This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa File: 001c821e-ff58-41fe-8cf9-9e4942937836.roa (raw, json) Hash identifier: pVXXVgjejrAReBJuhkMeOTPgyBFbnamQ3GM7x1pJcLQ= Subject key identifier: AD:41:7F:04:76:80:9C:63:99:27:A4:2A:95:F7:A5:1E:EC:0A:DF:AE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 621C74A430401BC5452BF4B8E6813309F752AAF8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa Signing time: Thu 04 Dec 2025 00:20:37 +0000 ROA not before: Thu 04 Dec 2025 00:20:37 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1c:74:a4:30:40:1b:c5:45:2b:f4:b8:e6:81:33:09:f7:52:aa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:20:37 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=594045236522399a90939c438aba4fdf12343d57b55fa96e0086c1f32bf338a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:9d:21:d1:e2:38:d7:83:6c:56:1b:ce:94: 01:85:9b:38:f6:95:8b:36:e8:68:63:cc:a8:bd:64: e6:29:03:5d:85:7b:d6:c0:c7:d6:51:e1:c4:7c:96: 3f:3f:26:2a:1d:a7:d8:03:83:4d:36:0a:98:27:b7: dc:53:5d:df:ce:0e:1d:45:f6:2c:ff:fe:c1:0d:6a: 8e:87:73:26:d0:e8:62:d9:c6:ab:ac:4b:29:1f:9e: 63:84:2c:b7:d9:05:f4:71:ce:6f:0d:95:03:d7:76: 19:46:35:6d:21:e9:36:d2:5c:62:c4:81:89:df:ba: 56:a4:55:5f:23:e4:2b:44:22:ac:92:c5:35:8c:9a: b3:7a:f1:1a:b3:ca:0a:2e:8e:d5:ba:5f:f1:1c:4b: a2:55:45:21:96:4a:ec:af:42:f7:53:d1:53:e1:86: 44:42:56:45:55:10:fc:c5:2f:57:a6:d1:a9:22:cb: 34:3a:e7:bf:42:9c:4c:9c:c1:eb:fd:bb:70:0a:d3: 89:66:3f:4d:c2:1e:2c:55:29:35:d6:06:52:12:a5: 08:f6:99:83:43:b3:39:01:1e:f7:3e:82:0e:3d:cd: b2:bd:98:59:18:2c:c1:f6:4b:c5:29:7a:0b:bc:87: fb:16:8d:8e:3a:cd:6f:c8:0f:f6:9d:4a:23:ac:45: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:7F:04:76:80:9C:63:99:27:A4:2A:95:F7:A5:1E:EC:0A:DF:AE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 72:46:83:97:48:93:f9:e4:b5:bd:f9:d4:72:80:c8:14:23:fd: a0:9a:6c:18:d7:c8:c6:58:e1:5e:96:1a:93:bc:bd:1b:68:9a: 38:86:b6:19:bb:74:ab:d1:99:05:da:c9:ce:e3:2d:de:4b:ba: d9:e8:91:cb:ea:ad:c6:bc:f7:a5:01:56:0c:07:5a:4b:cc:d7: 7d:7e:56:ee:a9:92:86:a5:a5:11:6a:5e:07:a8:f4:8f:e6:3f: 3f:0d:e6:cc:b7:0e:5b:80:06:58:a2:be:fb:43:2d:97:1e:fe: b4:04:52:2a:bb:67:b3:73:fa:c2:a2:28:2f:0d:cf:85:0c:7a: 64:7d:54:c5:ee:9d:5a:2c:ca:d3:f1:a5:10:5b:6a:0a:9b:d7: 6a:4e:a4:a4:c1:09:b1:ad:72:4d:af:26:89:6e:54:a7:ce:38: 37:84:e5:04:ef:4b:1c:1f:8b:19:a2:18:61:d5:79:2c:dd:54: 88:d9:45:a7:80:eb:9d:0e:79:d9:1e:f1:78:ab:e7:96:8f:47: aa:4a:b9:00:5f:96:47:9f:03:f4:d9:30:6c:7c:08:69:dc:3a: 83:0a:fa:38:de:4a:7c:60:65:85:87:fc:bd:03:81:36:bb:2e: 09:8b:1d:24:de:52:41:74:5b:28:61:06:96:2d:0d:4d:72:ad: 37:5a:32:2c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYhx0pDBAG8VFK/S45oEzCfdSqvgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMjAzN1oX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANTk0MDQ1MjM2NTIyMzk5YTkwOTM5 YzQzOGFiYTRmZGYxMjM0M2Q1N2I1NWZhOTZlMDA4NmMxZjMyYmYzMzhhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8mdIdHiONeDbFYbzpQBhZs49pWL NuhoY8yovWTmKQNdhXvWwMfWUeHEfJY/PyYqHafYA4NNNgqYJ7fcU13fzg4dRfYs //7BDWqOh3Mm0Ohi2carrEspH55jhCy32QX0cc5vDZUD13YZRjVtIek20lxixIGJ 37pWpFVfI+QrRCKsksU1jJqzevEas8oKLo7Vul/xHEuiVUUhlkrsr0L3U9FT4YZE QlZFVRD8xS9XptGpIss0Oue/QpxMnMHr/btwCtOJZj9Nwh4sVSk11gZSEqUI9pmD Q7M5AR73PoIOPc2yvZhZGCzB9kvFKXoLvIf7Fo2OOs1vyA/2nUojrEWORQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK1BfwR2gJxjmSekKpX3pR7sCt+uMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwMWM4MjFlLWZmNTgtNDFmZS04Y2Y5LTllNDk0MjkzNzgzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoIAwDQYJKoZIhvcNAQELBQADggEBAHJGg5dIk/nktb351HKA yBQj/aCabBjXyMZY4V6WGpO8vRtomjiGthm7dKvRmQXayc7jLd5Lutnokcvqrca8 96UBVgwHWkvM131+Vu6pkoalpRFqXgeo9I/mPz8N5sy3DluABliivvtDLZce/rQE Uiq7Z7Nz+sKiKC8Nz4UMemR9VMXunVosytPxpRBbagqb12pOpKTBCbGtck2vJolu VKfOODeE5QTvSxwfixmiGGHVeSzdVIjZRaeA650Oedke8Xir55aPR6pKuQBflkef A/TZMGx8CGncOoMK+jjeSnxgZYWH/L0DgTa7LgmLHSTeUkF0WyhhBpYtDU1yrTda Miw= -----END CERTIFICATE-----Generated at Fri Dec 5 09:30:49 2025 by rpki-client