This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa File: e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa (raw, json) Hash identifier: Jr2XXERXwqxyCC5nuUuYCMq8DZaAblH806Aa/g5KvCA= Subject key identifier: B4:F0:AA:F8:9C:CB:EB:1B:26:6E:66:56:E0:CD:16:93:02:41:FC:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C817ADD57507522CCC28F73A869AC4144C5263F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa Signing time: Wed 11 Feb 2026 00:20:12 +0000 ROA not before: Wed 11 Feb 2026 00:20:12 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:7a:dd:57:50:75:22:cc:c2:8f:73:a8:69:ac:41:44:c5:26:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:20:12 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=71ec3c729de4ad2188651e4e843e5cf5490680b2fb392e14b0be7655593499d1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:42:7a:20:a4:22:68:79:28:3d:e6:e3:6a: a9:4d:b3:57:b1:49:c0:69:fe:d0:8e:3e:e3:c8:36: 6a:da:70:e5:ad:31:03:b8:0e:22:58:83:15:99:77: 81:66:e8:ec:5d:1e:c4:90:4e:22:59:2c:8b:19:15: d5:64:1a:26:ed:3d:ef:fe:bb:f9:11:a7:d6:23:4c: a3:69:de:34:de:69:72:dc:00:b1:a7:4b:a9:a3:bc: 7a:05:cd:40:7d:ee:37:41:e2:97:96:d5:ea:7a:c9: 87:0a:b9:83:c6:21:bb:60:77:6f:78:f8:24:9d:58: a9:89:64:df:bd:50:f7:a0:90:78:c1:07:97:4e:f5: e9:9f:e5:b0:77:79:5d:c3:6f:ba:70:da:40:90:f4: d5:74:be:18:22:68:a4:f6:5a:a3:24:5e:b5:9f:01: 53:ed:91:c9:17:72:2f:03:91:47:cb:20:c9:9f:a9: 2b:79:1a:2a:b5:7d:e9:78:c1:a7:bf:3d:14:22:a9: 5e:2b:f1:b8:7e:0c:0f:32:63:a4:c6:25:3f:93:53: 6d:e3:ac:77:78:f1:52:06:e9:33:1b:29:51:c2:00: 1e:49:6e:a2:43:ce:49:72:5f:9b:ac:a9:b4:49:84: 58:59:4a:b7:4d:1d:7f:f4:c1:e9:6a:64:1e:ea:15: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F0:AA:F8:9C:CB:EB:1B:26:6E:66:56:E0:CD:16:93:02:41:FC:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07c6407-4a6d-4c72-8e3f-4f2d148c1b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 78:e0:32:2c:7d:70:3e:f1:d1:9b:fd:42:30:f2:10:bf:b5:fb: 1d:4c:a1:2f:b4:e6:38:02:76:62:64:50:3c:fd:09:ee:84:42: fc:eb:fb:4e:87:d0:97:b3:48:03:00:33:fb:f3:e8:e6:db:14: e0:71:3f:e9:c9:a4:8f:d0:3b:ef:44:30:69:99:b3:ef:00:63: a5:75:cc:76:a3:7b:b8:86:d0:d3:68:9e:d5:c0:90:f0:42:3b: fe:0e:3d:19:91:cb:e5:24:f7:1b:7a:2c:aa:e0:12:f5:5f:0b: 31:1c:2c:38:3a:be:9a:9c:b5:4b:67:76:81:74:b8:56:7b:19: 05:f9:83:e1:10:87:f4:ef:0b:a0:c7:fd:2c:8c:b4:eb:af:4e: b7:30:7f:2a:07:4a:1b:61:6f:b6:f9:5a:6b:94:b0:df:30:9e: df:bd:40:98:13:72:41:21:cf:54:1f:a0:b1:9b:68:26:de:ff: e9:ec:89:76:d8:c4:14:02:36:6b:76:41:c9:a2:8a:ed:8b:8d: 1a:d9:c4:69:5b:f8:e9:2c:ec:05:2c:ef:2e:f7:79:8c:1c:ff: de:ee:67:08:d6:9a:2a:17:91:61:6b:12:b1:f7:cf:82:1e:12: ac:77:8e:f4:94:c4:a9:9b:26:f9:3c:b8:05:0d:ed:8f:6d:00: 33:26:d1:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPIF63VdQdSLMwo9zqGmsQUTFJj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMjAxMloX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNANzFlYzNjNzI5ZGU0YWQyMTg4NjUx ZTRlODQzZTVjZjU0OTA2ODBiMmZiMzkyZTE0YjBiZTc2NTU1OTM0OTlkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNpCeiCkImh5KD3m42qpTbNXsUnA af7Qjj7jyDZq2nDlrTEDuA4iWIMVmXeBZujsXR7EkE4iWSyLGRXVZBom7T3v/rv5 EafWI0yjad403mly3ACxp0upo7x6Bc1Afe43QeKXltXqesmHCrmDxiG7YHdvePgk nVipiWTfvVD3oJB4wQeXTvXpn+Wwd3ldw2+6cNpAkPTVdL4YImik9lqjJF61nwFT 7ZHJF3IvA5FHyyDJn6kreRoqtX3peMGnvz0UIqleK/G4fgwPMmOkxiU/k1Nt46x3 ePFSBukzGylRwgAeSW6iQ85Jcl+brKm0SYRYWUq3TR1/9MHpamQe6hV1oQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLTwqvicy+sbJm5mVuDNFpMCQfyrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwN2M2NDA3LTRhNmQtNGM3Mi04ZTNmLTRmMmQxNDhjMWI2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauBAwDQYJKoZIhvcNAQELBQADggEBAHjgMix9cD7x0Zv9QjDy EL+1+x1MoS+05jgCdmJkUDz9Ce6EQvzr+06H0JezSAMAM/vz6ObbFOBxP+nJpI/Q O+9EMGmZs+8AY6V1zHaje7iG0NNontXAkPBCO/4OPRmRy+Uk9xt6LKrgEvVfCzEc LDg6vpqctUtndoF0uFZ7GQX5g+EQh/TvC6DH/SyMtOuvTrcwfyoHShthb7b5WmuU sN8wnt+9QJgTckEhz1QfoLGbaCbe/+nsiXbYxBQCNmt2Qcmiiu2LjRrZxGlb+Oks 7AUs7y73eYwc/97uZwjWmioXkWFrErH3z4IeEqx3jvSUxKmbJvk8uAUN7Y9tADMm 0ao= -----END CERTIFICATE-----Generated at Mon Feb 16 06:38:54 2026 by rpki-client