This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa File: 4875c926-8b00-4b21-bffa-08659e5c223d.roa (raw, json) Hash identifier: Z4Y8GBRbb1saquXp2KBh1QsW1nBP9bvaiTuAkZ4Nrzo= Subject key identifier: 88:29:ED:22:19:03:01:85:12:08:D2:F0:9C:12:F3:61:7F:EC:FE:7A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 61DF99977306004C07154D412BE5D6A54AD179D3 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa Signing time: Sat 06 Dec 2025 04:00:03 +0000 ROA not before: Sat 06 Dec 2025 04:00:03 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:df:99:97:73:06:00:4c:07:15:4d:41:2b:e5:d6:a5:4a:d1:79:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:03 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=fdbcd4b224c2d13fc71ce38022ae6b52bc4541817313adf3b27dce4f8158108b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:01:3b:bf:19:14:c8:c8:42:f0:3e:09:e6: 88:fc:69:a4:81:d2:de:6d:d3:3c:c2:8e:b8:cf:ae: 42:8d:6c:c4:30:e1:15:d6:bf:de:da:ac:ca:90:a2: 25:a7:6d:b4:ed:6c:2b:39:6a:b1:43:f8:44:c5:1d: 9c:b9:8b:18:e1:d8:38:9f:79:fb:f9:89:19:bd:45: 38:45:3a:dd:e9:d4:7c:df:1c:24:bc:37:cc:59:f3: 39:b7:d5:56:0c:5f:8f:d8:83:95:76:fc:fb:d8:5e: ff:cd:dc:4f:32:05:fc:4e:11:65:80:50:b0:67:be: 3e:40:83:1d:1c:30:b1:58:cc:cc:1b:b7:df:d6:38: fa:79:a6:f9:68:72:98:48:94:c9:d0:ac:20:e4:ae: 21:ea:46:06:3a:0c:f8:09:ac:c9:27:10:18:0b:de: df:50:34:25:62:ef:e6:6f:e6:df:65:28:87:ed:5a: 31:f7:7c:9b:33:dc:33:25:47:3a:66:68:48:dd:f3: 13:68:b2:4c:94:ef:8d:e5:71:fb:a2:95:4a:b6:07: 79:24:67:96:30:9b:15:7e:2b:c0:24:28:23:ad:6b: e5:38:de:7a:ff:2e:79:29:f2:9a:b8:7c:22:fd:3f: 40:99:d0:f9:d4:f0:d2:cb:9c:a3:b6:82:fc:89:07: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:29:ED:22:19:03:01:85:12:08:D2:F0:9C:12:F3:61:7F:EC:FE:7A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4875c926-8b00-4b21-bffa-08659e5c223d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:1000::/40 Signature Algorithm: sha256WithRSAEncryption b4:88:4c:a1:19:1f:01:a2:a5:72:c0:f1:75:38:69:1b:a7:a5: 02:8d:7d:e8:96:cc:8a:36:a4:a9:8b:42:7c:21:a5:4f:7e:88: 4c:84:ad:38:ce:03:49:cb:f4:0b:27:e2:ca:af:7b:b1:a1:b8: 65:24:e0:3a:a1:03:fd:18:8c:d7:5f:f7:c9:59:da:1e:d5:11: 57:a1:15:43:be:89:34:a6:79:c8:f5:0e:81:5d:45:c7:53:dd: a8:02:3d:e7:1d:bc:b9:80:c0:20:d1:25:65:34:5b:b8:84:a1: ca:ab:5d:4b:55:89:fd:94:8e:95:9d:e3:53:44:5d:9d:69:85: 7b:ca:4e:99:c8:3f:77:28:a9:0f:69:f3:11:f4:ad:06:3d:14: c2:5e:7e:c8:f7:c5:1a:9d:a2:70:50:3a:4f:6f:4b:93:9d:b1: 89:57:61:37:ba:70:8e:da:cf:76:e8:7b:52:ae:19:1f:a0:77: ec:11:ca:95:9e:f8:8e:f9:b0:c6:63:6a:34:ee:39:ff:bb:0a: fb:82:20:e1:66:f6:a0:70:0e:c2:f8:b1:57:7e:5c:0b:9d:e6: 49:d9:11:a4:bb:26:87:9f:40:a4:ee:2f:99:c6:a8:74:37:e9: 0a:1b:1b:5f:5d:97:42:e1:10:e2:dd:eb:6d:2f:6c:08:c7:1b: 67:3c:5a:30 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUYd+Zl3MGAEwHFU1BK+XWpUrRedMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMDNaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGZkYmNkNGIyMjRjMmQxM2ZjNzFjZTM4MDIyYWU2YjUyYmM0NTQxODE3MzEz YWRmM2IyN2RjZTRmODE1ODEwOGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8hATu/GRTIyELwPgnmiPxppIHS3m3TPMKOuM+uQo1sxDDhFda/3tqsypCi JadttO1sKzlqsUP4RMUdnLmLGOHYOJ95+/mJGb1FOEU63enUfN8cJLw3zFnzObfV Vgxfj9iDlXb8+9he/83cTzIF/E4RZYBQsGe+PkCDHRwwsVjMzBu339Y4+nmm+Why mEiUydCsIOSuIepGBjoM+AmsyScQGAve31A0JWLv5m/m32Uoh+1aMfd8mzPcMyVH OmZoSN3zE2iyTJTvjeVx+6KVSrYHeSRnljCbFX4rwCQoI61r5Tjeev8ueSnymrh8 Iv0/QJnQ+dTw0suco7aC/IkH4kECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSIKe0i GQMBhRII0vCcEvNhf+z+ejAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDg3NWM5MjYtOGIwMC00YjIxLWJmZmEtMDg2NTllNWMyMjNkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HYQ MA0GCSqGSIb3DQEBCwUAA4IBAQC0iEyhGR8BoqVywPF1OGkbp6UCjX3olsyKNqSp i0J8IaVPfohMhK04zgNJy/QLJ+LKr3uxobhlJOA6oQP9GIzXX/fJWdoe1RFXoRVD vok0pnnI9Q6BXUXHU92oAj3nHby5gMAg0SVlNFu4hKHKq11LVYn9lI6VneNTRF2d aYV7yk6ZyD93KKkPafMR9K0GPRTCXn7I98UanaJwUDpPb0uTnbGJV2E3unCO2s92 6HtSrhkfoHfsEcqVnviO+bDGY2o07jn/uwr7giDhZvagcA7C+LFXflwLneZJ2RGk uyaHn0Ck7i+Zxqh0N+kKGxtfXZdC4RDi3ettL2wIxxtnPFow -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:38 2025 by rpki-client