This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42c26878-927c-479a-8e26-c3de3d16df9c.roa File: 42c26878-927c-479a-8e26-c3de3d16df9c.roa (raw, json) Hash identifier: qXa6N51DD4bTnH9aKmgXJDcOJfma+eSK21ooGeEyGMk= Subject key identifier: D3:40:95:7B:16:BA:96:0C:7A:50:5A:F1:BE:81:9E:D9:A9:80:38:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28FDB978380A55BA127C1A7F42ED8C050D76AEFD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42c26878-927c-479a-8e26-c3de3d16df9c.roa Signing time: Sat 08 Nov 2025 00:10:32 +0000 ROA not before: Sat 08 Nov 2025 00:10:32 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:fd:b9:78:38:0a:55:ba:12:7c:1a:7f:42:ed:8c:05:0d:76:ae:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:10:32 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=a2188cbf9d667dcb8bc1a04cf98e855c082ef161c1854def99e32742294a2c6b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:6c:68:0e:d3:92:1e:ba:5c:ea:41:7f:27: 24:9b:9d:ca:5c:78:b6:4e:8d:98:51:97:18:4b:05: 4b:53:ea:de:fa:e3:9b:a4:c4:48:68:cf:67:a0:78: 0f:38:21:9b:b1:b1:72:b8:10:0d:55:b8:87:71:d7: 6e:b6:d5:42:1a:10:f8:e2:e5:b7:89:ab:ac:d4:77: 68:c0:3a:e6:cf:23:5d:c8:5a:f9:15:a4:82:bd:1b: 01:fa:5a:7f:5b:34:4f:e9:1a:f7:07:66:b1:c0:d5: af:55:94:ad:42:94:7f:db:f1:f3:5e:cb:f0:ea:a8: 6d:0b:66:48:b4:65:86:e7:0c:97:21:8b:f7:0e:a3: 70:5c:2d:e2:f4:8f:7c:5c:ad:c1:31:04:db:de:61: d8:16:6b:89:6a:70:69:6e:c4:40:17:59:4b:ad:71: ae:6d:12:13:40:82:c4:e5:08:04:66:c1:a5:57:16: 4c:e2:0f:76:f3:be:1a:cb:92:b2:78:cc:8e:64:ee: 93:b0:04:2e:4f:77:4c:a9:f0:4b:ee:2d:9a:f2:67: d6:7c:99:29:b8:f6:3f:4b:28:a9:32:ae:d7:9f:2b: 3b:15:70:79:ef:da:f3:f2:ec:bf:b7:e5:16:40:fd: 2d:da:aa:be:03:81:5c:f8:ca:c1:6c:ca:ea:f9:2f: b3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:95:7B:16:BA:96:0C:7A:50:5A:F1:BE:81:9E:D9:A9:80:38:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42c26878-927c-479a-8e26-c3de3d16df9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:e000::/48 Signature Algorithm: sha256WithRSAEncryption 8d:64:2f:1e:56:8a:cb:25:20:c9:96:2f:38:2c:3a:a9:f0:79: 10:38:94:ec:25:d0:75:f0:40:e8:1a:ee:d0:2f:2d:d8:1c:e2: 5d:01:dd:52:eb:b7:18:8e:59:0a:d4:71:30:b1:87:5d:8e:c6: 88:83:91:a4:ed:17:0b:a9:fb:89:69:80:ae:88:f7:a5:97:d0: b6:e4:50:d9:54:c5:0e:d0:23:8a:c2:31:bb:77:4b:5f:35:8a: 98:b4:e3:c4:de:ee:5d:e2:7a:c7:2c:dc:aa:22:7f:0a:e7:22: 91:a7:c4:98:ae:72:54:be:b5:b7:b0:12:01:43:6d:fa:01:a6: da:e5:d3:7f:02:a2:c8:ba:04:64:54:cb:af:e0:5a:1f:1a:c2: 40:6c:96:c0:7b:3f:bf:85:e6:fa:9e:90:73:33:cd:28:df:fc: cd:70:99:d4:d5:db:0d:04:12:70:1d:58:ed:d2:2f:98:c4:ee: 31:5e:64:58:99:dd:8b:17:7a:1d:89:13:ab:ab:59:81:d1:ca: 3f:da:43:df:fc:43:e2:5f:02:fa:d4:09:59:5b:31:0a:fd:99: 55:b3:6d:e1:e1:63:be:09:12:e6:ce:0e:03:b3:0a:39:6c:0a: c5:da:c6:fd:2b:8c:3e:1e:66:f7:6a:0e:f3:4a:73:d5:14:87: 89:4a:b8:5b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKP25eDgKVboSfBp/Qu2MBQ12rv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMTAzMloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAYTIxODhjYmY5ZDY2N2RjYjhiYzFh MDRjZjk4ZTg1NWMwODJlZjE2MWMxODU0ZGVmOTllMzI3NDIyOTRhMmM2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN9saA7Tkh66XOpBfyckm53KXHi2 To2YUZcYSwVLU+re+uObpMRIaM9noHgPOCGbsbFyuBANVbiHcdduttVCGhD44uW3 iaus1HdowDrmzyNdyFr5FaSCvRsB+lp/WzRP6Rr3B2axwNWvVZStQpR/2/HzXsvw 6qhtC2ZItGWG5wyXIYv3DqNwXC3i9I98XK3BMQTb3mHYFmuJanBpbsRAF1lLrXGu bRITQILE5QgEZsGlVxZM4g92874ay5KyeMyOZO6TsAQuT3dMqfBL7i2a8mfWfJkp uPY/SyipMq7Xnys7FXB579rz8uy/t+UWQP0t2qq+A4Fc+MrBbMrq+S+ziQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNNAlXsWupYMelBa8b6BntmpgDhaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyYzI2ODc4LTkyN2MtNDc5YS04ZTI2LWMzZGUzZDE2ZGY5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7OAAMA0GCSqGSIb3DQEBCwUAA4IBAQCNZC8eVorLJSDJli84 LDqp8HkQOJTsJdB18EDoGu7QLy3YHOJdAd1S67cYjlkK1HEwsYddjsaIg5Gk7RcL qfuJaYCuiPell9C25FDZVMUO0COKwjG7d0tfNYqYtOPE3u5d4nrHLNyqIn8K5yKR p8SYrnJUvrW3sBIBQ236Aaba5dN/AqLIugRkVMuv4FofGsJAbJbAez+/heb6npBz M80o3/zNcJnU1dsNBBJwHVjt0i+YxO4xXmRYmd2LF3odiROrq1mB0co/2kPf/EPi XwL61AlZWzEK/ZlVs23h4WO+CRLmzg4Dswo5bArF2sb9K4w+Hmb3ag7zSnPVFIeJ Srhb -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:57 2025 by rpki-client