This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa File: 8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa (raw, json) Hash identifier: cKlghWb1UMPy8nQdlnsw3AYwd0u5kvrGELyDswKOoao= Subject key identifier: FC:96:31:DD:94:26:89:4C:4A:BB:03:3F:56:8C:53:42:83:8B:4E:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 71C2D17E99C23DF9A2FCA7D05C1A60C993FD11B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa Signing time: Tue 02 Dec 2025 00:30:43 +0000 ROA not before: Tue 02 Dec 2025 00:30:43 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c2:d1:7e:99:c2:3d:f9:a2:fc:a7:d0:5c:1a:60:c9:93:fd:11:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:30:43 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=86bc4458ac41dbfd6a955acb8c40a12f38b0b6e4fc48f87ccdef9ce9bb78ef5e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:a1:f5:e4:bc:79:65:b1:dd:d8:fe:0b:d2: 97:15:8c:90:c5:27:86:48:be:55:ad:d9:2c:2f:2e: 05:06:45:8a:1c:89:ab:fa:f8:f5:62:0d:61:98:26: d6:84:23:16:33:1f:fe:73:ca:34:f2:1d:bb:38:bc: e4:04:28:bd:a4:50:93:47:3f:1c:1b:7a:9f:92:5f: b8:68:ee:ba:c5:c3:c9:4a:1b:46:1c:29:c7:f6:51: 7c:83:7e:30:92:38:ba:f6:b5:12:d7:8d:9b:49:44: f0:96:32:e4:e6:c6:09:02:05:95:45:db:df:77:be: 28:fc:93:d1:ce:50:10:ef:4e:61:fa:2e:23:0a:f5: dc:d6:d7:f3:b2:e6:1f:e2:41:47:7b:d4:11:7c:23: 44:96:d4:8b:a7:c1:cd:50:f7:9d:c4:3f:6a:ec:1c: a0:ab:91:4e:26:07:a5:c8:e3:51:1a:c2:db:85:75: 15:be:b1:b7:2b:e1:b6:7e:7c:6c:2d:26:3c:c0:23: b6:4d:95:3a:dd:17:fe:ca:0b:c8:b6:b0:f4:e1:43: fe:23:6c:9d:30:9e:a2:0f:1b:82:0a:ed:f8:75:f4: 45:d9:2d:84:fe:7e:62:91:66:7c:5c:15:9e:17:73: 32:66:dd:26:43:5f:61:8f:44:4d:30:f4:0b:d6:0a: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:96:31:DD:94:26:89:4C:4A:BB:03:3F:56:8C:53:42:83:8B:4E:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8020::/48 Signature Algorithm: sha256WithRSAEncryption 02:77:7e:65:99:ca:98:e7:ac:43:54:a9:34:1e:f7:79:92:e7: 6d:78:4b:21:c6:67:c7:eb:c9:5d:7b:b0:ea:35:18:11:4f:ae: f8:f0:c3:3f:c9:46:38:19:14:41:94:f6:e6:77:07:e2:4e:1b: 2e:fd:88:6d:10:55:6a:67:98:96:36:7f:d2:fa:7c:07:2d:3e: 37:eb:0c:51:e2:db:9e:7b:44:b9:37:e8:8e:41:04:b0:b2:e2: 76:8d:ab:08:61:38:ee:c8:ec:03:a5:7d:bc:1f:fe:39:87:5c: 30:cb:31:1d:0e:f5:6a:c6:f3:84:72:38:a0:34:16:76:80:2c: 60:02:8f:7b:ba:0a:06:2b:a2:00:76:89:61:af:c4:3f:e6:29: d0:e2:da:06:ec:b4:c7:a2:81:76:c9:6f:c4:86:cd:fa:a9:9a: ba:63:9a:c3:b0:b8:dc:b2:f3:97:ae:c9:5a:37:68:59:48:ee: e0:70:95:61:d2:13:1a:32:e3:82:8f:08:55:88:cf:27:ea:87: 84:2f:d9:40:bd:90:91:07:e1:38:ce:ee:2d:ea:55:98:09:05: 01:f7:da:55:6e:b4:d8:91:2f:c2:ef:e1:08:f4:79:6c:05:14: 1d:0a:f4:f6:35:fe:70:7a:e6:46:72:5f:2b:38:92:6a:9a:95: ac:4b:13:a1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUccLRfpnCPfmi/KfQXBpgyZP9EbMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMzA0M1oX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAODZiYzQ0NThhYzQxZGJmZDZhOTU1 YWNiOGM0MGExMmYzOGIwYjZlNGZjNDhmODdjY2RlZjljZTliYjc4ZWY1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCGh9eS8eWWx3dj+C9KXFYyQxSeG SL5VrdksLy4FBkWKHImr+vj1Yg1hmCbWhCMWMx/+c8o08h27OLzkBCi9pFCTRz8c G3qfkl+4aO66xcPJShtGHCnH9lF8g34wkji69rUS142bSUTwljLk5sYJAgWVRdvf d74o/JPRzlAQ705h+i4jCvXc1tfzsuYf4kFHe9QRfCNEltSLp8HNUPedxD9q7Byg q5FOJgelyONRGsLbhXUVvrG3K+G2fnxsLSY8wCO2TZU63Rf+ygvItrD04UP+I2yd MJ6iDxuCCu34dfRF2S2E/n5ikWZ8XBWeF3MyZt0mQ19hj0RNMPQL1gqwewIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPyWMd2UJolMSrsDP1aMU0KDi04vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjYTM3MWQ5LTIxNTMtNDA1My05OWFjLTFiZGMwYzQyOTRhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAIAgMA0GCSqGSIb3DQEBCwUAA4IBAQACd35lmcqY56xDVKk0 Hvd5kudteEshxmfH68lde7DqNRgRT6748MM/yUY4GRRBlPbmdwfiThsu/YhtEFVq Z5iWNn/S+nwHLT436wxR4tuee0S5N+iOQQSwsuJ2jasIYTjuyOwDpX28H/45h1ww yzEdDvVqxvOEcjigNBZ2gCxgAo97ugoGK6IAdolhr8Q/5inQ4toG7LTHooF2yW/E hs36qZq6Y5rDsLjcsvOXrslaN2hZSO7gcJVh0hMaMuOCjwhViM8n6oeEL9lAvZCR B+E4zu4t6lWYCQUB99pVbrTYkS/C7+EI9HlsBRQdCvT2Nf5weuZGcl8rOJJqmpWs SxOh -----END CERTIFICATE-----Generated at Sat Dec 20 13:55:42 2025 by rpki-client