This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa File: bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa (raw, json) Hash identifier: wP64PCvL4QZuF6RsvgdzZ/ha8zQxoAD93emrXX4PYVQ= Subject key identifier: 60:30:42:4F:06:0D:B7:66:A1:D4:77:47:B9:53:0E:9B:0F:92:E3:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 27C47AF1D25EEAD5ADC6355EA968E915A8A3881D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa Signing time: Wed 11 Feb 2026 00:10:49 +0000 ROA not before: Wed 11 Feb 2026 00:10:49 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c4:7a:f1:d2:5e:ea:d5:ad:c6:35:5e:a9:68:e9:15:a8:a3:88:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:49 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=297ab14046daa7d64eb99d369832e6e1e34e05cb30d941d11301da92f470d3b0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:67:a7:59:1f:8c:60:ba:16:b0:cc:69:ab: 5c:7a:76:e5:1d:fa:cb:44:48:c4:9b:f8:50:c6:9c: ff:9b:63:e0:a5:1d:29:95:3e:0f:af:fb:03:97:c9: 99:fb:35:a2:5e:43:5c:8c:86:9f:7d:21:f0:8d:79: 15:bf:81:bb:aa:a5:0e:05:cb:a6:e0:5c:59:fa:09: 8d:9c:2b:bb:7e:93:f9:91:14:97:82:84:14:d3:a7: 4b:dc:c3:91:a6:30:6b:61:37:91:f4:84:6f:5d:e0: e9:07:6a:99:92:2a:6f:ae:aa:21:51:ba:4b:55:1f: 9c:04:79:fc:44:5b:ba:02:68:85:62:2f:42:4e:56: 54:08:5a:a9:4c:94:2a:22:8d:b1:eb:4a:e7:73:e6: 3c:c3:b1:c9:b6:60:97:ad:94:88:41:09:76:c2:51: a8:77:77:b5:10:fe:5f:a0:52:e9:ac:74:d3:21:6f: ff:15:96:82:d4:9c:ae:8c:06:c9:bd:7b:79:15:ca: b1:e1:5c:bd:32:09:8a:04:d7:8b:30:5f:e0:70:29: 82:dd:ba:4a:37:61:1d:cb:56:09:57:33:d1:79:00: 6e:75:7d:ae:b7:f4:8c:9d:c7:c8:7b:9a:8e:7d:b2: 4c:0c:83:e8:f5:b2:50:8b:0a:b5:1f:73:4b:61:38: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:30:42:4F:06:0D:B7:66:A1:D4:77:47:B9:53:0E:9B:0F:92:E3:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf7dfcf8-ba0c-47e9-8ddb-6a6d8ec70412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c800::/40 Signature Algorithm: sha256WithRSAEncryption a6:46:22:95:3c:ba:e1:7b:d6:f8:13:10:92:d4:4a:e6:b0:60: 92:69:13:2d:ea:49:ae:66:d3:5f:ec:4a:5d:9b:03:ee:aa:a3: cd:3e:d5:ab:8d:18:05:5a:50:08:df:9f:40:da:83:6e:4b:7f: 29:89:c7:5c:dc:7c:56:c4:76:ef:99:53:b6:c4:56:73:b9:11: 9d:ba:f5:86:34:d0:51:66:46:fa:42:9a:78:52:5f:a4:70:af: 80:9a:d3:29:76:45:70:e5:66:c5:1d:22:37:aa:63:18:28:3c: 4e:2b:a5:60:ae:03:ac:8d:bd:f9:f5:35:d2:41:49:da:16:af: f7:1e:a2:4c:f6:17:13:3f:a6:c8:e2:68:73:8b:70:f6:7d:fe: 17:00:87:ed:87:1c:8e:23:5f:ad:ac:41:37:07:b8:e7:d1:0a: 39:88:22:64:a6:04:ee:c5:70:99:80:51:0c:4b:16:c9:e4:51: 9c:9d:f4:db:ff:a2:26:29:11:0e:ce:a0:ae:bc:1e:aa:e7:a7: 8d:fa:55:7e:d1:e8:cf:eb:d2:97:66:41:5f:16:e0:be:8c:d3: e3:d2:8a:52:7e:a0:94:e3:38:b4:b2:c4:56:de:41:7e:6c:2f: 91:36:98:a9:17:99:b0:fc:43:21:b1:1f:87:27:d8:a4:f9:8d: eb:ca:14:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJ8R68dJe6tWtxjVeqWjpFaijiB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTA0OVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMjk3YWIxNDA0NmRhYTdkNjRlYjk5 ZDM2OTgzMmU2ZTFlMzRlMDVjYjMwZDk0MWQxMTMwMWRhOTJmNDcwZDNiMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOpnp1kfjGC6FrDMaatcenblHfrL REjEm/hQxpz/m2PgpR0plT4Pr/sDl8mZ+zWiXkNcjIaffSHwjXkVv4G7qqUOBcum 4FxZ+gmNnCu7fpP5kRSXgoQU06dL3MORpjBrYTeR9IRvXeDpB2qZkipvrqohUbpL VR+cBHn8RFu6AmiFYi9CTlZUCFqpTJQqIo2x60rnc+Y8w7HJtmCXrZSIQQl2wlGo d3e1EP5foFLprHTTIW//FZaC1JyujAbJvXt5Fcqx4Vy9MgmKBNeLMF/gcCmC3bpK N2Edy1YJVzPReQBudX2ut/SMncfIe5qOfbJMDIPo9bJQiwq1H3NLYThCUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGAwQk8GDbdmodR3R7lTDpsPkuMzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmN2RmY2Y4LWJhMGMtNDdlOS04ZGRiLTZhNmQ4ZWM3MDQxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMgwDQYJKoZIhvcNAQELBQADggEBAKZGIpU8uuF71vgTEJLU SuawYJJpEy3qSa5m01/sSl2bA+6qo80+1auNGAVaUAjfn0Dag25LfymJx1zcfFbE du+ZU7bEVnO5EZ269YY00FFmRvpCmnhSX6Rwr4Ca0yl2RXDlZsUdIjeqYxgoPE4r pWCuA6yNvfn1NdJBSdoWr/ceokz2FxM/psjiaHOLcPZ9/hcAh+2HHI4jX62sQTcH uOfRCjmIImSmBO7FcJmAUQxLFsnkUZyd9Nv/oiYpEQ7OoK68Hqrnp436VX7R6M/r 0pdmQV8W4L6M0+PSilJ+oJTjOLSyxFbeQX5sL5E2mKkXmbD8QyGxH4cn2KT5jevK FJs= -----END CERTIFICATE-----Generated at Mon Feb 16 06:38:54 2026 by rpki-client