This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa File: 05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa (raw, json) Hash identifier: j4pzsXF7SgSmtKtjpzdSt9SAjjRgGmkNJ1q7yBuHE5g= Subject key identifier: C4:BF:31:11:22:E7:F3:CF:8A:2C:10:B7:4A:78:9A:66:06:E7:8F:66 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 33E92054A0313347E80F537A1513A933249B76A1 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa Signing time: Wed 10 Dec 2025 06:20:59 +0000 ROA not before: Wed 10 Dec 2025 06:20:59 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e9:20:54:a0:31:33:47:e8:0f:53:7a:15:13:a9:33:24:9b:76:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:20:59 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=9ab5e1b3703f6fe813c6d7a330cd95ab1f0b85b205e00a7fd01fc55cbbffb3b2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:40:86:91:45:47:44:73:04:8d:79:be:04: c4:44:d9:c5:f0:93:10:fe:f7:61:7a:82:48:f7:f3: e9:97:80:ee:c8:24:e3:75:3b:3e:34:d3:a9:43:7a: ad:a8:63:af:ac:68:05:15:b6:45:3d:d7:5f:09:02: 70:31:c3:fd:a9:e9:b2:66:09:97:79:2b:fa:3f:2d: 47:9e:22:47:fb:5c:d1:a4:64:09:03:f6:0f:d7:66: b5:db:c9:fe:59:75:4d:fd:62:e8:0c:48:e2:f5:7a: 71:2b:52:42:72:c7:c5:dd:55:e1:73:25:5b:65:70: 7b:32:23:b4:7c:95:29:07:4e:25:9e:bc:20:79:3f: 12:be:fc:8b:f4:17:eb:ea:2c:0f:76:9f:7b:c5:3e: fb:67:28:ba:c6:fd:ca:55:a1:d1:79:66:1f:40:70: ad:26:f3:6f:97:3f:07:32:6e:82:e1:42:5f:42:fb: 61:9c:43:a2:2d:11:cb:8e:67:b6:a3:2f:40:6b:6c: a0:b2:2e:b9:cc:97:03:ac:d1:41:46:47:23:e8:4e: be:f3:a4:cb:da:be:88:f6:78:0a:66:5d:ff:49:93: 69:ce:4b:3e:ba:39:09:2d:af:cf:63:d2:aa:00:f9: 84:5b:77:92:67:a5:a5:ef:f1:38:92:f8:7e:4a:f1: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:31:11:22:E7:F3:CF:8A:2C:10:B7:4A:78:9A:66:06:E7:8F:66 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:8050::/48 Signature Algorithm: sha256WithRSAEncryption 43:14:68:56:ae:1d:27:02:f2:bb:96:0c:1d:64:bd:34:e7:6e: ce:5d:f7:dd:75:09:4e:0f:be:ca:10:30:70:08:41:4a:55:4c: 94:74:95:b5:f9:88:c6:6b:80:15:ca:75:98:53:80:7e:fe:ce: 37:3d:e3:f6:ec:9f:22:b1:ef:4b:5f:00:c2:34:18:57:4d:a0: b7:e9:35:bc:36:12:97:d1:be:cd:b4:14:de:a1:61:5d:42:11: 0a:3a:2f:84:97:15:99:2b:bb:41:65:6d:3b:82:0a:00:75:91: 22:b1:e1:39:4d:46:c0:d0:c9:d1:00:e3:6f:03:79:43:b7:3e: b5:8e:ba:40:00:16:7c:e9:11:2e:3e:92:fd:18:76:b2:cb:72: 48:74:4a:c6:ff:da:58:b4:01:c1:1c:b1:40:2d:12:36:b9:80: 13:2e:94:bd:fe:8c:a5:74:b8:75:53:af:7f:fa:62:8c:1e:82: 5c:0f:66:64:27:fc:d3:2a:51:1a:92:cd:29:d3:5b:0e:71:ce: de:78:1f:ab:e5:6b:8a:83:77:52:bb:24:fb:36:bb:e3:73:48: 4c:73:9e:7d:68:94:b0:69:01:f3:25:9c:39:1d:2a:7c:c0:fa: 81:c4:97:9e:7b:d0:09:59:b7:3d:de:8b:cc:82:46:b8:db:c6: 20:ad:4d:2a -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUM+kgVKAxM0foD1N6FROpMySbdqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIwNTlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDlhYjVlMWIzNzAzZjZmZTgxM2M2ZDdhMzMwY2Q5NWFiMWYwYjg1YjIwNWUw MGE3ZmQwMWZjNTVjYmJmZmIzYjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBZQIaRRUdEcwSNeb4ExETZxfCTEP73YXqCSPfz6ZeA7sgk43U7PjTTqUN6 rahjr6xoBRW2RT3XXwkCcDHD/anpsmYJl3kr+j8tR54iR/tc0aRkCQP2D9dmtdvJ /ll1Tf1i6AxI4vV6cStSQnLHxd1V4XMlW2VwezIjtHyVKQdOJZ68IHk/Er78i/QX 6+osD3afe8U++2cousb9ylWh0XlmH0BwrSbzb5c/BzJuguFCX0L7YZxDoi0Ry45n tqMvQGtsoLIuucyXA6zRQUZHI+hOvvOky9q+iPZ4CmZd/0mTac5LPro5CS2vz2PS qgD5hFt3kmelpe/xOJL4fkrxM7MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTEvzER Iufzz4osELdKeJpmBuePZjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDVmN2FiM2YtY2I3My00OWE2LWFhZGEtNDQwYmY0ZGJmM2I1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA UDANBgkqhkiG9w0BAQsFAAOCAQEAQxRoVq4dJwLyu5YMHWS9NOduzl333XUJTg++ yhAwcAhBSlVMlHSVtfmIxmuAFcp1mFOAfv7ONz3j9uyfIrHvS18AwjQYV02gt+k1 vDYSl9G+zbQU3qFhXUIRCjovhJcVmSu7QWVtO4IKAHWRIrHhOU1GwNDJ0QDjbwN5 Q7c+tY66QAAWfOkRLj6S/Rh2sstySHRKxv/aWLQBwRyxQC0SNrmAEy6Uvf6MpXS4 dVOvf/pijB6CXA9mZCf80ypRGpLNKdNbDnHO3ngfq+VrioN3Ursk+za743NITHOe fWiUsGkB8yWcOR0qfMD6gcSXnnvQCVm3Pd6LzIJGuNvGIK1NKg== -----END CERTIFICATE-----Generated at Mon Dec 15 15:31:08 2025 by rpki-client