This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa File: 6602a63e-35ff-4691-9488-f64ca93504e7.roa (raw, json) Hash identifier: ghiaJ6UuMRRIK7g2cbAAj/kYRaUjGzIii4ntIGm3Yok= Subject key identifier: 3A:A8:72:D5:DE:E0:FE:4E:C2:D1:29:DC:5D:C0:FF:82:02:68:30:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 510644DC637BA3957FD3C6ECFC09EB5EC9E23607 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa Signing time: Tue 13 Jan 2026 20:08:39 +0000 ROA not before: Tue 13 Jan 2026 20:08:39 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:06:44:dc:63:7b:a3:95:7f:d3:c6:ec:fc:09:eb:5e:c9:e2:36:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jan 13 20:08:39 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=38a77d2ce12d3839a0dbf261258636cd2c68d7e64e69834ae5cf11166e6edcc1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:0b:20:98:92:a2:dd:fc:f1:c0:f1:3b:37: 92:92:e5:1d:df:0f:55:ee:e9:1c:e5:e1:94:1c:84: 0c:a5:53:7e:93:15:42:20:a4:e6:98:70:7a:d8:4f: 05:ab:1b:1d:f1:86:16:1c:b6:ed:be:ba:ab:4e:64: 1a:f8:6e:6a:0b:17:ac:94:12:5f:cb:d1:4c:96:dd: d6:c1:c2:93:c5:9a:36:12:0e:53:86:54:13:4c:5d: 0b:a3:ea:e5:f8:f8:ba:8b:80:a8:41:f6:5e:ff:0f: 12:c8:0e:18:7f:f7:98:54:8c:6e:b7:31:16:37:48: 19:25:89:1f:a0:63:cb:59:11:39:ba:9b:06:0f:db: b3:6c:76:c3:1e:8b:1f:6b:5f:8a:de:0c:9b:b6:c4: a6:55:46:5e:9c:70:eb:5e:b2:1a:4c:8d:79:4b:fc: be:5a:cd:00:4d:1b:3c:fc:a5:11:18:1b:c2:d3:c7: a9:97:51:27:00:3c:a5:c7:35:5c:fb:a3:09:76:fc: 37:58:3c:74:6c:2d:63:12:1e:b7:c1:fc:90:ea:68: 9f:84:69:89:3b:a4:18:7c:24:ee:2c:d6:98:17:68: c8:27:86:d1:bd:6b:db:f7:20:01:9d:6a:29:b3:bd: 17:3d:d9:3f:1b:1e:76:c2:1e:02:c9:78:56:b5:32: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:72:D5:DE:E0:FE:4E:C2:D1:29:DC:5D:C0:FF:82:02:68:30:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6602a63e-35ff-4691-9488-f64ca93504e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:4040::/48 Signature Algorithm: sha256WithRSAEncryption 45:02:48:26:c0:d3:b5:c0:1b:87:b9:a9:1b:43:f2:ff:50:40: 3f:53:8a:f9:04:d5:bb:54:fe:41:76:58:48:05:e6:ad:f0:90: 38:fe:e6:70:41:ca:51:3e:17:38:2f:6d:6a:cf:38:f4:a3:71: 3d:49:02:eb:da:f7:fc:e8:8e:0f:3c:92:91:7f:a4:e3:e3:16: f1:56:f6:5d:22:41:c7:25:03:4d:1a:50:65:74:a5:34:ae:54: c1:b5:9d:34:09:1c:fc:74:7f:e7:f2:42:20:9a:c2:95:93:eb: f5:6f:9a:d5:d6:35:e4:39:6a:e5:0d:d4:7b:58:e4:96:f6:ff: e2:fe:40:dd:5d:38:b1:63:99:cc:f4:d8:16:4d:87:09:6d:11: 37:91:1d:3a:7a:2b:64:7d:09:4d:b5:cb:63:eb:df:c7:b8:1f: 29:76:81:45:77:b9:83:d6:a2:c2:ca:0d:39:58:d8:d7:eb:fc: 8c:96:f6:90:8c:7c:78:79:f4:b8:61:bc:47:06:c5:69:96:f5: 8c:a1:d0:80:c6:68:02:b6:45:90:88:e3:12:90:c0:a8:db:fe: f1:c1:c5:76:e3:28:fa:df:18:58:2d:59:e7:87:2d:89:02:50: 08:f4:2f:5f:57:d0:84:8d:cc:4f:da:ef:f7:ec:b2:9c:f8:58: 6b:dd:74:96 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUQZE3GN7o5V/08bs/AnrXsniNgcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDExMzIwMDgzOVoX DTI2MDQxMzIzNTk1OVowejFJMEcGA1UEBRNAMzhhNzdkMmNlMTJkMzgzOWEwZGJm MjYxMjU4NjM2Y2QyYzY4ZDdlNjRlNjk4MzRhZTVjZjExMTY2ZTZlZGNjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn70LIJiSot388cDxOzeSkuUd3w9V 7ukc5eGUHIQMpVN+kxVCIKTmmHB62E8Fqxsd8YYWHLbtvrqrTmQa+G5qCxeslBJf y9FMlt3WwcKTxZo2Eg5ThlQTTF0Lo+rl+Pi6i4CoQfZe/w8SyA4Yf/eYVIxutzEW N0gZJYkfoGPLWRE5upsGD9uzbHbDHosfa1+K3gybtsSmVUZenHDrXrIaTI15S/y+ Ws0ATRs8/KURGBvC08epl1EnADylxzVc+6MJdvw3WDx0bC1jEh63wfyQ6mifhGmJ O6QYfCTuLNaYF2jIJ4bRvWvb9yABnWops70XPdk/Gx52wh4CyXhWtTLSBwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDqoctXe4P5OwtEp3F3A/4ICaDDPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2MDJhNjNlLTM1ZmYtNDY5MS05NDg4LWY2NGNhOTM1MDRlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba60BAMA0GCSqGSIb3DQEBCwUAA4IBAQBFAkgmwNO1wBuHuakb Q/L/UEA/U4r5BNW7VP5BdlhIBeat8JA4/uZwQcpRPhc4L21qzzj0o3E9SQLr2vf8 6I4PPJKRf6Tj4xbxVvZdIkHHJQNNGlBldKU0rlTBtZ00CRz8dH/n8kIgmsKVk+v1 b5rV1jXkOWrlDdR7WOSW9v/i/kDdXTixY5nM9NgWTYcJbRE3kR06eitkfQlNtctj 69/HuB8pdoFFd7mD1qLCyg05WNjX6/yMlvaQjHx4efS4YbxHBsVplvWModCAxmgC tkWQiOMSkMCo2/7xwcV24yj63xhYLVnnhy2JAlAI9C9fV9CEjcxP2u/37LKc+Fhr 3XSW -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:56 2026 by rpki-client