This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa File: 8eab24e3-cddd-4314-ba19-97484d66d2ff.roa (raw, json) Hash identifier: +4bv6HOb5qOeaNZlKTtMxwD7VDp0npR3lWkxQjxGS3Y= Subject key identifier: 68:C3:12:DE:0F:15:8B:9B:D3:4E:EC:80:5C:12:B1:7A:31:2D:B0:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73E9D6C258C1EA4E38E15BFD1BE747F62303AE33 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa Signing time: Thu 04 Dec 2025 00:40:24 +0000 ROA not before: Thu 04 Dec 2025 00:40:24 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e9:d6:c2:58:c1:ea:4e:38:e1:5b:fd:1b:e7:47:f6:23:03:ae:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:40:24 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=529fb8d5d1ebea6f1e9a8d33bb572b0ab88a9f664f470af20954c55c34130470, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:4b:92:d0:03:3f:a0:f5:9a:c2:6e:c7:7d: cf:35:69:ec:18:b6:3f:4b:2d:5b:fa:2f:24:6a:11: bb:a3:47:66:e1:a3:4d:a7:77:f3:64:ac:3a:14:5c: 1b:05:d0:45:bd:9f:27:65:c3:7b:ec:25:9f:91:8a: 80:b1:e2:41:37:90:f8:3e:3e:e3:27:28:ef:a3:56: ca:a6:0b:12:cb:cc:7e:4f:e3:26:87:0a:11:33:fe: cf:53:36:7d:f8:83:b0:24:5f:49:ca:34:3b:7e:b2: 6a:2a:c4:5a:8a:de:aa:16:e1:7a:56:42:e2:f9:23: a7:a3:c4:2d:78:b6:5a:c4:70:01:d8:d0:e1:e1:2d: 0a:cb:90:42:84:ef:ac:5c:4f:bf:e0:eb:b4:aa:60: 97:32:06:a1:90:94:e9:36:e4:95:46:23:e7:c3:28: 70:61:d9:32:74:bc:98:de:6e:1d:df:6c:2a:1c:42: 5d:12:73:73:6d:16:c2:e7:78:a7:00:4a:48:3b:4a: ae:4f:2b:eb:5a:7c:d5:00:95:3d:c6:20:5d:f7:37: ef:91:17:08:3a:18:3a:52:7c:95:b3:e3:50:29:c3: 28:c3:96:23:2c:92:52:6a:4f:60:ab:98:f2:44:22: aa:f6:d8:01:eb:0f:37:6f:d3:7d:db:9a:fe:1d:35: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C3:12:DE:0F:15:8B:9B:D3:4E:EC:80:5C:12:B1:7A:31:2D:B0:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:4800::/40 Signature Algorithm: sha256WithRSAEncryption b9:38:39:77:1d:ef:29:b1:b6:29:b0:d3:be:73:6c:96:4c:cd: c5:9b:8b:54:08:86:9d:fe:22:43:f5:b3:a1:20:f8:2f:97:ab: b4:e4:a1:02:70:fd:a3:8f:2a:fc:8d:7e:4f:48:e7:4b:fe:dd: 63:5b:b7:00:21:b1:ae:eb:27:84:d6:56:aa:9c:85:c4:b8:d4: 21:45:a6:bb:9f:14:bd:e2:0c:95:96:82:89:cc:b0:30:bb:20: b6:80:3b:d2:56:4c:83:9e:f0:54:a3:db:85:a0:2b:ab:b4:d8: 7c:b4:79:64:d0:d0:0a:a1:5d:dd:b5:c0:56:e0:04:3a:6d:1d: 73:37:bc:44:71:f7:75:42:d8:31:1e:37:b6:c2:67:c1:89:67: c7:85:79:78:4a:5b:37:3c:8b:50:f4:e1:80:e0:55:b1:7e:a7: 70:0d:e0:04:a5:12:50:2f:be:3f:0c:81:58:6d:f7:31:d0:3d: 07:a6:5d:f2:8c:d2:5c:b6:c9:23:bd:f8:b5:17:01:af:1c:a9: e6:f6:2a:2d:7e:65:0c:30:cb:a0:5e:49:9a:96:d3:a6:6b:43: aa:f6:dd:7d:cd:8a:29:b2:92:98:44:e8:22:03:79:fd:66:21: fb:6b:46:db:06:a2:f7:20:f4:4b:c6:ab:3d:31:c5:3e:75:be: 96:3b:fb:40 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc+nWwljB6k444Vv9G+dH9iMDrjMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwNDAyNFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANTI5ZmI4ZDVkMWViZWE2ZjFlOWE4 ZDMzYmI1NzJiMGFiODhhOWY2NjRmNDcwYWYyMDk1NGM1NWMzNDEzMDQ3MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9NLktADP6D1msJux33PNWnsGLY/ Sy1b+i8kahG7o0dm4aNNp3fzZKw6FFwbBdBFvZ8nZcN77CWfkYqAseJBN5D4Pj7j Jyjvo1bKpgsSy8x+T+MmhwoRM/7PUzZ9+IOwJF9JyjQ7frJqKsRait6qFuF6VkLi +SOno8QteLZaxHAB2NDh4S0Ky5BChO+sXE+/4Ou0qmCXMgahkJTpNuSVRiPnwyhw YdkydLyY3m4d32wqHEJdEnNzbRbC53inAEpIO0quTyvrWnzVAJU9xiBd9zfvkRcI Ohg6UnyVs+NQKcMow5YjLJJSak9gq5jyRCKq9tgB6w83b9N925r+HTW+HQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGjDEt4PFYub007sgFwSsXoxLbAHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlYWIyNGUzLWNkZGQtNDMxNC1iYTE5LTk3NDg0ZDY2ZDJmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoEgwDQYJKoZIhvcNAQELBQADggEBALk4OXcd7ymxtimw075z bJZMzcWbi1QIhp3+IkP1s6Eg+C+Xq7TkoQJw/aOPKvyNfk9I50v+3WNbtwAhsa7r J4TWVqqchcS41CFFprufFL3iDJWWgonMsDC7ILaAO9JWTIOe8FSj24WgK6u02Hy0 eWTQ0AqhXd21wFbgBDptHXM3vERx93VC2DEeN7bCZ8GJZ8eFeXhKWzc8i1D04YDg VbF+p3AN4ASlElAvvj8MgVht9zHQPQemXfKM0ly2ySO9+LUXAa8cqeb2Ki1+ZQww y6BeSZqW06ZrQ6r23X3NiimykphE6CIDef1mIftrRtsGovcg9EvGqz0xxT51vpY7 +0A= -----END CERTIFICATE-----Generated at Mon Dec 15 19:43:09 2025 by rpki-client