This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa File: 4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json) Hash identifier: HcxuYqazOj0mxNPrG7GgzIVmXNE3r58+ucodkzd2Uyc= Subject key identifier: AD:BC:05:A8:F1:32:3E:3A:6C:39:C8:9F:31:F7:68:4A:82:D5:7E:E9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 61F48CAD9CE65AC2C9865AAB8B7A4B794BF11191 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa Signing time: Wed 10 Dec 2025 05:30:09 +0000 ROA not before: Wed 10 Dec 2025 05:30:09 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f4:8c:ad:9c:e6:5a:c2:c9:86:5a:ab:8b:7a:4b:79:4b:f1:11:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:30:09 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=b3ee46b84871fbdab77fe89ad1714a3e540fde605e670ba9643ca00170e2ebb4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:05:33:78:61:59:ec:5c:e9:ea:0f:a9:49: 24:ed:e8:0b:7a:06:6d:09:f5:60:e3:74:6e:0e:e7: e6:86:64:de:30:c3:2d:d1:11:6e:83:24:ce:13:73: 7f:ef:dc:c0:d6:33:2c:0c:45:63:63:bf:0a:c9:dd: 40:a3:e3:8d:cb:22:e2:70:a5:40:10:b7:78:04:9f: 29:41:85:8a:65:75:ee:01:a6:65:ac:00:f8:88:c7: 4c:86:01:15:37:94:55:ee:0e:a4:cb:60:ac:0d:24: 94:4e:11:69:f4:28:9d:1c:93:5b:37:92:f8:c4:17: 74:eb:70:aa:78:b9:ec:76:1a:91:fc:4b:07:b3:94: 5a:09:a7:f6:33:99:c2:ff:12:f0:65:ab:a4:c4:ec: f7:64:d5:ec:42:59:fc:a3:af:91:36:d5:b7:d0:61: 6a:d5:ad:0f:ea:97:1f:cd:f1:ff:d4:87:18:80:35: fc:fd:d2:e1:3d:6d:b1:8e:9f:2c:9a:ad:37:32:0f: 08:77:dd:fc:4f:27:4c:79:6d:2b:76:6b:cd:6e:3c: 89:78:cc:d8:e3:6d:c5:b4:ed:e0:f9:8a:02:ff:bc: 61:cd:4d:30:42:ce:c0:c1:57:5d:a3:bd:15:f6:9a: c3:25:7d:24:25:da:c3:ed:38:5b:56:9e:63:21:11: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BC:05:A8:F1:32:3E:3A:6C:39:C8:9F:31:F7:68:4A:82:D5:7E:E9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:a080::/48 Signature Algorithm: sha256WithRSAEncryption 7f:9d:75:56:44:42:b5:37:b4:5f:a1:ea:3a:6a:23:c9:58:d4: 74:3b:a5:ed:0a:53:0f:76:c9:2c:6a:1a:7f:16:3f:b7:cb:d9: 7b:6c:78:7e:48:da:20:d2:8e:c3:38:23:eb:e7:98:a6:76:a6: 0d:39:d7:1d:7e:78:a0:be:78:d7:e6:79:06:1d:46:8c:fd:c2: a1:7b:b9:25:0e:94:6d:1f:03:39:7a:d2:22:96:0a:81:f6:7e: bb:c5:a9:ba:15:d8:f9:3a:57:c8:cf:93:19:f9:b8:0e:59:23: 84:83:1c:57:a6:a3:8f:86:dd:8c:bc:64:87:02:c6:c3:dc:d6: fc:c4:67:bb:3c:6b:ed:79:e3:2c:57:61:84:0e:c7:68:8b:21: 1b:82:80:4c:ee:91:fb:58:21:d1:d5:1d:90:9d:3d:c0:9e:1c: c9:93:b5:b4:b7:77:68:b7:6f:61:b4:b9:7c:10:19:61:69:34: e3:cf:61:ea:f3:50:f4:e3:e5:15:47:57:72:6a:c4:0b:76:cf: a4:2d:64:ac:79:84:a9:82:9a:f4:df:81:71:e1:9e:08:a2:41: 1a:f6:69:80:35:17:e5:c7:5a:9e:44:c9:6a:f7:5b:ef:76:2a: 75:e5:82:cb:0b:a3:5a:ab:49:ee:01:93:b7:d9:00:af:8f:32: eb:7d:ab:c4 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUYfSMrZzmWsLJhlqri3pLeUvxEZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMwMDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGIzZWU0NmI4NDg3MWZiZGFiNzdmZTg5YWQxNzE0YTNlNTQwZmRlNjA1ZTY3 MGJhOTY0M2NhMDAxNzBlMmViYjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMr5BTN4YVnsXOnqD6lJJO3oC3oGbQn1YON0bg7n5oZk3jDDLdERboMkzhNz f+/cwNYzLAxFY2O/CsndQKPjjcsi4nClQBC3eASfKUGFimV17gGmZawA+IjHTIYB FTeUVe4OpMtgrA0klE4RafQonRyTWzeS+MQXdOtwqni57HYakfxLB7OUWgmn9jOZ wv8S8GWrpMTs92TV7EJZ/KOvkTbVt9BhatWtD+qXH83x/9SHGIA1/P3S4T1tsY6f LJqtNzIPCHfd/E8nTHltK3ZrzW48iXjM2ONtxbTt4PmKAv+8Yc1NMELOwMFXXaO9 FfaawyV9JCXaw+04W1aeYyER1XECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBStvAWo 8TI+Omw5yJ8x92hKgtV+6TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDA3OGNmZjYtOWIzNC00ZjE2LTkwM2YtYzc4MTdkODZiZjUwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+g gDANBgkqhkiG9w0BAQsFAAOCAQEAf511VkRCtTe0X6HqOmojyVjUdDul7QpTD3bJ LGoafxY/t8vZe2x4fkjaINKOwzgj6+eYpnamDTnXHX54oL541+Z5Bh1GjP3CoXu5 JQ6UbR8DOXrSIpYKgfZ+u8WpuhXY+TpXyM+TGfm4DlkjhIMcV6ajj4bdjLxkhwLG w9zW/MRnuzxr7XnjLFdhhA7HaIshG4KATO6R+1gh0dUdkJ09wJ4cyZO1tLd3aLdv YbS5fBAZYWk0489h6vNQ9OPlFUdXcmrEC3bPpC1krHmEqYKa9N+BceGeCKJBGvZp gDUX5cdankTJavdb73YqdeWCywujWqtJ7gGTt9kAr48y632rxA== -----END CERTIFICATE-----Generated at Mon Dec 15 15:32:48 2025 by rpki-client