This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c47ca85-f58b-41a9-b004-51d6fd554894.roa File: 9c47ca85-f58b-41a9-b004-51d6fd554894.roa (raw, json) Hash identifier: N6JRNEq6Lje1GjTl2ie88/4lQeWnin/N5ffij3MX3+M= Subject key identifier: F3:FD:06:DA:13:42:8D:F1:DD:17:13:E1:F3:78:CC:34:6D:17:9A:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67917224065657842995A4F90DA78D8B09C8E6E5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c47ca85-f58b-41a9-b004-51d6fd554894.roa Signing time: Tue 13 Jan 2026 20:08:43 +0000 ROA not before: Tue 13 Jan 2026 20:08:43 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:91:72:24:06:56:57:84:29:95:a4:f9:0d:a7:8d:8b:09:c8:e6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jan 13 20:08:43 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=e59fbfe48ec452269488021679705971f95eac6b2eb31baf6d0e2960ef0896dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:60:42:e7:d5:27:bd:0d:c1:32:55:e4:eb: 7c:61:b8:b5:74:54:2b:dd:e8:f2:24:2c:c5:9c:34: 56:16:a3:c4:e7:d7:59:f8:3a:4a:5d:d1:7c:1c:f9: a1:67:4c:ef:43:2c:54:05:e9:64:c9:c9:b9:85:bf: 3f:5a:7e:ce:f9:8d:83:5d:8c:7d:96:ea:31:fe:8a: 64:f7:27:fa:2a:da:8b:14:58:e4:d4:22:40:ea:11: 54:50:90:29:20:43:28:b5:4d:9a:8e:9c:3b:bd:7d: ae:eb:77:fa:16:35:17:e8:e6:cb:6a:5f:98:5e:10: 6b:99:ca:67:79:77:8d:06:2f:ff:c8:13:27:8b:e3: 05:c5:c3:b1:1a:1e:4a:75:ea:06:86:da:e9:ff:80: 07:f2:bc:9f:cf:ab:75:dd:07:87:3a:1b:8c:55:0d: 0d:46:b7:24:60:e9:6f:b0:48:ca:8f:0f:b7:20:71: 23:f1:cc:2e:f8:f9:60:9e:fd:51:aa:59:a1:79:6b: 0e:35:24:6b:1b:03:8d:c3:a7:b6:14:40:2e:82:56: ee:1b:7b:97:06:a6:fd:62:e3:f1:57:d4:30:fa:f2: f7:53:dc:2a:da:25:6e:a8:ea:79:81:ac:dc:cd:62: a2:03:72:20:2b:05:0b:e2:3e:cd:dd:9a:ce:78:1a: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FD:06:DA:13:42:8D:F1:DD:17:13:E1:F3:78:CC:34:6D:17:9A:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c47ca85-f58b-41a9-b004-51d6fd554894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 26:c6:53:30:6a:fb:c4:61:ca:5d:3a:c4:3c:34:e2:da:65:92: 4a:c8:a6:04:cc:ed:c6:2f:14:39:33:19:4d:1e:38:a3:be:8a: 75:d0:e6:1d:be:a3:b8:ef:c4:22:4b:00:50:c2:c5:b0:3c:9d: fd:d4:b5:ba:64:16:5f:35:d9:f8:26:d5:ca:08:47:44:d7:72: 69:b2:0d:32:ac:ee:4b:71:16:fb:17:7e:76:83:1e:f9:37:8b: d3:20:08:53:e2:7e:a9:de:04:f3:e1:3c:8f:b7:1a:1a:12:6c: e7:13:f3:3b:50:9b:78:4a:f3:e9:c2:8c:e5:a0:c5:c9:b8:d0: 44:f4:32:43:4c:7a:dd:7d:7b:86:55:9c:26:69:f9:d0:f5:64: e1:6c:4b:e6:ff:8e:d9:d4:0d:d7:71:4b:7a:31:b2:bc:6f:fa: af:68:ac:eb:9c:49:5a:b7:f5:2a:b4:83:f8:31:31:f7:9c:3d: c8:ed:39:71:48:8a:e8:1a:20:f1:b3:ac:b4:6d:90:23:58:8c: 01:26:a1:ae:35:39:d5:6a:d9:40:b2:c9:fc:4b:1b:09:4b:4f: 0a:93:22:a8:bc:1e:74:99:bf:f7:ee:80:00:53:41:67:34:81: 52:55:b7:2e:d4:31:80:f6:dc:83:b9:71:92:cd:7f:66:09:0f: ae:70:83:88 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZ5FyJAZWV4QplaT5DaeNiwnI5uUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDExMzIwMDg0M1oX DTI2MDQxMzIzNTk1OVowejFJMEcGA1UEBRNAZTU5ZmJmZTQ4ZWM0NTIyNjk0ODgw MjE2Nzk3MDU5NzFmOTVlYWM2YjJlYjMxYmFmNmQwZTI5NjBlZjA4OTZkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEdgQufVJ70NwTJV5Ot8Ybi1dFQr 3ejyJCzFnDRWFqPE59dZ+DpKXdF8HPmhZ0zvQyxUBelkycm5hb8/Wn7O+Y2DXYx9 luox/opk9yf6KtqLFFjk1CJA6hFUUJApIEMotU2ajpw7vX2u63f6FjUX6ObLal+Y XhBrmcpneXeNBi//yBMni+MFxcOxGh5KdeoGhtrp/4AH8ryfz6t13QeHOhuMVQ0N RrckYOlvsEjKjw+3IHEj8cwu+Plgnv1RqlmheWsONSRrGwONw6e2FEAuglbuG3uX Bqb9YuPxV9Qw+vL3U9wq2iVuqOp5gazczWKiA3IgKwUL4j7N3ZrOeBrvoQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPP9BtoTQo3x3RcT4fN4zDRtF5rvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzljNDdjYTg1LWY1OGItNDFhOS1iMDA0LTUxZDZmZDU1NDg5NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba62DAMA0GCSqGSIb3DQEBCwUAA4IBAQAmxlMwavvEYcpdOsQ8 NOLaZZJKyKYEzO3GLxQ5MxlNHjijvop10OYdvqO478QiSwBQwsWwPJ391LW6ZBZf Ndn4JtXKCEdE13Jpsg0yrO5LcRb7F352gx75N4vTIAhT4n6p3gTz4TyPtxoaEmzn E/M7UJt4SvPpwozloMXJuNBE9DJDTHrdfXuGVZwmafnQ9WThbEvm/47Z1A3XcUt6 MbK8b/qvaKzrnElat/UqtIP4MTH3nD3I7TlxSIroGiDxs6y0bZAjWIwBJqGuNTnV atlAssn8SxsJS08KkyKovB50mb/37oAAU0FnNIFSVbcu1DGA9tyDuXGSzX9mCQ+u cIOI -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:59 2026 by rpki-client