This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa File: eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa (raw, json) Hash identifier: VbaSDsHTO4Rv7VZwUeGIzJaO3wpvHRJkU9y2FIoSnM0= Subject key identifier: F2:CC:29:18:EB:87:37:64:F4:D4:3A:A3:FE:C2:F9:DF:5C:CB:09:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D08C36DB538F9A68D6CD317DFF4C2C9A78344DE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa Signing time: Wed 10 Dec 2025 00:00:51 +0000 ROA not before: Wed 10 Dec 2025 00:00:51 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:08:c3:6d:b5:38:f9:a6:8d:6c:d3:17:df:f4:c2:c9:a7:83:44:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 10 00:00:51 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=e8c26a10bbd389a3b48cf3b9b4ed4d486e42eac440a31bea9aafef6c1a5cc13d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:90:f8:20:97:71:27:6d:75:5d:d5:c5:79:cc: ce:21:de:11:c1:7c:0e:f0:84:36:f6:e3:a1:9d:be: f5:a1:a9:84:f8:73:ce:9d:00:a1:c6:b8:1d:94:29: 3b:2e:f0:0a:ef:09:7a:cc:2f:1f:27:8b:89:3b:8d: 03:d8:a4:fe:b6:02:5c:f7:69:eb:82:d1:8f:ab:0e: d0:f2:df:12:e4:63:c2:5a:67:db:b9:ae:97:1a:5a: 6c:8b:8b:63:c1:35:eb:60:ca:f3:86:b9:db:77:2e: 5a:03:da:c7:58:2f:33:18:aa:5e:86:d5:be:f5:62: 27:b6:b4:21:3f:eb:cc:1c:53:82:19:82:1e:19:b3: ce:86:3b:17:b4:3c:7f:de:f3:eb:58:93:95:77:c9: 3f:af:fa:32:a9:51:0c:a3:ec:3f:ca:1e:7c:ad:cd: 64:aa:e4:58:29:6e:82:ab:79:4e:0b:0b:71:e2:f2: bf:ad:86:9c:a4:26:36:e0:3e:bd:0f:cf:4c:15:40: ca:d9:cf:21:8d:dd:a7:30:68:30:5e:07:55:48:fc: 2a:2f:24:06:d6:d4:74:d0:2d:1c:0e:8d:e6:3f:b0: a0:c7:3d:f8:e7:72:24:8a:02:16:81:79:1d:98:67: fd:4f:9d:70:d6:85:75:1d:94:e5:46:1e:c6:20:cf: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CC:29:18:EB:87:37:64:F4:D4:3A:A3:FE:C2:F9:DF:5C:CB:09:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:8000::/40 Signature Algorithm: sha256WithRSAEncryption b1:ee:cb:5d:1d:7d:c3:53:d7:7c:f4:b3:d9:02:6d:a0:5e:15: c6:2c:15:a8:6d:2c:17:3f:10:9b:5f:41:f2:a5:db:27:90:b2: 7b:4f:31:8f:ce:db:5d:cb:17:73:c2:eb:17:d4:f1:a6:99:03: 96:2e:cd:4a:f5:91:ba:b8:60:d0:f3:cf:56:7e:c7:bb:65:4c: f6:bb:68:0d:ab:25:21:2d:8f:77:c6:1a:84:99:8b:c0:40:4c: bd:20:ad:69:c4:33:d2:f3:72:35:df:fa:74:e8:94:46:e3:0c: d3:a8:1c:9c:2b:11:6e:fd:c3:53:7b:f2:c0:2c:5a:0c:11:7f: 09:7f:a4:35:f8:2a:69:01:31:9b:a4:4d:86:77:32:4b:d5:b8: f1:dc:72:42:73:c9:b8:be:9c:fb:a9:77:9a:bc:71:e4:78:2c: be:1b:2e:53:e4:81:3f:72:45:71:18:b6:20:31:eb:d7:96:41: fc:ad:f7:bb:38:37:2a:9d:91:2d:89:0c:f8:8d:d8:f8:99:1d: 9b:de:10:dc:f1:90:da:17:28:4a:5d:ac:4f:11:c4:a6:70:71: 76:4b:01:49:19:cf:9c:47:28:89:4a:90:29:05:97:a5:fd:3e: db:fd:60:b3:74:d5:d4:82:9d:e3:06:9d:4d:0d:25:cd:c6:35: 73:f7:62:34 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbQjDbbU4+aaNbNMX3/TCyaeDRN4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIxMDAwMDA1MVoX DTI2MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZThjMjZhMTBiYmQzODlhM2I0OGNm M2I5YjRlZDRkNDg2ZTQyZWFjNDQwYTMxYmVhOWFhZmVmNmMxYTVjYzEzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pD4IJdxJ211XdXFeczOId4RwXwO 8IQ29uOhnb71oamE+HPOnQChxrgdlCk7LvAK7wl6zC8fJ4uJO40D2KT+tgJc92nr gtGPqw7Q8t8S5GPCWmfbua6XGlpsi4tjwTXrYMrzhrnbdy5aA9rHWC8zGKpehtW+ 9WIntrQhP+vMHFOCGYIeGbPOhjsXtDx/3vPrWJOVd8k/r/oyqVEMo+w/yh58rc1k quRYKW6Cq3lOCwtx4vK/rYacpCY24D69D89MFUDK2c8hjd2nMGgwXgdVSPwqLyQG 1tR00C0cDo3mP7Cgxz3453IkigIWgXkdmGf9T51w1oV1HZTlRh7GIM86TQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPLMKRjrhzdk9NQ6o/7C+d9cywnFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhYzNlYWY5LWQ4MzctNGY3Zi1iZGIyLTBkMmQzMTU4M2ZkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba74AwDQYJKoZIhvcNAQELBQADggEBALHuy10dfcNT13z0s9kC baBeFcYsFahtLBc/EJtfQfKl2yeQsntPMY/O213LF3PC6xfU8aaZA5YuzUr1kbq4 YNDzz1Z+x7tlTPa7aA2rJSEtj3fGGoSZi8BATL0grWnEM9LzcjXf+nTolEbjDNOo HJwrEW79w1N78sAsWgwRfwl/pDX4KmkBMZukTYZ3MkvVuPHcckJzybi+nPupd5q8 ceR4LL4bLlPkgT9yRXEYtiAx69eWQfyt97s4NyqdkS2JDPiN2PiZHZveENzxkNoX KEpdrE8RxKZwcXZLAUkZz5xHKIlKkCkFl6X9Ptv9YLN01dSCneMGnU0NJc3GNXP3 YjQ= -----END CERTIFICATE-----Generated at Sat Dec 20 18:42:40 2025 by rpki-client