This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b95ed28-78dc-4a87-8241-9602df8787d4.roa File: 6b95ed28-78dc-4a87-8241-9602df8787d4.roa (raw, json) Hash identifier: BRYaSN6w3hjESQPiVReiwcStcsLXHZ11W3j7E9Z38eg= Subject key identifier: E8:F8:C9:87:5D:FB:D8:27:F2:98:EF:91:C3:F3:BA:B2:AE:71:95:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2246BE57E38BCC2B26B54833475BC18AB4F80BBA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b95ed28-78dc-4a87-8241-9602df8787d4.roa Signing time: Sat 08 Nov 2025 00:00:46 +0000 ROA not before: Sat 08 Nov 2025 00:00:46 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:46:be:57:e3:8b:cc:2b:26:b5:48:33:47:5b:c1:8a:b4:f8:0b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:00:46 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=e4b38400bfd8c6efe4a103e54bae8c06ad5dcb9099d2a6d78a937b2a42034e2b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:46:ae:7b:57:5b:46:8f:b6:33:53:e5:3d:84: c6:4a:c3:2f:08:5a:35:4b:d5:8d:7f:43:12:2f:63: ff:20:9a:b8:1f:19:34:6f:fd:93:27:d0:0e:bf:b2: ea:4e:38:a9:95:63:62:a3:28:3f:e7:82:35:07:b9: 08:82:12:e0:5b:2f:04:4a:85:27:40:86:f9:a7:26: d2:be:41:63:8e:60:69:4e:1f:0f:0e:31:fa:54:1e: 60:b2:0f:52:44:d4:36:a0:81:ef:45:50:bc:9e:2b: a9:a6:0e:06:47:44:95:4a:39:37:3b:bb:4e:44:9f: 33:d0:82:f2:a8:05:e5:ab:6f:cc:46:1d:ad:fa:6f: 1c:f9:b8:36:3e:71:93:e6:c0:d9:52:9b:c5:ff:71: b3:25:f7:e7:cf:e1:23:7a:50:2d:d8:59:32:51:05: 10:72:c5:d3:15:dc:40:2a:df:e7:ce:8d:2f:6f:f1: f2:74:44:58:1e:1e:da:f1:8b:8d:67:59:81:3a:3b: 89:e1:54:03:ca:3f:aa:94:00:a1:de:44:67:05:5f: 88:a1:95:24:6b:81:3d:92:75:61:02:90:6f:db:4f: 03:38:03:43:9e:35:91:9b:4e:9a:87:38:65:0e:cf: 9b:24:84:ad:36:72:fe:21:43:d6:89:40:ea:4e:fe: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F8:C9:87:5D:FB:D8:27:F2:98:EF:91:C3:F3:BA:B2:AE:71:95:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b95ed28-78dc-4a87-8241-9602df8787d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c800::/40 Signature Algorithm: sha256WithRSAEncryption 48:bf:9a:dc:56:f3:67:15:ac:30:5c:53:a2:84:97:3d:df:39: da:13:e5:99:f2:a3:8a:6d:6f:98:5a:28:4e:f5:4c:65:b7:8d: fc:39:80:f4:26:6e:28:9c:07:03:b2:29:bb:79:df:23:b6:2e: 8f:a6:07:09:63:a1:82:34:42:34:52:11:ed:5e:29:28:96:f2: 25:b5:6c:86:c9:92:5f:a2:20:10:30:c4:3f:c4:e8:73:9c:6b: e5:4f:63:7b:d1:e9:94:58:15:cf:d0:d0:0c:e1:a1:62:fd:18: 3e:57:1c:6b:11:40:f2:79:d8:b0:1d:c0:f7:02:87:12:ef:7e: 6c:7d:1e:42:be:d2:93:34:de:74:00:2c:fa:77:79:00:19:fd: 67:d0:53:d0:ae:71:96:bb:17:2b:63:d6:3c:7d:d4:6f:d4:78: 02:93:3e:dd:54:84:a1:58:a8:a1:77:aa:c8:ab:4c:fc:b6:f2: dd:b7:d1:9b:8d:aa:d0:89:e3:79:3d:7e:4b:7e:12:51:8d:15: 31:c0:a5:bc:27:37:f8:b6:24:4f:54:e0:93:26:2f:f9:2c:3f: 6e:dd:b5:97:71:ec:a4:10:f5:76:0a:2a:e9:47:13:14:3c:91: fe:c8:74:5d:0b:9b:25:8c:b2:66:6c:8a:36:71:5f:46:49:37: 6c:27:77:e8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIka+V+OLzCsmtUgzR1vBirT4C7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDA0NloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAZTRiMzg0MDBiZmQ4YzZlZmU0YTEw M2U1NGJhZThjMDZhZDVkY2I5MDk5ZDJhNmQ3OGE5MzdiMmE0MjAzNGUyYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kaue1dbRo+2M1PlPYTGSsMvCFo1 S9WNf0MSL2P/IJq4Hxk0b/2TJ9AOv7LqTjiplWNioyg/54I1B7kIghLgWy8ESoUn QIb5pybSvkFjjmBpTh8PDjH6VB5gsg9SRNQ2oIHvRVC8niuppg4GR0SVSjk3O7tO RJ8z0ILyqAXlq2/MRh2t+m8c+bg2PnGT5sDZUpvF/3GzJffnz+EjelAt2FkyUQUQ csXTFdxAKt/nzo0vb/HydERYHh7a8YuNZ1mBOjuJ4VQDyj+qlACh3kRnBV+IoZUk a4E9knVhApBv208DOANDnjWRm06ahzhlDs+bJIStNnL+IUPWiUDqTv4BQQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOj4yYdd+9gn8pjvkcPzurKucZV0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiOTVlZDI4LTc4ZGMtNGE4Ny04MjQxLTk2MDJkZjg3ODdkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaacgwDQYJKoZIhvcNAQELBQADggEBAEi/mtxW82cVrDBcU6KE lz3fOdoT5Znyo4ptb5haKE71TGW3jfw5gPQmbiicBwOyKbt53yO2Lo+mBwljoYI0 QjRSEe1eKSiW8iW1bIbJkl+iIBAwxD/E6HOca+VPY3vR6ZRYFc/Q0AzhoWL9GD5X HGsRQPJ52LAdwPcChxLvfmx9HkK+0pM03nQALPp3eQAZ/WfQU9CucZa7Fytj1jx9 1G/UeAKTPt1UhKFYqKF3qsirTPy28t230ZuNqtCJ43k9fkt+ElGNFTHApbwnN/i2 JE9U4JMmL/ksP27dtZdx7KQQ9XYKKulHExQ8kf7IdF0LmyWMsmZsijZxX0ZJN2wn d+g= -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:59 2025 by rpki-client