This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52cdf958-64cb-496a-aeda-f4f9a07b440e.roa File: 52cdf958-64cb-496a-aeda-f4f9a07b440e.roa (raw, json) Hash identifier: dTaIKbf+NssowocK2Bhar87MkU5llXAjQFUdvugXUFM= Subject key identifier: D3:ED:38:75:27:56:98:86:FE:A7:12:04:07:4C:1E:ED:B6:88:5E:AE Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5E0BB7C637D1A1F69CFC0B4779A28552C497B372 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52cdf958-64cb-496a-aeda-f4f9a07b440e.roa Signing time: Sat 06 Dec 2025 04:00:33 +0000 ROA not before: Sat 06 Dec 2025 04:00:33 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d035:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0b:b7:c6:37:d1:a1:f6:9c:fc:0b:47:79:a2:85:52:c4:97:b3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=d7d5524ba81087f2fbf9776418ac384f0565538930109514b486c98c2f3442c7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:5c:98:a9:13:57:20:e6:bf:55:1b:15:68: a9:df:4d:a4:bd:75:86:2a:69:63:1a:c6:fd:07:e6: 4a:1a:45:5c:4f:d1:0f:61:ff:30:d9:c7:3f:a7:3a: 90:47:1d:44:f0:1b:d7:44:41:4d:e7:22:05:74:2c: 44:b7:72:6b:ec:7c:4d:d2:fe:d0:eb:78:8e:90:a3: c5:9f:94:4e:6d:57:4f:f0:42:bc:12:c4:63:1b:38: 30:96:83:9a:fd:ef:0a:9a:4f:77:08:9b:7e:53:f4: a0:5e:3d:69:b1:8c:20:56:ad:17:bd:41:7b:96:a7: 59:40:e8:44:a8:64:6c:7c:41:a5:a8:64:08:2d:dc: e9:4a:ba:87:d7:72:83:96:b9:18:68:f0:6f:ac:ac: a4:54:c6:a5:db:ab:f0:af:9e:49:f0:f4:f6:fd:9c: af:38:e2:21:b4:e4:b1:12:b0:f5:d6:de:0d:b7:32: f8:d7:c4:5a:cb:86:53:1d:ba:7d:7a:c6:f1:7f:f3: 49:1a:86:d5:d8:e0:4e:03:12:16:9f:3a:85:2f:1d: ff:37:a0:08:37:f2:a5:2e:7e:94:7b:72:aa:70:81: af:14:b6:b3:f7:be:75:a1:33:74:1b:98:80:6a:1a: 64:d2:3f:b9:ed:0b:6b:ae:3e:d8:d9:f3:63:2d:c5: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:ED:38:75:27:56:98:86:FE:A7:12:04:07:4C:1E:ED:B6:88:5E:AE X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52cdf958-64cb-496a-aeda-f4f9a07b440e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d035:2000::/40 Signature Algorithm: sha256WithRSAEncryption 49:48:64:37:02:08:ea:fe:fa:ab:0a:bc:57:97:80:15:d8:73: c5:74:28:45:00:c1:50:df:af:4b:9d:7b:7e:fe:75:a1:b0:b5: 5b:4b:40:ff:f7:4d:77:d6:c0:c3:52:22:23:d4:ae:c4:2c:61: 37:01:30:18:8c:7f:9c:a6:e7:b9:e1:4d:79:94:e0:b9:e8:e1: 0c:77:4d:cf:f0:15:a4:11:21:57:c1:9b:08:f7:fb:17:2a:bb: 17:40:16:31:ee:18:c6:ba:75:a9:8f:fe:f4:34:8f:95:02:8b: c7:6b:6a:07:c9:a7:63:a9:ca:a9:5d:dd:a9:fa:b4:2e:d4:3d: b2:26:53:7b:e0:1d:d7:35:d0:dd:14:1d:de:70:82:0f:70:ee: 5d:92:6c:08:75:db:6e:76:8a:84:be:88:65:8f:ef:50:2b:1e: 15:a6:5b:20:0d:9e:4c:2a:56:ef:a1:09:6b:2f:63:59:65:a2: 1e:b2:68:d3:46:da:aa:78:76:0a:6f:2f:de:40:1c:15:36:70: a1:ad:3b:36:72:bc:14:b2:53:bb:b5:7f:55:dd:41:c4:cf:4e: ef:9c:7f:f5:a9:cb:10:44:88:e5:7b:8a:d9:8e:4f:c7:1b:4a: 75:c1:91:17:85:87:3f:28:a6:70:c2:c2:1e:c1:b4:f8:d0:d2: 50:63:89:15 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXgu3xjfRofac/AtHeaKFUsSXs3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMzNaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGQ3ZDU1MjRiYTgxMDg3ZjJmYmY5Nzc2NDE4YWMzODRmMDU2NTUzODkzMDEw OTUxNGI0ODZjOThjMmYzNDQyYzcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrOXJipE1cg5r9VGxVoqd9NpL11hippYxrG/QfmShpFXE/RD2H/MNnHP6c6 kEcdRPAb10RBTeciBXQsRLdya+x8TdL+0Ot4jpCjxZ+UTm1XT/BCvBLEYxs4MJaD mv3vCppPdwibflP0oF49abGMIFatF71Be5anWUDoRKhkbHxBpahkCC3c6Uq6h9dy g5a5GGjwb6yspFTGpdur8K+eSfD09v2crzjiIbTksRKw9dbeDbcy+NfEWsuGUx26 fXrG8X/zSRqG1djgTgMSFp86hS8d/zegCDfypS5+lHtyqnCBrxS2s/e+daEzdBuY gGoaZNI/ue0La64+2NnzYy3FNIECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTT7Th1 J1aYhv6nEgQHTB7ttoherjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTJjZGY5NTgtNjRjYi00OTZhLWFlZGEtZjRmOWEwN2I0NDBlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DUg MA0GCSqGSIb3DQEBCwUAA4IBAQBJSGQ3Agjq/vqrCrxXl4AV2HPFdChFAMFQ369L nXt+/nWhsLVbS0D/90131sDDUiIj1K7ELGE3ATAYjH+cpue54U15lOC56OEMd03P 8BWkESFXwZsI9/sXKrsXQBYx7hjGunWpj/70NI+VAovHa2oHyadjqcqpXd2p+rQu 1D2yJlN74B3XNdDdFB3ecIIPcO5dkmwIddtudoqEvohlj+9QKx4VplsgDZ5MKlbv oQlrL2NZZaIesmjTRtqqeHYKby/eQBwVNnChrTs2crwUslO7tX9V3UHEz07vnH/1 qcsQRIjle4rZjk/HG0p1wZEXhYc/KKZwwsIewbT40NJQY4kV -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:53 2025 by rpki-client