This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9890d9ef-a083-463c-9928-98be77ac9ced.roa File: 9890d9ef-a083-463c-9928-98be77ac9ced.roa (raw, json) Hash identifier: Yky9LXdwo7OExak6NHNARhCAzEp4fqogKp+EU4N6Nl0= Subject key identifier: D8:AF:EE:6D:17:D1:82:C0:1C:62:CA:D7:DC:5C:B3:BE:AF:2F:C8:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 164C8A64C218C89E7A4C7E8F094A35DC66316113 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9890d9ef-a083-463c-9928-98be77ac9ced.roa Signing time: Sun 30 Nov 2025 00:01:40 +0000 ROA not before: Sun 30 Nov 2025 00:01:40 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:8a:64:c2:18:c8:9e:7a:4c:7e:8f:09:4a:35:dc:66:31:61:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:01:40 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=abf27021be997ad3f174d46151cd2cea486283e19150e4d5920f8dafa2421381, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:8e:2c:9f:48:cf:86:08:5f:31:81:17:d4: a2:8f:70:88:34:d7:ba:55:bd:64:b9:0f:b6:b9:bf: b8:08:6e:2b:a2:6a:3e:68:2a:d0:33:c3:14:44:03: e7:d9:92:ee:68:92:2d:7b:d1:2f:89:b4:d4:23:6c: 4e:27:92:e3:b6:83:ff:70:65:1f:98:63:33:b1:76: 74:98:ca:c2:92:d4:09:e7:95:2a:5c:25:c6:aa:80: 4d:bb:34:af:5c:2c:1a:a1:36:9a:f9:b9:1d:b2:be: 0c:9f:fa:d1:06:7b:ed:ff:6c:88:18:db:40:bb:e9: bb:07:0a:c3:ab:2c:bf:92:1b:dd:a1:1b:fb:ba:2b: 23:eb:e0:60:10:1f:83:ab:50:87:f5:f1:ef:56:68: 38:ca:ce:a8:a9:c7:88:09:29:ea:c9:b4:d2:ad:0f: 83:03:94:73:41:47:a3:e6:89:b3:c4:16:51:fa:63: b6:52:42:5f:83:02:4d:28:fa:5f:56:dc:80:45:4f: 06:13:d2:6f:af:bc:f4:d7:61:35:fd:dc:6a:99:88: 26:c3:80:08:e8:90:25:25:f7:2a:99:82:ab:79:1a: bd:6f:c6:0b:87:0e:f4:2e:88:2e:06:6f:44:f1:c2: 4b:fc:33:92:95:60:25:1d:c6:37:92:fb:41:de:dc: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AF:EE:6D:17:D1:82:C0:1C:62:CA:D7:DC:5C:B3:BE:AF:2F:C8:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9890d9ef-a083-463c-9928-98be77ac9ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4090::/48 Signature Algorithm: sha256WithRSAEncryption 41:9f:30:52:c7:dd:93:d7:a8:ac:e7:8d:d5:c8:50:9b:1d:e1: b7:d5:68:76:ce:04:ca:a8:91:ef:aa:db:dc:f2:42:99:9f:d6: 42:9c:e0:e3:23:19:fc:f3:88:12:b3:1f:f7:72:fd:ce:85:e3: df:f8:e1:d4:c4:b4:ef:91:c8:a7:55:d1:c0:99:07:73:b4:e2: 11:b5:16:fe:53:ef:43:e7:6e:56:f3:d5:d6:e4:04:f2:db:7b: 17:5d:e1:ae:e1:3b:3a:05:a4:3b:81:82:32:dd:7c:70:d0:86: 41:34:d6:be:bf:fb:65:ff:37:be:f5:79:12:56:90:cb:95:5c: 63:aa:79:a7:7d:7c:0b:96:6c:94:9c:86:63:77:a3:8b:45:a6: 02:e1:9b:43:d1:27:0e:b5:b8:0b:39:e1:a3:33:a0:80:b9:c0: 98:0f:73:59:93:4f:15:13:c2:c8:b2:bd:47:c7:cc:e0:42:35: 1a:39:ee:d5:5e:1a:15:26:c6:58:59:c3:ff:fe:72:28:2d:a3: 84:47:d1:07:2d:69:f8:d8:a3:81:b4:bd:ec:93:b1:12:2c:b9: 4c:77:bb:e2:66:15:ff:9e:a8:5a:8b:2a:13:09:31:25:8a:b0: 76:50:8f:db:30:b5:ce:a9:22:4a:18:e7:66:93:88:3b:d7:55: 15:36:3d:ff -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFkyKZMIYyJ56TH6PCUo13GYxYRMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEzMDAwMDE0MFoX DTI2MDIyODIzNTk1OVowejFJMEcGA1UEBRNAYWJmMjcwMjFiZTk5N2FkM2YxNzRk NDYxNTFjZDJjZWE0ODYyODNlMTkxNTBlNGQ1OTIwZjhkYWZhMjQyMTM4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTqOLJ9Iz4YIXzGBF9Sij3CINNe6 Vb1kuQ+2ub+4CG4romo+aCrQM8MURAPn2ZLuaJIte9EvibTUI2xOJ5LjtoP/cGUf mGMzsXZ0mMrCktQJ55UqXCXGqoBNuzSvXCwaoTaa+bkdsr4Mn/rRBnvt/2yIGNtA u+m7BwrDqyy/khvdoRv7uisj6+BgEB+Dq1CH9fHvVmg4ys6oqceICSnqybTSrQ+D A5RzQUej5omzxBZR+mO2UkJfgwJNKPpfVtyARU8GE9Jvr7z012E1/dxqmYgmw4AI 6JAlJfcqmYKreRq9b8YLhw70LoguBm9E8cJL/DOSlWAlHcY3kvtB3twBqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNiv7m0X0YLAHGLK19xcs76vL8i7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4OTBkOWVmLWEwODMtNDYzYy05OTI4LTk4YmU3N2FjOWNlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0CQMA0GCSqGSIb3DQEBCwUAA4IBAQBBnzBSx92T16is543V yFCbHeG31Wh2zgTKqJHvqtvc8kKZn9ZCnODjIxn884gSsx/3cv3OhePf+OHUxLTv kcinVdHAmQdztOIRtRb+U+9D525W89XW5ATy23sXXeGu4Ts6BaQ7gYIy3Xxw0IZB NNa+v/tl/ze+9XkSVpDLlVxjqnmnfXwLlmyUnIZjd6OLRaYC4ZtD0ScOtbgLOeGj M6CAucCYD3NZk08VE8LIsr1Hx8zgQjUaOe7VXhoVJsZYWcP//nIoLaOER9EHLWn4 2KOBtL3sk7ESLLlMd7viZhX/nqhaiyoTCTElirB2UI/bMLXOqSJKGOdmk4g711UV Nj3/ -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:32 2025 by rpki-client