This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa File: 590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa (raw, json) Hash identifier: 0nDG7yluXoupheh/lapwC2OghRnN0A5ByFs3Vw9+rHQ= Subject key identifier: 4C:20:19:78:26:7A:53:04:43:47:E4:71:8C:D4:F0:7B:9A:DF:78:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55C1651D28BB64CB4336046EB7C22D0DFDECA589 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa Signing time: Mon 08 Dec 2025 00:00:09 +0000 ROA not before: Mon 08 Dec 2025 00:00:09 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c1:65:1d:28:bb:64:cb:43:36:04:6e:b7:c2:2d:0d:fd:ec:a5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 8 00:00:09 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=599d972ad7a5785e7b30fe304641fde3c4e17aea51abf94a9c1b34d96f159f56, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7f:8b:fe:76:26:d8:95:f5:db:67:61:eb:79: f1:6f:81:ee:7c:53:75:f2:81:ab:51:18:5e:be:3a: ad:db:1e:42:a1:db:8c:9f:34:41:72:a8:54:22:f9: 73:53:45:21:49:de:47:eb:bc:9e:f9:c1:6f:75:ca: 3d:e5:f0:e5:5e:4c:67:b6:8a:d3:3d:ea:a8:67:68: 90:a5:2d:23:8c:0f:7d:57:eb:24:dc:1d:72:5f:1f: 30:e9:94:86:3c:b3:f5:4c:d5:94:fb:9f:b2:1c:59: 9b:db:ac:72:96:28:46:eb:f7:db:74:9d:7d:a7:7e: 76:9c:2e:eb:af:bf:3f:68:e5:c5:b6:fd:28:f1:2c: 35:f3:0e:f9:e8:3e:e4:f8:eb:6a:d6:c6:da:a8:88: bf:f0:64:0e:2b:12:a4:62:99:76:78:7a:e8:92:01: 18:06:c6:fa:44:eb:11:6a:97:b5:01:e7:fd:82:a9: 16:9a:74:cc:04:76:4d:3e:61:94:c9:dc:17:0b:62: 4c:56:63:3b:e9:54:f7:cf:37:5a:d2:bc:e7:36:da: c3:98:46:95:34:b9:a4:8e:d4:f2:aa:e1:6c:8e:58: 49:a0:32:53:ae:03:78:54:d7:a8:b2:d5:78:b6:5c: c6:70:f0:19:fd:31:d9:4d:cf:b6:15:23:ee:b0:d9: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:19:78:26:7A:53:04:43:47:E4:71:8C:D4:F0:7B:9A:DF:78:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/590bbdd1-35ba-48a7-9d01-91fa16220f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:e000::/40 Signature Algorithm: sha256WithRSAEncryption bc:5c:47:ec:bd:60:73:37:e2:6e:8a:4a:1e:b8:4e:69:17:3b: 48:63:72:be:b2:6e:9c:7f:22:21:94:96:59:6b:c5:c7:c0:c5: 60:ad:03:40:85:bd:5b:c2:c6:46:0e:a8:76:d0:09:23:89:02: 5f:29:d1:d5:21:72:b4:cb:a7:fc:0d:0d:30:c7:2d:2b:7f:37: 17:dc:98:d7:9e:8a:9d:68:40:8f:a1:07:77:53:8b:58:41:f2: a5:9c:0c:cc:15:7f:55:b7:11:c3:f4:90:14:d3:5a:e7:65:a2: 04:84:d9:f5:bc:e4:53:2b:59:85:e1:40:9d:b7:95:dd:79:ab: de:0b:35:32:95:ee:6c:dc:6a:fa:90:66:6b:05:66:8d:52:ea: b6:bf:16:df:c4:32:fd:02:e0:8b:2b:11:12:75:66:e6:58:66: d1:28:6d:ea:d0:cd:f3:55:ff:21:9d:bf:72:ec:5c:66:a7:7a: 02:5d:8f:48:53:cf:03:0d:96:b7:cc:20:a8:ec:2f:a0:19:f9: ef:a0:50:8a:47:10:ed:51:1d:a4:2c:89:0c:ff:03:a2:26:71: 70:1c:1d:b6:85:9d:c8:be:39:85:3d:1b:ce:e2:60:ef:5e:d8: 3d:ab:6f:9f:0b:c9:dc:31:20:c4:f6:40:d3:fe:df:6a:27:81: fe:93:da:57 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVcFlHSi7ZMtDNgRut8ItDf3spYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwODAwMDAwOVoX DTI2MDMwODIzNTk1OVowejFJMEcGA1UEBRNANTk5ZDk3MmFkN2E1Nzg1ZTdiMzBm ZTMwNDY0MWZkZTNjNGUxN2FlYTUxYWJmOTRhOWMxYjM0ZDk2ZjE1OWY1NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93+L/nYm2JX122dh63nxb4HufFN1 8oGrURhevjqt2x5CoduMnzRBcqhUIvlzU0UhSd5H67ye+cFvdco95fDlXkxntorT PeqoZ2iQpS0jjA99V+sk3B1yXx8w6ZSGPLP1TNWU+5+yHFmb26xylihG6/fbdJ19 p352nC7rr78/aOXFtv0o8Sw18w756D7k+Otq1sbaqIi/8GQOKxKkYpl2eHrokgEY Bsb6ROsRape1Aef9gqkWmnTMBHZNPmGUydwXC2JMVmM76VT3zzda0rznNtrDmEaV NLmkjtTyquFsjlhJoDJTrgN4VNeostV4tlzGcPAZ/THZTc+2FSPusNmOIwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEwgGXgmelMEQ0fkcYzU8Hua33irMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU5MGJiZGQxLTM1YmEtNDhhNy05ZDAxLTkxZmExNjIyMGY0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7eAwDQYJKoZIhvcNAQELBQADggEBALxcR+y9YHM34m6KSh64 TmkXO0hjcr6ybpx/IiGUlllrxcfAxWCtA0CFvVvCxkYOqHbQCSOJAl8p0dUhcrTL p/wNDTDHLSt/NxfcmNeeip1oQI+hB3dTi1hB8qWcDMwVf1W3EcP0kBTTWudlogSE 2fW85FMrWYXhQJ23ld15q94LNTKV7mzcavqQZmsFZo1S6ra/Ft/EMv0C4IsrERJ1 ZuZYZtEoberQzfNV/yGdv3LsXGanegJdj0hTzwMNlrfMIKjsL6AZ+e+gUIpHEO1R HaQsiQz/A6ImcXAcHbaFnci+OYU9G87iYO9e2D2rb58LydwxIMT2QNP+32ongf6T 2lc= -----END CERTIFICATE-----Generated at Mon Dec 22 00:48:06 2025 by rpki-client