1A:BD:70:53:B7:02:58:D6:55:2B:19:E4:BB:1E:9B:14:F5:A4:30:9C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 072CA55CCA853E4194F44A2AC76C01D0BFC2BBC7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa Signing time: Mon 08 Dec 2025 00:00:28 +0000 ROA not before: Mon 08 Dec 2025 00:00:28 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2c:a5:5c:ca:85:3e:41:94:f4:4a:2a:c7:6c:01:d0:bf:c2:bb:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 8 00:00:28 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=8c0d2bc5089e19499f4fb22e7d927857af5b101a057c1c5c726bda8cd107d9b0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:f2:9e:b8:e5:f3:44:4c:4e:fc:d7:de:70: 72:a2:4f:08:b1:b8:fd:2b:46:c6:45:22:5e:2a:1a: 23:78:72:45:4f:87:ff:50:1c:f4:07:1e:06:b5:2f: 9d:20:71:3f:8f:eb:29:2e:76:fe:87:12:6b:ec:3d: 31:a2:f2:9b:9f:07:5b:7e:7f:d8:cb:8e:ac:97:9b: 04:ad:65:57:63:1e:15:72:56:bb:31:f5:b7:8f:4d: 5d:7e:ae:b1:f8:b2:da:5b:f9:92:91:1a:7e:bf:23: c1:ac:82:70:25:d9:2e:b6:4f:34:a3:1c:e8:25:46: c1:5d:b4:40:6b:c3:a8:82:b2:ae:7b:19:fd:c9:6a: 7c:24:95:0e:59:2f:43:0e:8b:45:ba:5a:54:bb:6c: 26:ba:75:cd:d3:ab:bf:f5:45:8c:f5:52:60:eb:93: 04:ed:05:b8:f8:46:dd:fd:bc:67:49:02:95:f9:82: c3:65:74:19:f7:b0:99:94:28:a7:c2:a1:28:50:9c: 4c:4a:e6:75:78:7b:29:9e:82:34:4d:5d:0c:c1:a3: 97:48:d6:ba:60:eb:ce:16:61:f6:cc:8a:74:eb:ec: bf:4f:53:f5:53:3f:ba:de:86:63:e2:97:be:fa:3b: 91:31:f0:a4:17:52:a6:b7:0b:fe:bf:04:f3:82:61: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BD:70:53:B7:02:58:D6:55:2B:19:E4:BB:1E:9B:14:F5:A4:30:9C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07bbdcc6-3088-4488-9174-6e4b19fef87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:2000::/40 Signature Algorithm: sha256WithRSAEncryption 67:4c:42:e0:1b:09:bc:0f:82:ed:80:ab:62:53:bb:9b:3c:75: 32:0a:98:4c:16:cf:88:19:12:2c:9f:33:c5:2c:94:32:21:b0: 43:a8:0b:c7:b2:d3:83:1d:ab:de:22:14:f7:ee:39:36:55:82: 57:48:f0:51:d5:83:b2:13:c7:aa:8b:0e:e1:76:31:f8:37:50: 9e:bc:a5:39:1f:c7:6b:b1:46:86:bc:59:2d:04:34:32:5d:9d: 94:35:b6:f4:48:d0:5d:ca:08:56:0c:b5:4f:95:71:9e:00:68: ca:d8:e2:f0:00:88:8d:63:a7:9e:3a:94:95:43:0b:16:38:f7: 45:3e:42:a8:30:eb:b7:b9:47:c3:ff:1d:4e:dd:8f:6d:14:44: fa:02:af:97:ee:e5:cf:5e:c3:e0:84:a3:84:c8:f6:84:c4:ee: 7d:93:74:42:79:81:36:e6:fb:fd:4a:da:9f:9e:78:7e:b3:40: 4f:bc:4e:10:74:d5:c6:15:82:7d:e0:34:a7:96:7c:99:55:28: 50:84:09:a1:e0:d1:14:2e:42:6c:16:16:4f:b5:7c:40:29:2e: 49:9a:34:e4:db:a0:34:08:1b:c7:c0:68:7f:a9:2a:4c:90:a4: b5:c5:0d:db:93:e9:9e:23:df:26:ca:5a:7e:18:0e:50:59:70: cb:77:75:01 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUByylXMqFPkGU9Eoqx2wB0L/Cu8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwODAwMDAyOFoX DTI2MDMwODIzNTk1OVowejFJMEcGA1UEBRNAOGMwZDJiYzUwODllMTk0OTlmNGZi MjJlN2Q5Mjc4NTdhZjViMTAxYTA1N2MxYzVjNzI2YmRhOGNkMTA3ZDliMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvXynrjl80RMTvzX3nByok8Isbj9 K0bGRSJeKhojeHJFT4f/UBz0Bx4GtS+dIHE/j+spLnb+hxJr7D0xovKbnwdbfn/Y y46sl5sErWVXYx4Vcla7MfW3j01dfq6x+LLaW/mSkRp+vyPBrIJwJdkutk80oxzo JUbBXbRAa8OogrKuexn9yWp8JJUOWS9DDotFulpUu2wmunXN06u/9UWM9VJg65ME 7QW4+Ebd/bxnSQKV+YLDZXQZ97CZlCinwqEoUJxMSuZ1eHspnoI0TV0MwaOXSNa6 YOvOFmH2zIp06+y/T1P1Uz+63oZj4pe++juRMfCkF1Kmtwv+vwTzgmErMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBq9cFO3AljWVSsZ5LsemxT1pDCcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3YmJkY2M2LTMwODgtNDQ4OC05MTc0LTZlNGIxOWZlZjg3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7SAwDQYJKoZIhvcNAQELBQADggEBAGdMQuAbCbwPgu2Aq2JT u5s8dTIKmEwWz4gZEiyfM8UslDIhsEOoC8ey04Mdq94iFPfuOTZVgldI8FHVg7IT x6qLDuF2Mfg3UJ68pTkfx2uxRoa8WS0ENDJdnZQ1tvRI0F3KCFYMtU+VcZ4AaMrY 4vAAiI1jp546lJVDCxY490U+Qqgw67e5R8P/HU7dj20URPoCr5fu5c9ew+CEo4TI 9oTE7n2TdEJ5gTbm+/1K2p+eeH6zQE+8ThB01cYVgn3gNKeWfJlVKFCECaHg0RQu QmwWFk+1fEApLkmaNOTboDQIG8fAaH+pKkyQpLXFDduT6Z4j3ybKWn4YDlBZcMt3 dQE= -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:02 2025 by rpki-client