This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa File: 652666fe-aad6-4cd8-8e35-91322c742337.roa (raw, json) Hash identifier: 4Sjf0gs3lZOVhxu6xNodbiFARW0h7Nf6MQMQDR7aQh8= Subject key identifier: BA:35:C6:6D:1F:19:24:45:10:6D:7C:A6:8E:FA:70:9A:63:CE:C0:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F92B110238085FF1A0FD390C50DC389322BBA3A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa Signing time: Tue 02 Dec 2025 00:01:23 +0000 ROA not before: Tue 02 Dec 2025 00:01:23 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 17:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:92:b1:10:23:80:85:ff:1a:0f:d3:90:c5:0d:c3:89:32:2b:ba:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:01:23 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=547c3e6e4b1c85d82ff1d745509259e8a6f1dbc088a16152d237142b20b3bd6f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:d0:58:e2:57:11:08:38:77:ee:13:a4:98: 97:ce:0d:ce:ae:9d:f5:dd:f5:2b:62:d4:e9:09:b9: 0a:3b:6e:e6:b0:37:eb:a2:69:bf:e2:5e:0e:f3:65: e7:a7:e3:af:6b:7f:ab:49:1f:1e:78:95:a7:9d:d6: 40:23:c6:56:62:62:bc:f6:1f:6d:67:b3:65:05:73: a6:c8:ee:4f:45:3f:c2:55:a1:5a:c6:66:36:b4:0e: db:08:20:6c:e7:5a:fb:8c:f6:fe:2e:25:93:d6:14: 0e:cb:1d:29:e5:58:9f:c5:a7:e8:bf:ec:36:51:e8: ab:2a:3a:37:d1:75:14:15:f5:c3:a0:7c:0b:8f:e5: 1d:c5:33:fa:7f:73:aa:31:e7:c2:85:52:08:15:12: 17:76:b7:50:26:35:30:0e:a1:cc:3b:a7:7e:de:d7: b9:e9:dd:07:d9:34:9c:7f:2a:3a:f6:90:34:b5:04: ce:03:f7:d1:9e:ee:9f:20:61:c3:df:19:75:5d:49: 2b:af:6c:7f:8e:b7:50:5d:81:69:f1:f4:ea:e6:79: 2a:e0:c1:b5:bc:9b:ca:3c:7f:32:cb:22:26:5b:6d: a5:59:50:cc:3d:3e:eb:2e:44:49:44:44:40:b7:7e: 76:38:3c:dd:3a:af:2c:e4:8a:3e:1a:c8:bd:8a:db: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:35:C6:6D:1F:19:24:45:10:6D:7C:A6:8E:FA:70:9A:63:CE:C0:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/652666fe-aad6-4cd8-8e35-91322c742337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9000::/40 Signature Algorithm: sha256WithRSAEncryption ba:c4:8d:e6:49:68:ee:1e:24:bc:c0:a9:7c:52:78:52:5b:18: 56:60:7e:67:1e:54:5d:0a:9f:a9:d7:a9:59:57:bb:f4:52:64: bb:fb:c3:dd:50:f8:47:b2:9b:13:9b:95:3c:4a:bf:8f:7a:60: 51:92:3c:a1:8e:19:1f:17:28:a6:0e:ed:de:b3:c4:b2:12:55: 3a:62:db:12:f9:35:41:26:73:2d:2f:94:7c:cb:3d:83:15:eb: 0d:00:d9:79:e4:08:92:21:17:21:7c:d3:e2:ae:2d:bc:f8:9b: ec:19:b9:81:94:a4:6c:1e:e2:26:01:4b:65:13:46:be:94:ea: 44:c3:62:42:85:43:73:93:55:ed:e3:9f:28:74:59:0a:92:d6: b1:71:81:62:e7:29:67:6a:56:5d:43:58:fc:8c:70:c4:79:f1: 65:a6:e1:bb:bf:ec:5c:e3:bf:31:de:2c:3b:33:bb:0d:05:7c: 72:9d:d8:c1:a6:fe:0e:0b:b8:4a:b1:69:98:8c:df:b7:02:2f: fa:e9:04:3a:98:77:25:b2:4e:26:5a:ee:12:d4:dd:be:ec:ed: 3e:98:2d:29:35:dc:93:56:2c:d9:5c:42:21:91:a2:15:de:89: 0a:a1:06:0c:0a:04:c9:b7:80:4f:18:62:e8:91:86:3e:cd:b4: 9a:c5:d2:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUb5KxECOAhf8aD9OQxQ3DiTIrujowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDEyM1oX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNANTQ3YzNlNmU0YjFjODVkODJmZjFk NzQ1NTA5MjU5ZThhNmYxZGJjMDg4YTE2MTUyZDIzNzE0MmIyMGIzYmQ2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQjQWOJXEQg4d+4TpJiXzg3Orp31 3fUrYtTpCbkKO27msDfromm/4l4O82Xnp+Ova3+rSR8eeJWnndZAI8ZWYmK89h9t Z7NlBXOmyO5PRT/CVaFaxmY2tA7bCCBs51r7jPb+LiWT1hQOyx0p5Vifxafov+w2 UeirKjo30XUUFfXDoHwLj+UdxTP6f3OqMefChVIIFRIXdrdQJjUwDqHMO6d+3te5 6d0H2TScfyo69pA0tQTOA/fRnu6fIGHD3xl1XUkrr2x/jrdQXYFp8fTq5nkq4MG1 vJvKPH8yyyImW22lWVDMPT7rLkRJRERAt352ODzdOq8s5Io+Gsi9ituTOQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLo1xm0fGSRFEG18po76cJpjzsDTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY1MjY2NmZlLWFhZDYtNGNkOC04ZTM1LTkxMzIyYzc0MjMzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/5AwDQYJKoZIhvcNAQELBQADggEBALrEjeZJaO4eJLzAqXxS eFJbGFZgfmceVF0Kn6nXqVlXu/RSZLv7w91Q+EeymxOblTxKv496YFGSPKGOGR8X KKYO7d6zxLISVTpi2xL5NUEmcy0vlHzLPYMV6w0A2XnkCJIhFyF80+KuLbz4m+wZ uYGUpGwe4iYBS2UTRr6U6kTDYkKFQ3OTVe3jnyh0WQqS1rFxgWLnKWdqVl1DWPyM cMR58WWm4bu/7FzjvzHeLDszuw0FfHKd2MGm/g4LuEqxaZiM37cCL/rpBDqYdyWy TiZa7hLU3b7s7T6YLSk13JNWLNlcQiGRohXeiQqhBgwKBMm3gE8YYuiRhj7NtJrF 0lk= -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:31 2025 by rpki-client