This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa File: f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa (raw, json) Hash identifier: xODZzR504ATXWZhPI9Z98PUBEAya3xEEmpQv+xw+gu0= Subject key identifier: 81:A0:C9:B6:10:40:48:85:50:28:C0:3A:7F:EE:98:18:67:56:0D:4E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3469962D19C7EC82C32DA75575F82BC75D6C330F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa Signing time: Mon 08 Dec 2025 00:00:06 +0000 ROA not before: Mon 08 Dec 2025 00:00:06 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:69:96:2d:19:c7:ec:82:c3:2d:a7:55:75:f8:2b:c7:5d:6c:33:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 8 00:00:06 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=00fbafa858b240750ee0c0bec00faf5b69c791325b6c618729f3d0fbc69f9d1b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dc:47:26:94:c2:a5:44:24:7b:2b:f5:4d:e2: c0:51:c4:af:64:93:2c:28:e3:a2:54:ec:3f:53:18: e4:e3:aa:81:a6:94:84:c9:3d:98:6a:fe:e9:e9:76: 47:4e:c2:d8:76:2b:f2:12:bd:f4:85:c1:63:bb:f9: 38:ed:f0:60:49:a5:ed:c9:0d:8e:ee:5f:ef:29:ef: 99:d1:3b:81:c3:36:62:a2:89:8f:76:a6:46:3c:40: ef:81:14:65:11:0b:9c:2f:bb:0d:cf:a8:c2:be:85: 97:2a:29:4b:ee:ec:66:5b:0c:f4:79:69:c0:0f:1f: cf:41:45:a7:61:05:b0:84:31:15:05:19:05:46:61: 19:1a:de:a7:57:3e:f4:6c:2e:f2:54:5c:a0:98:d1: dd:f3:32:95:a2:be:01:63:4f:e8:b0:6a:b5:cf:95: fa:8d:2e:cb:8d:61:39:c0:a5:d6:a3:34:ff:88:78: d8:58:f9:17:af:a7:7f:c8:c8:c3:80:01:94:49:e4: 90:98:10:2e:5a:77:e8:2d:cc:90:8f:78:d3:a6:47: a4:9b:6a:57:9c:dc:94:86:d4:f9:e4:a4:a8:6a:9b: 6e:a9:fc:62:e0:b1:05:99:bf:2b:ce:ed:42:58:03: e7:d2:21:1a:e7:dd:1f:2d:32:6b:01:3f:ad:06:02: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A0:C9:B6:10:40:48:85:50:28:C0:3A:7F:EE:98:18:67:56:0D:4E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f8c4d340-c0df-4a5d-b1b5-e0a4c5a9350c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:b000::/40 Signature Algorithm: sha256WithRSAEncryption 11:7e:12:02:7c:aa:d1:d9:a0:04:be:7a:35:0b:12:6e:99:5e: be:d3:10:bd:f0:1f:7b:da:9b:50:e0:48:d8:ad:fd:e4:7e:09: 97:5e:4d:9a:db:74:35:63:0f:23:2b:79:95:3b:04:32:72:8b: ad:2d:c9:69:f4:90:5c:4a:27:45:47:f0:34:86:52:dd:5c:4a: 28:29:4e:fb:b2:03:82:96:b0:6b:7e:4d:95:db:6a:46:29:fd: 76:de:5b:c5:3e:f1:4c:35:27:79:91:35:b1:15:bd:f8:40:4c: 09:99:f6:bf:91:c9:5e:91:8d:fe:e2:2b:20:c7:c6:27:05:56: 9a:92:29:a4:22:2c:c1:d1:90:5b:9e:df:44:2d:73:fc:f2:7e: 54:ec:4e:db:7e:66:97:c5:c6:52:a7:aa:f4:62:60:85:f8:dd: af:b1:27:43:32:58:99:f2:ca:24:a3:0c:79:be:06:b2:a9:53: 45:95:40:c8:c0:eb:a6:8f:2e:b0:6f:cd:8a:a0:39:78:78:94: df:86:e0:43:1b:a8:07:8a:5f:df:cc:c2:1b:67:6a:b2:b5:6a: 9b:10:fc:2c:65:94:26:db:74:5c:20:a7:27:67:3f:7f:66:0a: 87:b3:6e:c5:98:b1:7f:b7:be:a7:3e:45:01:bd:42:63:40:3d: 5d:e6:4b:ac -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNGmWLRnH7ILDLadVdfgrx11sMw8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwODAwMDAwNloX DTI2MDMwODIzNTk1OVowejFJMEcGA1UEBRNAMDBmYmFmYTg1OGIyNDA3NTBlZTBj MGJlYzAwZmFmNWI2OWM3OTEzMjViNmM2MTg3MjlmM2QwZmJjNjlmOWQxYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtxHJpTCpUQkeyv1TeLAUcSvZJMs KOOiVOw/Uxjk46qBppSEyT2Yav7p6XZHTsLYdivyEr30hcFju/k47fBgSaXtyQ2O 7l/vKe+Z0TuBwzZioomPdqZGPEDvgRRlEQucL7sNz6jCvoWXKilL7uxmWwz0eWnA Dx/PQUWnYQWwhDEVBRkFRmEZGt6nVz70bC7yVFygmNHd8zKVor4BY0/osGq1z5X6 jS7LjWE5wKXWozT/iHjYWPkXr6d/yMjDgAGUSeSQmBAuWnfoLcyQj3jTpkekm2pX nNyUhtT55KSoaptuqfxi4LEFmb8rzu1CWAPn0iEa590fLTJrAT+tBgKfHQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIGgybYQQEiFUCjAOn/umBhnVg1OMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y4YzRkMzQwLWMwZGYtNGE1ZC1iMWI1LWUwYTRjNWE5MzUwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7bAwDQYJKoZIhvcNAQELBQADggEBABF+EgJ8qtHZoAS+ejUL Em6ZXr7TEL3wH3vam1DgSNit/eR+CZdeTZrbdDVjDyMreZU7BDJyi60tyWn0kFxK J0VH8DSGUt1cSigpTvuyA4KWsGt+TZXbakYp/XbeW8U+8Uw1J3mRNbEVvfhATAmZ 9r+RyV6Rjf7iKyDHxicFVpqSKaQiLMHRkFue30Qtc/zyflTsTtt+ZpfFxlKnqvRi YIX43a+xJ0MyWJnyyiSjDHm+BrKpU0WVQMjA66aPLrBvzYqgOXh4lN+G4EMbqAeK X9/MwhtnarK1apsQ/CxllCbbdFwgpydnP39mCoezbsWYsX+3vqc+RQG9QmNAPV3m S6w= -----END CERTIFICATE-----Generated at Mon Dec 22 00:44:15 2025 by rpki-client