This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa File: 4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa (raw, json) Hash identifier: WB2Yx064F6caf0tVgv2CRESdTAB8/s+c2o75/BiuyoE= Subject key identifier: 7B:0D:CF:DE:01:84:E7:E1:8F:B7:26:E8:5E:E9:BA:E4:28:21:43:28 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0E21835A72E66FC476BCABBCDE36F3EBD9A8F8B5 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa Signing time: Sat 06 Dec 2025 04:00:08 +0000 ROA not before: Sat 06 Dec 2025 04:00:08 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06c:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:21:83:5a:72:e6:6f:c4:76:bc:ab:bc:de:36:f3:eb:d9:a8:f8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:08 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=89bbdc560375d96723d142e28cd3d358d6a56a2e3ca2687c6c6b0b1c0992db70, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:9c:3e:f4:71:0c:d0:13:e7:3d:b1:cc:76: be:ec:f8:29:f2:0b:c0:83:fd:98:25:d0:bc:97:58: db:d4:22:7a:2d:4e:c1:e2:3c:6e:69:d1:4c:f2:22: bd:89:b9:4e:65:d6:5c:bd:3c:3a:be:b4:c8:9f:50: c6:a8:80:ae:57:a1:84:a9:0f:10:8d:34:b3:38:a9: 9e:40:81:d4:ee:3a:b5:a6:c6:9a:12:f5:0a:ee:8c: 8b:f0:eb:89:10:f3:e3:d1:08:9a:81:5e:25:1d:42: 56:62:b8:cb:fb:17:3a:af:8c:9b:0e:07:d4:32:ab: ac:1e:ee:70:3d:1f:43:f5:61:dc:98:82:55:84:64: 35:47:28:1e:5f:b5:f1:9b:ab:93:00:f1:08:cc:a4: e0:f7:30:13:23:9e:eb:d7:df:5e:bf:17:53:66:f3: eb:12:27:4a:1c:d0:10:0e:90:43:11:3a:43:b8:d5: 4e:aa:04:5c:f6:fb:b9:f1:60:09:90:ee:0e:7b:e7: 4f:16:7d:6a:c3:b7:b9:03:97:3e:2f:74:2f:2d:8f: 14:dc:7e:eb:17:7e:ef:95:8c:4a:27:2e:a0:ee:fd: 9a:75:1c:5e:7d:cb:53:3c:e0:af:5a:45:e1:df:3b: 94:06:7d:19:d0:50:56:e3:9e:9b:e3:6a:fc:ad:b5: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0D:CF:DE:01:84:E7:E1:8F:B7:26:E8:5E:E9:BA:E4:28:21:43:28 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c40d116-3b5d-4e79-a735-a17b37f8ded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06c:9000::/48 Signature Algorithm: sha256WithRSAEncryption 42:c6:4c:69:29:c2:aa:80:82:0c:88:bc:84:e3:b2:fb:59:26: 70:7a:0a:0a:05:ce:62:9e:d3:ac:a4:ce:e0:d3:30:cc:26:c5: e6:da:79:bc:9f:1b:b5:20:7d:e4:9e:a7:ad:2b:11:dd:b0:50: e9:d2:32:de:2d:32:69:eb:9e:02:54:ae:5b:3e:9f:e3:79:fb: e7:4c:d3:15:fe:24:e5:66:3e:7e:d3:61:41:63:42:dd:7b:b5: 31:b7:58:02:64:8a:42:26:35:9b:e3:60:9f:a4:5d:aa:03:50: 63:7e:22:7d:17:64:42:57:68:9b:e8:12:24:a4:dd:5a:29:70: 5e:96:9d:d2:c6:9e:ef:02:2d:b9:6d:fc:18:cf:8d:2d:d0:0e: ae:2f:eb:d6:39:7d:ef:ea:ba:f2:ff:ab:b0:02:9a:88:e6:2b: 00:50:ec:24:ea:f1:5d:a2:86:18:06:e2:b4:9e:29:fe:e2:41: 86:5a:de:ad:3e:f5:cd:c9:2a:fb:84:7e:3d:5a:f4:b8:7a:ec: b8:5d:0c:89:e6:d3:e3:14:a0:98:fd:a9:91:e9:5c:5d:69:81: 3f:81:36:9a:1c:06:6d:eb:a5:21:7a:59:cb:0c:58:29:d8:8d: 5a:f8:58:7b:84:02:9f:8e:48:50:ba:8d:da:44:f5:1c:0d:39: 36:b1:af:9f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUDiGDWnLmb8R2vKu83jbz69mo+LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMDhaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDg5YmJkYzU2MDM3NWQ5NjcyM2QxNDJlMjhjZDNkMzU4ZDZhNTZhMmUzY2Ey Njg3YzZjNmIwYjFjMDk5MmRiNzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMUnD70cQzQE+c9scx2vuz4KfILwIP9mCXQvJdY29Qiei1OweI8bmnRTPIi vYm5TmXWXL08Or60yJ9QxqiArlehhKkPEI00szipnkCB1O46tabGmhL1Cu6Mi/Dr iRDz49EImoFeJR1CVmK4y/sXOq+Mmw4H1DKrrB7ucD0fQ/Vh3JiCVYRkNUcoHl+1 8ZurkwDxCMyk4PcwEyOe69ffXr8XU2bz6xInShzQEA6QQxE6Q7jVTqoEXPb7ufFg CZDuDnvnTxZ9asO3uQOXPi90Ly2PFNx+6xd+75WMSicuoO79mnUcXn3LUzzgr1pF 4d87lAZ9GdBQVuOem+Nq/K21mY8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR7Dc/e AYTn4Y+3Juhe6brkKCFDKDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGM0MGQxMTYtM2I1ZC00ZTc5LWE3MzUtYTE3YjM3ZjhkZWQyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GyQ ADANBgkqhkiG9w0BAQsFAAOCAQEAQsZMaSnCqoCCDIi8hOOy+1kmcHoKCgXOYp7T rKTO4NMwzCbF5tp5vJ8btSB95J6nrSsR3bBQ6dIy3i0yaeueAlSuWz6f43n750zT Ff4k5WY+ftNhQWNC3Xu1MbdYAmSKQiY1m+Ngn6RdqgNQY34ifRdkQldom+gSJKTd WilwXpad0sae7wItuW38GM+NLdAOri/r1jl97+q68v+rsAKaiOYrAFDsJOrxXaKG GAbitJ4p/uJBhlrerT71zckq+4R+PVr0uHrsuF0MiebT4xSgmP2pkelcXWmBP4E2 mhwGbeulIXpZywxYKdiNWvhYe4QCn45IULqN2kT1HA05NrGvnw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:32 2025 by rpki-client