This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/412c7b01-5685-4f18-82cd-b23372a53b95.roa File: 412c7b01-5685-4f18-82cd-b23372a53b95.roa (raw, json) Hash identifier: fCxdlxgiqxXgt5qTkNRlnutCZ76qjRFc7auPVOtlGtg= Subject key identifier: 16:08:7F:4C:B5:88:D0:AB:9F:EE:F6:FF:48:AF:4C:57:D5:23:AC:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 061D47B8AE6989CB30E6F03809F223493D85FD38 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/412c7b01-5685-4f18-82cd-b23372a53b95.roa Signing time: Tue 13 Jan 2026 20:09:41 +0000 ROA not before: Tue 13 Jan 2026 20:09:41 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1d:47:b8:ae:69:89:cb:30:e6:f0:38:09:f2:23:49:3d:85:fd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jan 13 20:09:41 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=3b4216d71b4d681dc2706b4dd142e327cc6013922293236ff24ff70bc2e219bf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:61:33:27:35:21:7d:8e:80:0c:79:f1:3c: 0f:fc:a7:23:c3:a7:e6:70:e1:7f:ce:2d:aa:1f:3a: c4:62:d9:7c:db:7d:3d:72:d8:63:13:aa:d3:c5:a5: 9a:90:91:e2:c3:6c:b3:cd:90:2a:95:54:16:93:05: b5:27:d3:6a:c6:6c:4e:a3:1d:81:93:0d:f9:1b:3f: dc:7c:49:94:24:d3:78:b6:86:f5:45:f8:ae:aa:38: 5c:ac:4e:12:8b:64:24:c6:15:41:f9:a7:40:b7:75: 3a:8c:87:f5:9a:cb:28:03:b9:96:84:a6:7f:cd:ed: ba:a9:c4:ea:90:d4:06:62:78:15:97:d1:c7:8a:34: 2b:f4:56:69:58:ed:b7:2d:78:6e:57:58:f0:8f:21: 1f:3f:74:1e:25:85:94:f7:bc:a6:23:1a:51:b3:74: 37:7b:4a:a9:b8:7c:84:0b:f9:9f:4b:99:5e:f0:84: 4b:22:99:ca:8c:07:9f:6d:cb:9c:13:5c:4b:c2:b5: 89:9a:44:bc:ff:59:4d:2c:b6:74:af:5b:c6:95:1e: d1:61:1e:b6:16:30:b5:e8:13:86:c4:4f:d3:9c:c6: ce:56:51:24:a5:23:1b:79:1d:19:df:e9:48:fc:ab: 11:e2:16:0b:9c:38:b4:86:12:ef:2e:34:4b:ea:6d: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:08:7F:4C:B5:88:D0:AB:9F:EE:F6:FF:48:AF:4C:57:D5:23:AC:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/412c7b01-5685-4f18-82cd-b23372a53b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 79:30:db:92:ea:d5:b0:2e:0f:d6:de:aa:7c:1f:59:26:34:5b: 08:58:47:d4:b0:81:35:c5:35:ee:f1:e6:4f:93:9b:ab:56:73: b6:21:8f:03:ff:18:18:2f:1d:bd:a3:b9:d4:53:96:28:4d:fe: ca:6a:c6:95:f7:ef:12:cc:d8:dd:81:69:7d:c4:2f:9e:b4:0f: 6c:f9:30:a6:c7:16:10:b7:a5:2a:7d:1f:18:e2:74:72:15:25: e9:a7:22:f2:e2:1a:79:6b:d7:a5:8f:e5:49:46:9b:3b:8b:79: 11:53:d7:43:38:b2:47:87:18:61:27:93:1e:bd:20:e7:b8:a3: 4e:24:ab:17:1b:4f:02:f6:ff:cb:76:a9:06:e6:d8:cf:8e:74: 26:c2:ab:88:3b:d8:25:45:11:36:d2:a4:64:55:19:58:a7:b9: 13:85:16:5d:eb:ba:3b:0a:b8:07:e5:21:b7:52:50:33:e7:16: e3:0e:4c:80:eb:42:b0:8b:69:ac:77:48:44:03:6f:7d:0b:eb: c5:16:27:25:ce:8f:53:12:01:9f:b3:a2:95:ea:13:31:70:53: 7b:12:5a:63:f8:44:c0:70:88:54:d4:02:ec:06:5c:5d:a5:58: 2c:02:64:c1:21:0e:8e:4f:24:ba:75:56:e9:c6:88:6a:47:9a: fa:dc:a7:14 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBh1HuK5picsw5vA4CfIjST2F/TgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDExMzIwMDk0MVoX DTI2MDQxMzIzNTk1OVowejFJMEcGA1UEBRNAM2I0MjE2ZDcxYjRkNjgxZGMyNzA2 YjRkZDE0MmUzMjdjYzYwMTM5MjIyOTMyMzZmZjI0ZmY3MGJjMmUyMTliZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprdhMyc1IX2OgAx58TwP/Kcjw6fm cOF/zi2qHzrEYtl82309cthjE6rTxaWakJHiw2yzzZAqlVQWkwW1J9NqxmxOox2B kw35Gz/cfEmUJNN4tob1RfiuqjhcrE4Si2QkxhVB+adAt3U6jIf1mssoA7mWhKZ/ ze26qcTqkNQGYngVl9HHijQr9FZpWO23LXhuV1jwjyEfP3QeJYWU97ymIxpRs3Q3 e0qpuHyEC/mfS5le8IRLIpnKjAefbcucE1xLwrWJmkS8/1lNLLZ0r1vGlR7RYR62 FjC16BOGxE/TnMbOVlEkpSMbeR0Z3+lI/KsR4hYLnDi0hhLvLjRL6m1khQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBYIf0y1iNCrn+72/0ivTFfVI6yyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQxMmM3YjAxLTU2ODUtNGYxOC04MmNkLWIyMzM3MmE1M2I5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba68jAMA0GCSqGSIb3DQEBCwUAA4IBAQB5MNuS6tWwLg/W3qp8 H1kmNFsIWEfUsIE1xTXu8eZPk5urVnO2IY8D/xgYLx29o7nUU5YoTf7KasaV9+8S zNjdgWl9xC+etA9s+TCmxxYQt6UqfR8Y4nRyFSXppyLy4hp5a9elj+VJRps7i3kR U9dDOLJHhxhhJ5MevSDnuKNOJKsXG08C9v/LdqkG5tjPjnQmwquIO9glRRE20qRk VRlYp7kThRZd67o7CrgH5SG3UlAz5xbjDkyA60Kwi2msd0hEA299C+vFFiclzo9T EgGfs6KV6hMxcFN7Elpj+ETAcIhU1ALsBlxdpVgsAmTBIQ6OTyS6dVbpxohqR5r6 3KcU -----END CERTIFICATE-----Generated at Sat Jan 17 08:21:34 2026 by rpki-client