This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63974c12-ad91-4d18-98dc-f95f22782942.roa File: 63974c12-ad91-4d18-98dc-f95f22782942.roa (raw, json) Hash identifier: 6meQV03TujGEGtrFVIw+aCeoLorEHjgzThfG+KpT70c= Subject key identifier: 55:B9:F0:8D:DF:85:9D:A4:C7:5C:C4:65:64:24:83:B3:87:94:B6:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41172CF150B8A8FCC13061454AF306D0AB8EDD93 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63974c12-ad91-4d18-98dc-f95f22782942.roa Signing time: Tue 13 Jan 2026 20:08:36 +0000 ROA not before: Tue 13 Jan 2026 20:08:36 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:17:2c:f1:50:b8:a8:fc:c1:30:61:45:4a:f3:06:d0:ab:8e:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jan 13 20:08:36 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=17b9a441a8a72bdc120a62dc6424580da8edc81ccbd2feca499521e257694e09, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:30:1d:86:a5:5c:49:23:46:69:e9:67:dd: 5e:1c:fb:e7:38:98:3e:f5:04:aa:db:f2:c4:38:f8: 6e:b9:16:00:e6:ca:35:89:7c:ba:af:ca:dc:3b:df: bb:5e:7a:e5:cc:51:4c:ff:96:b1:49:5e:ab:2e:01: 2b:70:4c:08:77:e6:d4:4e:dd:30:a0:7b:18:0b:05: 3b:fe:38:de:8b:79:d8:5f:c4:e6:db:e8:cb:24:d3: 27:bf:90:6d:8a:70:ef:6a:6e:fb:4e:77:80:a4:78: da:bd:6e:84:be:61:cf:13:07:d5:29:c5:b1:3d:14: 54:ac:43:1c:21:f2:29:fd:4e:81:de:77:cb:18:eb: 58:91:2f:d2:0e:14:0c:ac:45:37:dc:30:f7:84:f3: a2:40:06:67:f7:8e:32:91:dc:24:f8:ab:74:ad:1e: 38:b3:df:50:c5:8c:ab:e2:e7:2a:1d:22:25:7a:c3: 01:21:5e:bc:52:e8:6d:4e:fd:8b:c7:68:4a:e9:03: 26:f3:dc:e8:a1:8d:55:af:56:19:30:5c:be:fe:49: 59:ea:b0:54:7d:88:9a:b3:9b:40:df:8d:4e:42:70: 7b:dd:18:98:60:53:05:d6:2e:ad:47:6d:f9:11:3e: 5c:80:ea:bd:47:17:71:00:6f:96:98:e9:dc:f8:f7: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B9:F0:8D:DF:85:9D:A4:C7:5C:C4:65:64:24:83:B3:87:94:B6:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63974c12-ad91-4d18-98dc-f95f22782942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:2080::/48 Signature Algorithm: sha256WithRSAEncryption 3f:91:fc:ad:5f:96:0b:77:7c:ce:f4:14:a6:e7:48:35:56:4f: b1:06:fb:5a:93:88:60:22:42:54:a5:3e:d8:bc:e7:b8:15:40: 1f:5d:4d:87:39:0a:a3:62:86:20:e0:cf:63:5d:6e:fc:93:b1: e7:6e:a6:f9:8e:09:ca:2e:fc:72:ef:93:51:69:f3:97:b3:44: c6:bb:0e:f2:98:e7:8e:67:52:d9:d0:58:cf:f1:ff:db:76:15: f6:b9:d1:95:7b:0c:35:20:5a:5c:53:96:29:48:78:9a:8d:09: 43:fa:06:3e:78:5f:f0:0e:b4:ee:ca:39:0a:63:c0:94:54:30: 14:fc:34:e6:d4:21:b6:3e:35:4a:63:bf:ff:58:5a:77:12:2c: 19:e7:39:45:83:3e:1b:4d:b0:fb:37:1f:02:80:c2:08:0f:a7: c2:80:12:30:c9:c9:aa:d6:06:f2:f2:d4:26:2b:8c:02:b1:0c: ea:83:18:49:fc:ea:de:4e:61:02:de:c6:35:ee:62:ef:ea:69: 56:ba:85:a3:fe:3f:7f:e3:b0:5e:99:a6:2c:3a:8a:28:45:3d: fe:2c:da:74:d4:6b:cc:ff:e9:08:28:90:65:6a:19:8a:47:47: da:e4:0c:bf:d4:4c:9e:25:d7:2f:e9:af:24:d0:81:5b:90:05: 60:a3:e8:fa -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQRcs8VC4qPzBMGFFSvMG0KuO3ZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDExMzIwMDgzNloX DTI2MDQxMzIzNTk1OVowejFJMEcGA1UEBRNAMTdiOWE0NDFhOGE3MmJkYzEyMGE2 MmRjNjQyNDU4MGRhOGVkYzgxY2NiZDJmZWNhNDk5NTIxZTI1NzY5NGUwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshAwHYalXEkjRmnpZ91eHPvnOJg+ 9QSq2/LEOPhuuRYA5so1iXy6r8rcO9+7XnrlzFFM/5axSV6rLgErcEwId+bUTt0w oHsYCwU7/jjei3nYX8Tm2+jLJNMnv5BtinDvam77TneApHjavW6EvmHPEwfVKcWx PRRUrEMcIfIp/U6B3nfLGOtYkS/SDhQMrEU33DD3hPOiQAZn944ykdwk+Kt0rR44 s99QxYyr4ucqHSIlesMBIV68UuhtTv2Lx2hK6QMm89zooY1Vr1YZMFy+/klZ6rBU fYias5tA341OQnB73RiYYFMF1i6tR235ET5cgOq9RxdxAG+WmOnc+PfgcwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFW58I3fhZ2kx1zEZWQkg7OHlLZmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYzOTc0YzEyLWFkOTEtNGQxOC05OGRjLWY5NWYyMjc4Mjk0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6yCAMA0GCSqGSIb3DQEBCwUAA4IBAQA/kfytX5YLd3zO9BSm 50g1Vk+xBvtak4hgIkJUpT7YvOe4FUAfXU2HOQqjYoYg4M9jXW78k7Hnbqb5jgnK Lvxy75NRafOXs0TGuw7ymOeOZ1LZ0FjP8f/bdhX2udGVeww1IFpcU5YpSHiajQlD +gY+eF/wDrTuyjkKY8CUVDAU/DTm1CG2PjVKY7//WFp3EiwZ5zlFgz4bTbD7Nx8C gMIID6fCgBIwycmq1gby8tQmK4wCsQzqgxhJ/OreTmEC3sY17mLv6mlWuoWj/j9/ 47BemaYsOoooRT3+LNp01GvM/+kIKJBlahmKR0fa5Ay/1EyeJdcv6a8k0IFbkAVg o+j6 -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:25 2026 by rpki-client