This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa File: 4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa (raw, json) Hash identifier: 9djeOdxMJWaw57IMD5uPBfgbLVe4OQ9RHzVkA1A7zHo= Subject key identifier: 86:9B:82:60:18:F4:CD:6E:8C:3C:0A:C0:FB:38:58:30:11:E9:0D:6D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0FC8A844AE16E186F4A251C56C29919E08FA3696 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa Signing time: Sat 06 Dec 2025 04:00:07 +0000 ROA not before: Sat 06 Dec 2025 04:00:07 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07b:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c8:a8:44:ae:16:e1:86:f4:a2:51:c5:6c:29:91:9e:08:fa:36:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:07 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=cf9f2a3ed0717cc2dfbf341e3e1677758c210a6ab5f8244d288af1f9cdf3dcb5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:5e:ed:5f:03:c5:8c:6c:0e:e0:61:00:02: 0c:ed:6a:d2:51:b9:e7:1e:22:8b:b8:56:43:f0:9d: 13:a2:c0:f4:b1:dc:a6:3c:f0:91:19:1e:52:a6:00: 9e:c4:af:9f:26:b4:d2:fe:86:af:b4:c6:ce:c2:45: 54:d7:93:0a:da:e9:5f:e2:01:c4:91:64:fc:68:2d: 6e:c4:2d:10:f3:51:77:69:4d:0f:85:b0:c3:4d:e2: c8:eb:8b:fe:a7:da:c1:8e:09:a5:c9:db:f4:32:3d: 4f:d6:1a:13:4a:6f:eb:b9:87:45:71:d9:37:a7:8a: 27:0e:0f:f1:9e:3c:c7:d7:29:0f:3d:cf:36:49:4e: 63:7d:e8:5c:16:50:33:dc:e2:69:7a:04:f6:c5:7d: 75:6d:90:36:35:d9:c3:92:da:10:47:02:2f:aa:f2: 3a:26:1f:ba:ed:92:29:92:08:d7:51:21:2d:dd:a9: 7a:dc:c3:fe:62:5c:ff:85:a3:24:17:44:49:bc:d4: 71:85:5a:90:15:c7:f2:0d:dd:48:70:ad:7a:a3:39: 6d:7f:83:0f:26:73:33:4d:c8:fa:df:f8:69:67:f8: cc:fc:7f:ba:6b:36:d1:ed:9f:96:71:fa:64:fb:3a: 5a:bc:09:e9:cf:c1:0b:5b:3e:c7:d8:c6:e0:d5:bb: 72:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9B:82:60:18:F4:CD:6E:8C:3C:0A:C0:FB:38:58:30:11:E9:0D:6D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f5beeeb-9d92-4f06-bd20-3e902727e44b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07b:800::/40 Signature Algorithm: sha256WithRSAEncryption 56:df:03:ee:6c:4b:36:e8:6a:84:ab:12:49:2b:9b:65:26:27: 61:9d:78:a9:ca:05:cc:30:7a:98:8d:2b:12:a3:25:80:14:18: 5d:b8:59:53:9c:ca:64:64:57:a3:f0:d9:6d:81:a1:01:24:3c: ac:f7:2a:2d:14:39:6b:77:4f:84:a5:03:27:eb:a2:bb:c3:b6: fa:91:73:8b:8d:70:e2:b6:6a:4d:a0:31:63:e8:fb:1e:b8:8c: b0:1a:1b:42:a1:10:4d:14:48:d5:ee:af:3d:0b:26:b2:75:75: ef:95:4d:16:da:8e:7a:d0:3e:21:d3:45:18:53:44:32:0a:e5: 3f:7a:9a:69:6d:fe:cd:f6:2f:9d:c5:fa:08:99:31:b1:ee:49: d2:86:70:33:88:4c:fc:cc:9b:63:74:ea:cb:86:90:cf:bb:03: 26:37:31:4a:79:0f:4c:7e:e8:93:de:af:3c:ca:ed:84:e0:3c: bf:31:d9:7d:4b:16:26:c0:5a:40:20:3c:fd:7a:a6:b4:30:97: 1a:3e:9e:df:19:9b:92:8d:5b:36:c8:a5:9e:87:6b:d9:dc:62: 79:12:62:46:0a:ef:cd:56:76:6e:f6:4f:2a:24:fb:f6:13:e0: 48:08:5f:e1:d6:5b:22:f4:7c:bf:f5:ee:88:a5:bf:8f:af:a3: cd:fc:9b:95 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUD8ioRK4W4Yb0olHFbCmRngj6NpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMDdaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGNmOWYyYTNlZDA3MTdjYzJkZmJmMzQxZTNlMTY3Nzc1OGMyMTBhNmFiNWY4 MjQ0ZDI4OGFmMWY5Y2RmM2RjYjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKSSXu1fA8WMbA7gYQACDO1q0lG55x4ii7hWQ/CdE6LA9LHcpjzwkRkeUqYA nsSvnya00v6Gr7TGzsJFVNeTCtrpX+IBxJFk/GgtbsQtEPNRd2lND4Www03iyOuL /qfawY4Jpcnb9DI9T9YaE0pv67mHRXHZN6eKJw4P8Z48x9cpDz3PNklOY33oXBZQ M9ziaXoE9sV9dW2QNjXZw5LaEEcCL6ryOiYfuu2SKZII11EhLd2petzD/mJc/4Wj JBdESbzUcYVakBXH8g3dSHCteqM5bX+DDyZzM03I+t/4aWf4zPx/ums20e2flnH6 ZPs6WrwJ6c/BC1s+x9jG4NW7cu8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSGm4Jg GPTNbow8CsD7OFgwEekNbTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGY1YmVlZWItOWQ5Mi00ZjA2LWJkMjAtM2U5MDI3MjdlNDRiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HsI MA0GCSqGSIb3DQEBCwUAA4IBAQBW3wPubEs26GqEqxJJK5tlJidhnXipygXMMHqY jSsSoyWAFBhduFlTnMpkZFej8NltgaEBJDys9yotFDlrd0+EpQMn66K7w7b6kXOL jXDitmpNoDFj6PseuIywGhtCoRBNFEjV7q89CyaydXXvlU0W2o560D4h00UYU0Qy CuU/epppbf7N9i+dxfoImTGx7knShnAziEz8zJtjdOrLhpDPuwMmNzFKeQ9MfuiT 3q88yu2E4Dy/Mdl9SxYmwFpAIDz9eqa0MJcaPp7fGZuSjVs2yKWeh2vZ3GJ5EmJG Cu/NVnZu9k8qJPv2E+BICF/h1lsi9Hy/9e6Ipb+Pr6PN/JuV -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:27 2025 by rpki-client