This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d76bb9b9-9781-4aef-9105-70cf2bb62bf3.roa File: d76bb9b9-9781-4aef-9105-70cf2bb62bf3.roa (raw, json) Hash identifier: I3ggIyCk9BloJ+zidhxoHdtnOvzHhU7/UBCzEyChOxI= Subject key identifier: E8:98:41:E7:9F:DB:86:8C:4D:9D:C8:27:A6:34:A8:56:F7:8B:89:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 023A03AF13F55E83E0E3846364C4E0B819D2AE4C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d76bb9b9-9781-4aef-9105-70cf2bb62bf3.roa Signing time: Tue 13 Jan 2026 20:08:44 +0000 ROA not before: Tue 13 Jan 2026 20:08:44 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3a:03:af:13:f5:5e:83:e0:e3:84:63:64:c4:e0:b8:19:d2:ae:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jan 13 20:08:44 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=079cb88ec265733f4d1dbeac15b4e47b8f25b5851b85df074221a70898c1f622, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:4a:a1:d1:c8:2a:5f:37:6c:dc:d3:13:70: fa:f4:d6:ad:d7:6b:b6:69:7f:fc:2e:fb:de:30:71: 6e:22:f3:a4:4d:7b:e0:9c:8f:49:9b:46:5a:24:9f: c2:52:9d:83:72:a4:12:98:1a:3a:9d:8b:ca:41:74: 90:30:f3:b2:a2:63:e0:ae:b5:03:07:77:d0:b5:c2: 3c:61:8e:ce:72:12:db:5d:77:75:65:36:f1:ea:35: db:ce:e3:f7:d7:52:fb:73:df:1c:4e:bc:06:61:f3: f2:3b:86:74:98:4f:3c:d7:88:7f:6e:52:3e:1f:61: 25:14:dc:15:ed:68:98:47:7b:21:09:3e:2e:42:5c: cb:ac:9a:d0:b4:ee:b5:45:5a:b0:43:24:33:e7:21: 53:d2:51:6d:ab:3f:22:9e:ae:e5:15:78:03:ef:c2: 9a:24:3b:a3:d4:bf:41:89:fd:89:2b:a2:56:d8:b6: af:50:71:b6:51:37:b1:cb:ee:71:fa:80:9b:65:b7: 9a:bf:f2:9a:3f:12:91:84:75:e6:1f:12:e3:82:ef: d4:60:91:a3:6d:13:ad:27:8a:85:a9:25:ca:cd:09: 7a:03:e1:d0:0a:a2:d9:ac:98:95:fc:a0:48:28:ab: 1a:a0:4d:45:67:20:4c:53:1f:9d:9b:b9:0b:b0:a2: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:41:E7:9F:DB:86:8C:4D:9D:C8:27:A6:34:A8:56:F7:8B:89:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d76bb9b9-9781-4aef-9105-70cf2bb62bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:7080::/48 Signature Algorithm: sha256WithRSAEncryption af:f4:a8:10:15:c5:8f:1b:f9:76:dc:f8:e1:c5:10:92:5a:b4: 87:d6:4c:50:36:48:a5:ab:10:04:61:ee:64:7c:a9:04:9e:bd: 6b:bf:ec:f3:a6:73:72:d7:c6:a7:b2:7b:43:c4:83:aa:92:62: 36:ac:92:fa:46:fb:8c:21:22:af:22:68:d7:a5:c5:ba:bc:a9: 5e:02:74:d9:16:12:bf:ee:01:63:0e:f2:9a:b4:4a:91:25:fa: 76:6e:d2:a8:80:9d:c4:53:64:47:20:9a:50:ba:f2:fe:e4:22: e9:2d:e0:51:41:73:d6:3b:69:03:41:23:20:96:ea:af:c9:5d: 26:c9:c9:fd:ae:3a:47:ec:21:43:96:4b:fc:a8:9f:89:d2:7b: 8f:74:5b:3f:42:cd:6c:7c:77:15:50:83:2a:d0:f7:4b:a9:32: a2:5c:a5:92:94:b0:28:74:cf:d9:db:e4:88:70:fc:9e:1f:60: bb:b0:b4:00:1f:8a:7c:50:20:7f:be:6f:30:d3:1b:9e:85:45: 81:b8:02:e0:4f:b2:c3:88:bf:aa:23:1e:bb:c6:54:66:a8:4d: f4:0f:32:61:27:b7:f4:4c:ed:4a:89:cd:b2:42:53:d0:20:0c: f7:e1:cb:59:59:40:89:8f:57:2e:84:a1:e8:6c:ba:06:16:2c: 21:84:a3:33 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAjoDrxP1XoPg44RjZMTguBnSrkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDExMzIwMDg0NFoX DTI2MDQxMzIzNTk1OVowejFJMEcGA1UEBRNAMDc5Y2I4OGVjMjY1NzMzZjRkMWRi ZWFjMTViNGU0N2I4ZjI1YjU4NTFiODVkZjA3NDIyMWE3MDg5OGMxZjYyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJRKodHIKl83bNzTE3D69Nat12u2 aX/8LvveMHFuIvOkTXvgnI9Jm0ZaJJ/CUp2DcqQSmBo6nYvKQXSQMPOyomPgrrUD B3fQtcI8YY7OchLbXXd1ZTbx6jXbzuP311L7c98cTrwGYfPyO4Z0mE8814h/blI+ H2ElFNwV7WiYR3shCT4uQlzLrJrQtO61RVqwQyQz5yFT0lFtqz8inq7lFXgD78Ka JDuj1L9Bif2JK6JW2LavUHG2UTexy+5x+oCbZbeav/KaPxKRhHXmHxLjgu/UYJGj bROtJ4qFqSXKzQl6A+HQCqLZrJiV/KBIKKsaoE1FZyBMUx+dm7kLsKLa9QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOiYQeef24aMTZ3IJ6Y0qFb3i4lYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q3NmJiOWI5LTk3ODEtNGFlZi05MTA1LTcwY2YyYmI2MmJmMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba63CAMA0GCSqGSIb3DQEBCwUAA4IBAQCv9KgQFcWPG/l23Pjh xRCSWrSH1kxQNkilqxAEYe5kfKkEnr1rv+zzpnNy18ansntDxIOqkmI2rJL6RvuM ISKvImjXpcW6vKleAnTZFhK/7gFjDvKatEqRJfp2btKogJ3EU2RHIJpQuvL+5CLp LeBRQXPWO2kDQSMgluqvyV0mycn9rjpH7CFDlkv8qJ+J0nuPdFs/Qs1sfHcVUIMq 0PdLqTKiXKWSlLAodM/Z2+SIcPyeH2C7sLQAH4p8UCB/vm8w0xuehUWBuALgT7LD iL+qIx67xlRmqE30DzJhJ7f0TO1Kic2yQlPQIAz34ctZWUCJj1cuhKHobLoGFiwh hKMz -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:25 2026 by rpki-client