This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa File: 64f0a197-0057-458b-924a-0b7079fbd04c.roa (raw, json) Hash identifier: cEsBGDSDvlBXScdIbKkYTABpA/rAk8DJaq5tSUNDAK4= Subject key identifier: 04:5A:06:D3:E5:CF:AD:CA:17:5C:E3:FC:32:3A:F8:DB:C8:A6:C6:14 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4CC518C6FC5B59C796AB012BA2ECDB265E675960 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa Signing time: Mon 08 Dec 2025 02:10:08 +0000 ROA not before: Mon 08 Dec 2025 02:10:08 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c5:18:c6:fc:5b:59:c7:96:ab:01:2b:a2:ec:db:26:5e:67:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:08 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=7d5fa2eaef1241f97eaf7e1ec9b798a11edc8cec8c536dbd925c7011e76cf780, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:c0:df:04:67:4d:3f:26:4d:61:32:67:4b: cc:35:a6:1f:11:f6:c7:69:50:9d:f3:ee:12:05:64: a1:a9:c7:37:05:52:fb:83:6d:1f:ed:98:95:0c:4e: 0b:80:c7:28:bc:e8:6f:50:64:02:1a:f4:62:3e:3b: 89:d8:e9:ed:05:d0:98:c8:99:7b:8c:a2:2d:f3:85: 01:1f:53:4d:68:38:3e:b5:6a:9d:68:56:a5:2b:88: be:ae:e8:0c:b5:ac:f8:ea:d3:47:e9:28:27:1c:72: e0:ef:7d:22:c6:80:a2:9f:0f:0e:86:cb:2a:5d:c8: b0:9e:20:8a:4b:ac:d7:b7:3e:c1:5c:b9:43:f1:fe: 80:3a:65:45:73:a9:16:4a:41:46:ba:a3:0e:52:87: f7:58:27:06:90:35:48:6e:1c:7f:4f:43:17:18:fc: 92:a6:9d:4e:4a:e6:a3:38:9b:4a:a6:89:6b:90:64: 9f:bf:17:ca:79:57:71:9f:9c:30:32:91:a6:87:ec: 3f:72:45:43:b0:3b:23:c8:08:a7:e3:eb:de:ca:e4: f7:7b:cc:65:f1:ca:6c:4e:db:86:2e:c9:00:fa:ce: 4e:c3:97:98:29:99:7c:ee:b1:66:1f:68:fa:74:ef: 77:87:5d:d1:f3:a5:bd:94:a4:34:f1:a0:93:98:ba: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5A:06:D3:E5:CF:AD:CA:17:5C:E3:FC:32:3A:F8:DB:C8:A6:C6:14 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:840::/48 Signature Algorithm: sha256WithRSAEncryption 87:9a:2e:b2:9b:cd:ae:6c:d1:44:cf:fa:1d:6e:31:22:07:12: c1:a7:cc:cc:96:1f:3b:32:ba:bf:6f:9f:3e:3e:6c:73:f5:d2: 8a:f7:2f:86:0a:25:de:a1:dd:da:4d:e5:a5:8c:10:63:76:4f: e4:cb:c3:1a:27:cf:da:17:6c:82:4a:22:fa:75:67:63:f9:cb: 6c:10:bd:b9:ad:9b:8e:b0:b2:b6:e7:4b:fd:52:7a:b0:e7:92: bf:8f:9a:dc:ee:0c:23:c6:8e:97:03:09:d4:6d:ab:db:4f:5f: 4a:4c:6d:3e:44:42:99:3a:b8:76:e9:a0:de:bb:5c:26:41:64: 73:af:bc:cf:2c:e6:0b:10:16:01:b1:bc:05:8e:58:1e:64:da: 1e:54:0e:5c:cc:ae:a7:fa:1c:80:5d:a0:dd:8c:b3:9c:74:07: 38:3b:1f:70:62:8a:78:90:b6:f2:c5:44:2e:20:03:66:15:3f: b1:4d:59:de:21:5e:6f:7e:1b:63:cb:39:b5:8c:b3:27:32:fe: c9:91:49:7b:54:17:fd:9a:e8:8e:92:64:e6:57:ab:32:33:d2: fe:b7:7d:ba:af:5b:29:75:d2:73:3e:cd:bd:b0:08:46:a6:fb: 42:82:a5:35:59:b2:f0:74:8d:72:58:b7:69:a3:cb:12:de:35: 5c:cf:6a:28 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUTMUYxvxbWceWqwErouzbJl5nWWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMDhaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDdkNWZhMmVhZWYxMjQxZjk3ZWFmN2UxZWM5Yjc5OGExMWVkYzhjZWM4YzUz NmRiZDkyNWM3MDExZTc2Y2Y3ODAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2bwN8EZ00/Jk1hMmdLzDWmHxH2x2lQnfPuEgVkoanHNwVS+4NtH+2YlQxO C4DHKLzob1BkAhr0Yj47idjp7QXQmMiZe4yiLfOFAR9TTWg4PrVqnWhWpSuIvq7o DLWs+OrTR+koJxxy4O99IsaAop8PDobLKl3IsJ4gikus17c+wVy5Q/H+gDplRXOp FkpBRrqjDlKH91gnBpA1SG4cf09DFxj8kqadTkrmozibSqaJa5Bkn78XynlXcZ+c MDKRpofsP3JFQ7A7I8gIp+Pr3srk93vMZfHKbE7bhi7JAPrOTsOXmCmZfO6xZh9o +nTvd4dd0fOlvZSkNPGgk5i6v6cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQEWgbT 5c+tyhdc4/wyOvjbyKbGFDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NjRmMGExOTctMDA1Ny00NThiLTkyNGEtMGI3MDc5ZmJkMDRjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEI QDANBgkqhkiG9w0BAQsFAAOCAQEAh5ouspvNrmzRRM/6HW4xIgcSwafMzJYfOzK6 v2+fPj5sc/XSivcvhgol3qHd2k3lpYwQY3ZP5MvDGifP2hdsgkoi+nVnY/nLbBC9 ua2bjrCytudL/VJ6sOeSv4+a3O4MI8aOlwMJ1G2r209fSkxtPkRCmTq4dumg3rtc JkFkc6+8zyzmCxAWAbG8BY5YHmTaHlQOXMyup/ocgF2g3YyznHQHODsfcGKKeJC2 8sVELiADZhU/sU1Z3iFeb34bY8s5tYyzJzL+yZFJe1QX/ZrojpJk5lerMjPS/rd9 uq9bKXXScz7NvbAIRqb7QoKlNVmy8HSNcli3aaPLEt41XM9qKA== -----END CERTIFICATE-----Generated at Mon Dec 15 15:34:53 2025 by rpki-client