This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa File: f695f86c-1862-4357-8961-1e5b809c4811.roa (raw, json) Hash identifier: 3piDTVKEQ5IQBMZDqyrGSgYOWLc6B2SB0aXjMEjYCfA= Subject key identifier: 7D:7F:39:6F:F1:27:47:79:A9:83:2A:BC:DC:74:A2:52:DE:FF:57:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EE1CDB733066C6D1BEF8BC24688F1ADA730EE68 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa Signing time: Tue 02 Dec 2025 00:20:58 +0000 ROA not before: Tue 02 Dec 2025 00:20:58 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e1:cd:b7:33:06:6c:6d:1b:ef:8b:c2:46:88:f1:ad:a7:30:ee:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:20:58 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=d3107aa68b7e343a32e71c8da111f6c234a5f97c2ef3a5094accb5d4694b6d59, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:04:85:c8:59:a7:b3:f5:88:78:e4:a9:01: 7f:28:1a:e3:f8:96:0b:2a:31:80:0f:80:d2:88:ab: 9e:55:2e:d6:f9:a8:95:44:18:05:d3:e0:26:f1:cb: f9:d1:80:50:5f:f6:b3:20:63:f3:be:2e:5b:9f:6a: 1f:e3:5f:1a:00:0c:b0:46:55:17:07:cd:4b:7b:7b: 5d:1b:a4:e9:10:0b:22:ec:4e:b2:59:51:6d:78:bc: a0:d9:65:9c:08:e5:71:30:ad:8d:cf:6b:98:9a:72: 0e:79:c5:24:85:04:61:b1:5f:9e:d9:e1:30:53:69: ec:65:bd:0b:d1:03:dd:01:c8:64:bb:7e:4c:1e:8a: 7c:8b:1c:c8:96:81:bc:00:c1:ab:56:24:18:a1:b4: 31:68:eb:e2:61:75:13:1f:0a:7e:10:95:f0:9e:1a: d1:92:0e:fe:70:35:a1:21:cc:1f:59:6c:11:5a:8f: fd:6b:f7:2d:23:71:a8:29:0d:b2:99:cf:2e:df:6d: c6:d0:7e:8c:06:99:4c:7a:4f:54:d1:9b:86:5d:d9: 91:89:b0:de:41:6a:b4:7f:7b:dd:e4:66:4f:d4:6d: 43:b7:51:da:a9:eb:69:10:1f:11:91:c8:b5:28:88: b1:a4:e4:35:f0:52:64:bf:68:5c:3c:06:57:87:8a: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7F:39:6F:F1:27:47:79:A9:83:2A:BC:DC:74:A2:52:DE:FF:57:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a000::/40 Signature Algorithm: sha256WithRSAEncryption c8:1d:66:a0:f6:ef:ea:d9:a2:9c:7f:4d:95:68:44:ec:e4:85: c3:ce:8d:af:9e:b3:dc:8e:cd:e0:63:9c:ba:19:8d:f4:52:b1: db:6b:e1:55:fa:e8:f6:ba:fb:f6:32:41:ae:fb:65:44:ff:d7: 52:e5:73:aa:36:d5:44:e7:d8:cd:af:e5:f6:de:74:08:9e:13: 8d:af:c9:ee:b2:90:be:46:fb:cb:35:c2:7e:da:79:9e:7a:6f: 57:6c:54:b0:85:26:ec:86:7c:18:ab:32:43:65:02:31:b2:f0: 56:2d:0c:7c:99:c9:51:d7:bd:1b:76:04:d9:39:26:c9:e7:a1: fb:97:70:91:fb:cc:42:9a:8a:70:81:ba:79:7d:05:ad:44:bf: 65:8f:30:13:08:e8:be:1b:8c:82:5a:ab:fa:f3:ed:6a:ff:2f: 2f:ff:46:61:ac:54:06:16:46:6f:fe:f1:88:db:21:82:6a:92: 10:df:11:fe:33:70:ac:8a:b7:09:e8:c0:76:8d:ff:39:70:12: b8:fe:19:2c:e2:d3:3a:e3:bb:14:8b:f5:93:c4:4f:e1:65:9b: 26:95:b5:6e:61:fe:5f:80:4c:45:ad:77:17:7d:81:30:ac:05: 86:a3:f5:ed:49:df:7b:0d:3c:d5:92:22:e2:15:0c:12:75:6c: 5b:ea:45:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDuHNtzMGbG0b74vCRojxracw7mgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMjA1OFoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAZDMxMDdhYTY4YjdlMzQzYTMyZTcx YzhkYTExMWY2YzIzNGE1Zjk3YzJlZjNhNTA5NGFjY2I1ZDQ2OTRiNmQ1OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9QEhchZp7P1iHjkqQF/KBrj+JYL KjGAD4DSiKueVS7W+aiVRBgF0+Am8cv50YBQX/azIGPzvi5bn2of418aAAywRlUX B81Le3tdG6TpEAsi7E6yWVFteLyg2WWcCOVxMK2Nz2uYmnIOecUkhQRhsV+e2eEw U2nsZb0L0QPdAchku35MHop8ixzIloG8AMGrViQYobQxaOviYXUTHwp+EJXwnhrR kg7+cDWhIcwfWWwRWo/9a/ctI3GoKQ2ymc8u323G0H6MBplMek9U0ZuGXdmRibDe QWq0f3vd5GZP1G1Dt1HaqetpEB8Rkci1KIixpOQ18FJkv2hcPAZXh4r7cwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH1/OW/xJ0d5qYMqvNx0olLe/1dtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2OTVmODZjLTE4NjItNDM1Ny04OTYxLTFlNWI4MDljNDgxMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAKAwDQYJKoZIhvcNAQELBQADggEBAMgdZqD27+rZopx/TZVo ROzkhcPOja+es9yOzeBjnLoZjfRSsdtr4VX66Pa6+/YyQa77ZUT/11Llc6o21UTn 2M2v5fbedAieE42vye6ykL5G+8s1wn7aeZ56b1dsVLCFJuyGfBirMkNlAjGy8FYt DHyZyVHXvRt2BNk5JsnnofuXcJH7zEKainCBunl9Ba1Ev2WPMBMI6L4bjIJaq/rz 7Wr/Ly//RmGsVAYWRm/+8YjbIYJqkhDfEf4zcKyKtwnowHaN/zlwErj+GSzi0zrj uxSL9ZPET+FlmyaVtW5h/l+ATEWtdxd9gTCsBYaj9e1J33sNPNWSIuIVDBJ1bFvq RfU= -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:37 2025 by rpki-client