This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa File: 5c3824f8-42e9-4418-8966-1b2766cf39bd.roa (raw, json) Hash identifier: Kq5PRGFAnTAVPqmm1JqyZIS7738W5UgGIJJy6Zn6VZA= Subject key identifier: 40:29:E2:BD:A3:6D:F1:3E:8B:AC:1B:10:76:A7:90:1D:FB:72:5B:78 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69606B34475461072FA16C88A0BA707DF6C812EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa Signing time: Thu 04 Dec 2025 00:11:05 +0000 ROA not before: Thu 04 Dec 2025 00:11:05 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:60:6b:34:47:54:61:07:2f:a1:6c:88:a0:ba:70:7d:f6:c8:12:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:11:05 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=2f8a1ffe6c421e6e6c200f26c83010a021aa140baab4b68f43bdcbf08e1f5ba1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:a2:59:b3:cd:bc:7b:2f:c4:91:0c:d5:93: c3:f9:c0:b6:00:f6:9c:f0:0a:05:b4:47:6d:4e:56: ed:c1:79:e9:9b:93:03:6d:74:82:4b:48:bd:37:97: e6:9c:ec:ad:76:a5:7a:82:6e:f1:32:7c:35:f7:5f: 5a:1f:15:f5:8a:4c:63:d0:f9:02:c5:d5:f0:4a:2b: 5f:56:30:ef:18:95:f1:e9:68:89:d7:e9:b9:68:44: c1:a9:9d:00:4d:48:89:f4:4d:c2:19:ea:c6:3d:ea: 07:16:a5:d0:2e:54:26:92:f2:a3:e3:82:5c:bb:64: 5e:37:ec:bf:6f:d6:f8:21:03:a5:31:14:9a:a6:cd: 55:e3:50:60:db:5b:ea:35:a4:ce:a7:fc:b5:60:d1: 03:be:3f:19:7b:79:d2:02:08:11:59:59:d4:3b:02: df:3c:27:4f:2f:e6:7b:07:0a:d8:b4:65:53:cc:64: 83:dc:4a:2d:81:41:89:b1:e2:8a:b7:20:a0:ad:bc: ad:94:60:0d:5f:9a:f5:7a:c7:57:e4:ed:28:d0:d2: 22:56:ec:3f:fc:e9:f7:f1:b6:ce:f1:e2:42:01:bc: 43:ff:47:96:b5:59:49:51:d2:3c:5c:0c:fb:42:fe: 4d:83:99:75:97:70:66:d0:a8:15:bc:89:22:69:ef: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:E2:BD:A3:6D:F1:3E:8B:AC:1B:10:76:A7:90:1D:FB:72:5B:78 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:7000::/40 Signature Algorithm: sha256WithRSAEncryption 21:39:36:94:c5:e0:ee:a1:73:0f:ad:70:d8:bd:d0:7c:98:a6: 2a:32:59:1c:27:ad:4d:30:c8:2c:3f:0c:1c:4c:77:04:27:2b: 28:b5:0d:d5:19:37:3d:eb:81:de:b6:c3:e4:77:5e:6f:74:0b: 86:d6:87:ac:92:b6:f3:b3:8d:cc:00:f8:62:31:72:0d:a0:74: 01:29:c4:0c:56:29:6f:2d:08:5e:55:a0:a0:95:16:0a:ae:cb: c6:14:d9:07:b0:2a:9c:6e:0b:cb:a6:96:04:6c:75:a2:35:5e: 21:26:14:1d:a0:ad:73:8c:62:74:d2:6f:c5:e0:ac:e1:3b:6c: b8:38:ae:62:64:71:99:4d:ec:9c:50:1f:28:8f:a5:88:81:6f: b0:96:a4:74:06:f2:e9:e8:57:21:99:3e:db:98:db:7a:1f:02: 82:30:e6:d2:9c:27:69:eb:d7:48:1c:8f:9d:3a:f5:b5:9b:54: ca:c4:50:57:67:69:e6:3d:9d:52:ed:dc:09:e2:73:d8:3d:69: dc:26:5c:a1:26:c7:94:16:ac:00:6a:aa:70:94:e6:69:d5:35: 01:9e:0e:81:02:bf:15:ad:94:c8:14:52:be:d5:fd:06:41:e9: 09:08:16:b3:6d:99:da:7e:8b:7d:f7:ae:f9:a9:55:75:07:d8: f2:f5:ef:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaWBrNEdUYQcvoWyIoLpwffbIEu4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMTEwNVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAMmY4YTFmZmU2YzQyMWU2ZTZjMjAw ZjI2YzgzMDEwYTAyMWFhMTQwYmFhYjRiNjhmNDNiZGNiZjA4ZTFmNWJhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBqiWbPNvHsvxJEM1ZPD+cC2APac 8AoFtEdtTlbtwXnpm5MDbXSCS0i9N5fmnOytdqV6gm7xMnw1919aHxX1ikxj0PkC xdXwSitfVjDvGJXx6WiJ1+m5aETBqZ0ATUiJ9E3CGerGPeoHFqXQLlQmkvKj44Jc u2ReN+y/b9b4IQOlMRSaps1V41Bg21vqNaTOp/y1YNEDvj8Ze3nSAggRWVnUOwLf PCdPL+Z7BwrYtGVTzGSD3EotgUGJseKKtyCgrbytlGANX5r1esdX5O0o0NIiVuw/ /On38bbO8eJCAbxD/0eWtVlJUdI8XAz7Qv5Ng5l1l3Bm0KgVvIkiae/2AwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEAp4r2jbfE+i6wbEHankB37clt4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjMzgyNGY4LTQyZTktNDQxOC04OTY2LTFiMjc2NmNmMzliZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8XAwDQYJKoZIhvcNAQELBQADggEBACE5NpTF4O6hcw+tcNi9 0HyYpioyWRwnrU0wyCw/DBxMdwQnKyi1DdUZNz3rgd62w+R3Xm90C4bWh6yStvOz jcwA+GIxcg2gdAEpxAxWKW8tCF5VoKCVFgquy8YU2QewKpxuC8umlgRsdaI1XiEm FB2grXOMYnTSb8XgrOE7bLg4rmJkcZlN7JxQHyiPpYiBb7CWpHQG8unoVyGZPtuY 23ofAoIw5tKcJ2nr10gcj5069bWbVMrEUFdnaeY9nVLt3Anic9g9adwmXKEmx5QW rABqqnCU5mnVNQGeDoECvxWtlMgUUr7V/QZB6QkIFrNtmdp+i333rvmpVXUH2PL1 72g= -----END CERTIFICATE-----Generated at Thu Dec 4 16:02:54 2025 by rpki-client