This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa File: 4d62567a-b0b0-4bb9-96ac-078c8832194f.roa (raw, json) Hash identifier: VEBkJ7dErUQzUrMVXl39rLn6wx1et6bhOvNzUTNt8+8= Subject key identifier: 8F:F4:1A:B7:61:13:22:C7:34:1A:0D:80:21:93:2D:04:84:71:14:7F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5CBCFB4847F9E7EF1B0D608393A84B6052C5BFD3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa Signing time: Thu 04 Dec 2025 00:10:04 +0000 ROA not before: Thu 04 Dec 2025 00:10:04 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bc:fb:48:47:f9:e7:ef:1b:0d:60:83:93:a8:4b:60:52:c5:bf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:10:04 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=b38b2b0bcf7bf41fdcc4ec5f07623de357942c593b25282907717319ee779cfc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d6:3b:d7:9c:18:f9:d6:3c:10:fc:f6:b0:54: 69:7f:23:75:f2:b8:97:2e:35:84:ef:1c:de:3a:16: 41:ca:8a:bf:10:1f:8d:3d:8e:68:c0:af:f5:d5:dc: f4:89:d8:57:ba:e5:67:08:51:9e:d5:b2:d2:80:e0: 5b:28:2c:18:7e:19:74:1d:30:b4:56:0b:16:0e:51: 4f:97:9b:00:5e:85:23:72:a0:ef:72:98:0d:d4:6e: d0:b9:cf:af:c0:83:6e:9f:c4:bb:89:0a:6d:d4:22: cb:87:04:c9:07:ce:09:63:00:d2:fa:fb:e7:ec:2e: b5:25:78:f3:8e:23:2e:77:1c:36:a0:09:9d:0c:d5: 3c:82:61:57:70:d3:bf:bc:a4:72:47:c4:e9:9b:b2: 9b:61:c1:53:8a:5a:54:50:9a:37:8a:24:8c:11:13: 63:b1:3c:0b:30:29:66:8d:27:71:a8:df:2f:76:95: 34:00:bd:3e:e3:f3:78:cc:a1:d4:10:a0:f9:d5:ed: d9:43:92:ac:5d:9d:db:ef:96:b6:de:03:b5:62:35: 9e:93:75:09:af:7a:e6:cc:09:28:61:2b:87:e5:cd: 15:7a:b1:67:5d:aa:01:f0:d1:01:bc:fc:bc:9e:30: c0:4d:df:49:f0:13:31:6b:d6:00:bb:92:52:c5:49: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F4:1A:B7:61:13:22:C7:34:1A:0D:80:21:93:2D:04:84:71:14:7F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8000::/38 Signature Algorithm: sha256WithRSAEncryption a2:f7:3d:5e:76:7e:b8:40:aa:9a:89:ea:e8:aa:d0:48:bf:b3: aa:f1:27:a8:73:28:61:96:35:20:bc:8f:d1:21:24:bf:1b:2f: b5:c8:9b:ad:8d:2a:aa:97:b0:23:dc:8b:01:d1:64:2b:a0:97: 40:b5:3d:78:e2:be:d2:78:7c:7a:a1:65:2d:c5:ca:83:28:08: 3c:1e:af:1c:c5:f4:dd:52:36:42:cf:36:db:1c:6c:b6:ef:8d: be:a8:df:a9:2f:89:25:2b:27:5b:b3:c2:7c:a6:34:42:a3:71: 4e:84:27:b6:3e:aa:28:a8:7a:e0:65:6f:6a:ed:27:10:24:5f: ee:00:79:57:04:c8:df:88:76:0d:e2:43:d2:7f:30:b2:0b:aa: 5e:a1:7e:77:26:66:3a:d6:f2:2d:23:51:ec:7a:c1:cf:ab:32: 59:70:4a:e5:8f:17:ec:e6:cf:41:b3:ae:c5:0f:15:f6:5e:77: cb:f8:c6:ae:e8:87:cd:1a:87:8d:5a:32:92:85:9d:5f:6b:a6: 70:31:3d:f0:8c:45:f8:be:8a:6b:21:2b:8a:89:af:21:68:08: da:6c:64:47:77:af:40:72:9b:c4:a3:71:6e:f4:a3:71:c6:80: dd:45:ca:94:ae:57:9a:34:28:34:d7:f5:bb:de:f5:63:c3:1b: 57:03:c9:1c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXLz7SEf55+8bDWCDk6hLYFLFv9MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMTAwNFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAYjM4YjJiMGJjZjdiZjQxZmRjYzRl YzVmMDc2MjNkZTM1Nzk0MmM1OTNiMjUyODI5MDc3MTczMTllZTc3OWNmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tY715wY+dY8EPz2sFRpfyN18riX LjWE7xzeOhZByoq/EB+NPY5owK/11dz0idhXuuVnCFGe1bLSgOBbKCwYfhl0HTC0 VgsWDlFPl5sAXoUjcqDvcpgN1G7Quc+vwINun8S7iQpt1CLLhwTJB84JYwDS+vvn 7C61JXjzjiMudxw2oAmdDNU8gmFXcNO/vKRyR8Tpm7KbYcFTilpUUJo3iiSMERNj sTwLMClmjSdxqN8vdpU0AL0+4/N4zKHUEKD51e3ZQ5KsXZ3b75a23gO1YjWek3UJ r3rmzAkoYSuH5c0VerFnXaoB8NEBvPy8njDATd9J8BMxa9YAu5JSxUlRywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI/0GrdhEyLHNBoNgCGTLQSEcRR/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRkNjI1NjdhLWIwYjAtNGJiOS05NmFjLTA3OGM4ODMyMTk0Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIAwDQYJKoZIhvcNAQELBQADggEBAKL3PV52frhAqpqJ6uiq 0Ei/s6rxJ6hzKGGWNSC8j9EhJL8bL7XIm62NKqqXsCPciwHRZCugl0C1PXjivtJ4 fHqhZS3FyoMoCDwerxzF9N1SNkLPNtscbLbvjb6o36kviSUrJ1uzwnymNEKjcU6E J7Y+qiioeuBlb2rtJxAkX+4AeVcEyN+Idg3iQ9J/MLILql6hfncmZjrW8i0jUex6 wc+rMllwSuWPF+zmz0GzrsUPFfZed8v4xq7oh80ah41aMpKFnV9rpnAxPfCMRfi+ imshK4qJryFoCNpsZEd3r0Bym8SjcW70o3HGgN1FypSuV5o0KDTX9bve9WPDG1cD yRw= -----END CERTIFICATE-----Generated at Mon Dec 22 00:48:06 2025 by rpki-client