This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa File: 581266ac-af97-4864-a566-36693b593269.roa (raw, json) Hash identifier: 3cactBSrF+L0kx0Hhqu+m+zCC3l490C7kJeFEIt1hR8= Subject key identifier: 8A:33:E5:50:AB:BC:F8:24:B8:1B:FF:F3:30:EA:BB:B6:98:29:04:E0 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 190486D9ADB7AF4E98AE7B1755681F99753D86B5 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa Signing time: Wed 10 Dec 2025 05:30:49 +0000 ROA not before: Wed 10 Dec 2025 05:30:49 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:04:86:d9:ad:b7:af:4e:98:ae:7b:17:55:68:1f:99:75:3d:86:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:30:49 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=665efc58b88f0bfdd8cbba4dada5a06ca05706a161ee9f563115c5b1f4d14ce1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:79:1b:e8:c5:83:d6:1a:c5:d5:51:9a:9a: 94:94:e1:ea:f1:15:65:eb:c0:9b:7f:ad:a0:c2:a8: 0f:75:9a:52:7b:c0:fb:65:9c:49:7f:6f:fa:20:2e: 8c:7b:36:72:16:46:e5:19:cb:b1:54:a2:b8:17:12: a4:a9:a0:1a:26:b3:33:f3:e1:b8:d8:11:45:2b:3d: 07:68:a5:51:24:a6:00:89:f8:49:90:dc:ba:3e:7c: 1c:fa:23:d8:d9:8e:60:e1:41:2f:16:75:f3:fd:19: 59:72:9a:87:44:4c:a1:e6:c8:db:3b:ef:14:07:98: 84:f7:4d:b8:8c:a1:d2:12:ac:c7:71:c0:e5:ef:89: 9a:94:37:6d:14:64:b9:c1:f4:e0:eb:84:bd:45:c1: a0:13:f6:92:51:64:af:d8:66:03:d9:d8:ba:a0:bf: 6b:39:56:68:47:00:75:14:52:68:7c:43:a7:8f:3c: ad:36:37:41:63:78:30:e9:5a:df:f0:d2:ac:c4:33: d3:e1:a1:8d:d3:0a:69:8b:04:8d:df:f7:19:b5:63: 89:53:82:ce:6c:c4:2f:29:4b:76:43:15:9c:99:fe: b8:2a:df:59:1a:38:2b:a6:e4:90:de:ce:b8:21:f8: ad:6c:20:70:74:4f:08:ab:30:f8:34:15:45:74:0e: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:E5:50:AB:BC:F8:24:B8:1B:FF:F3:30:EA:BB:B6:98:29:04:E0 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:8000::/40 Signature Algorithm: sha256WithRSAEncryption 9b:d5:79:c5:7f:3f:23:74:8a:b2:a5:62:33:77:54:4a:a1:60: 7e:1f:0c:f5:3f:d7:e6:90:55:4f:59:ed:70:c3:d0:e9:b0:5b: 80:1d:67:7d:0c:95:14:2d:e8:b8:0b:75:01:fb:b3:e0:31:5c: 48:d5:05:b3:26:e1:94:f0:50:4d:e5:00:57:f9:d1:68:bd:46: 28:fc:a1:49:a7:3f:a2:58:59:ad:e4:90:d4:09:36:4f:9b:4b: 69:e7:61:59:95:61:c0:35:c3:07:9d:cf:63:0a:f4:11:0e:5f: 48:06:c3:0e:db:07:6c:90:62:d8:db:b5:30:a0:03:3c:93:31: ab:ec:1d:44:c6:39:b3:84:cc:1d:56:42:a0:3c:50:62:38:4e: b1:9a:bc:63:87:4f:7b:cb:10:0a:81:5d:8b:be:1d:49:d4:3c: c8:13:0c:41:73:9f:a2:ea:f7:be:86:57:ab:a7:17:5b:48:9c: 41:d7:b4:7c:cd:50:29:0a:ce:7b:f0:56:80:0c:e1:f2:8d:35: f2:e3:ce:73:b2:6a:fc:05:3a:61:49:0a:3e:d6:4e:b9:55:2d: c0:b6:de:d6:73:bc:6c:8b:15:8b:a2:92:4b:19:eb:99:73:54: ce:6f:ce:1c:37:df:ac:6b:ab:f5:43:43:09:22:2a:4e:49:d0: 77:f2:ca:af -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUGQSG2a23r06YrnsXVWgfmXU9hrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMwNDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDY2NWVmYzU4Yjg4ZjBiZmRkOGNiYmE0ZGFkYTVhMDZjYTA1NzA2YTE2MWVl OWY1NjMxMTVjNWIxZjRkMTRjZTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsVeRvoxYPWGsXVUZqalJTh6vEVZevAm3+toMKoD3WaUnvA+2WcSX9v+iAu jHs2chZG5RnLsVSiuBcSpKmgGiazM/PhuNgRRSs9B2ilUSSmAIn4SZDcuj58HPoj 2NmOYOFBLxZ18/0ZWXKah0RMoebI2zvvFAeYhPdNuIyh0hKsx3HA5e+JmpQ3bRRk ucH04OuEvUXBoBP2klFkr9hmA9nYuqC/azlWaEcAdRRSaHxDp488rTY3QWN4MOla 3/DSrMQz0+GhjdMKaYsEjd/3GbVjiVOCzmzELylLdkMVnJn+uCrfWRo4K6bkkN7O uCH4rWwgcHRPCKsw+DQVRXQOdpUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSKM+VQ q7z4JLgb//Mw6ru2mCkE4DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTgxMjY2YWMtYWY5Ny00ODY0LWE1NjYtMzY2OTNiNTkzMjY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H+A MA0GCSqGSIb3DQEBCwUAA4IBAQCb1XnFfz8jdIqypWIzd1RKoWB+Hwz1P9fmkFVP We1ww9DpsFuAHWd9DJUULei4C3UB+7PgMVxI1QWzJuGU8FBN5QBX+dFovUYo/KFJ pz+iWFmt5JDUCTZPm0tp52FZlWHANcMHnc9jCvQRDl9IBsMO2wdskGLY27UwoAM8 kzGr7B1ExjmzhMwdVkKgPFBiOE6xmrxjh097yxAKgV2Lvh1J1DzIEwxBc5+i6ve+ hlerpxdbSJxB17R8zVApCs578FaADOHyjTXy485zsmr8BTphSQo+1k65VS3Att7W c7xsixWLopJLGeuZc1TOb84cN9+sa6v1Q0MJIipOSdB38sqv -----END CERTIFICATE-----Generated at Mon Dec 15 20:17:01 2025 by rpki-client