This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa File: 8cdaa55d-528e-4856-8132-c186e079b4cb.roa (raw, json) Hash identifier: TvHq/TH90hBEBEbL0ic4Gon5ISqlCX4iHDjXrxMxoyE= Subject key identifier: 41:6D:E0:EC:44:09:61:1A:FB:BC:8E:8E:39:34:1F:33:A8:BC:F8:98 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3681ACD9E0C47B5675ECCA9C34CD1013BF9A1332 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa Signing time: Sat 06 Dec 2025 04:00:33 +0000 ROA not before: Sat 06 Dec 2025 04:00:33 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:81:ac:d9:e0:c4:7b:56:75:ec:ca:9c:34:cd:10:13:bf:9a:13:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=42b5a74a6e3a4c03de3dcb57b7a32125e937ed6a8013ea1923d966aca1bb7185, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:7f:00:d3:b0:b3:57:be:29:a7:8b:7f:08: 93:97:2a:ba:dd:68:8b:55:3f:a2:83:07:83:c0:7c: fb:26:dd:e3:5a:eb:73:3f:7e:de:09:ff:a2:e9:ed: b3:9c:61:a5:c4:09:10:d0:94:38:22:f9:00:16:e9: 9c:48:6d:fe:6f:e0:1e:4c:98:9b:70:f5:89:d1:4f: a3:09:c1:e1:22:fe:ae:36:28:bf:57:7b:a9:30:7f: 50:68:6b:05:51:65:ae:2a:19:31:83:41:04:9e:e0: f9:b2:27:03:40:9a:17:50:56:a6:b4:0b:4e:1c:8f: ba:56:95:d5:24:a8:65:44:16:6b:db:0e:32:a1:0a: 7f:07:92:6a:0d:e7:25:44:a1:db:8a:ad:35:5c:76: d4:60:93:f5:a5:81:80:e7:01:ff:58:04:cf:77:28: 21:7c:88:59:25:72:96:15:37:da:59:63:fd:eb:9e: 05:07:ac:20:b7:e8:21:d1:ef:ed:58:29:b8:8a:11: a4:89:3a:01:19:15:74:44:49:6c:17:0d:77:33:82: a6:56:0a:8c:2e:c2:8d:30:6d:e9:ef:45:32:ec:2d: 37:43:d4:65:32:da:46:e9:35:ec:d7:f4:55:6e:7d: e7:67:95:e7:bb:0c:1a:f7:38:d0:a8:66:b0:52:12: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6D:E0:EC:44:09:61:1A:FB:BC:8E:8E:39:34:1F:33:A8:BC:F8:98 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:4000::/40 Signature Algorithm: sha256WithRSAEncryption 9f:ab:12:00:8d:ec:82:fe:78:62:61:2c:11:58:b8:ee:23:08: 60:7d:bf:59:9e:d0:48:96:95:a7:f9:62:c3:36:2d:a6:d8:69: de:ee:97:eb:c6:4b:4c:97:85:99:14:30:7d:1f:31:ba:5b:04: f1:c5:e5:e0:52:a1:1f:f8:92:6a:a0:fb:a6:90:79:ed:e9:af: 4b:db:54:3e:77:38:88:64:a7:30:4b:53:70:a4:1f:4d:d7:44: a7:4f:81:45:be:90:f8:68:0c:3e:1c:70:56:af:2a:1b:e7:46: 4c:46:d3:69:85:87:3b:5d:06:0e:fb:02:58:3e:43:78:5d:5c: 05:2e:8d:1f:ca:ed:4a:cf:b2:4e:75:76:7a:a3:7f:29:d4:c9: e8:99:fc:04:e0:3f:07:aa:ae:98:45:57:92:37:0d:6d:d0:03: b2:a0:01:6d:2b:b9:88:58:80:5b:71:ec:66:e7:69:df:a2:3e: 35:63:b9:ce:83:41:02:76:40:43:f4:e5:1f:3f:40:1a:d6:3f: 31:f5:e3:c6:82:02:be:48:b0:11:6e:7c:fa:62:8e:c9:8a:c0: 30:37:e3:25:0a:67:7a:ed:d2:fa:4f:3b:21:5c:a2:d4:5f:bb: 8e:c2:2e:88:25:95:64:2e:58:a0:de:ed:f2:bf:f8:7b:4a:44: cf:b3:14:a8 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUNoGs2eDEe1Z17MqcNM0QE7+aEzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMzNaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDQyYjVhNzRhNmUzYTRjMDNkZTNkY2I1N2I3YTMyMTI1ZTkzN2VkNmE4MDEz ZWExOTIzZDk2NmFjYTFiYjcxODUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHhfwDTsLNXvimni38Ik5cqut1oi1U/ooMHg8B8+ybd41rrcz9+3gn/ount s5xhpcQJENCUOCL5ABbpnEht/m/gHkyYm3D1idFPownB4SL+rjYov1d7qTB/UGhr BVFlrioZMYNBBJ7g+bInA0CaF1BWprQLThyPulaV1SSoZUQWa9sOMqEKfweSag3n JUSh24qtNVx21GCT9aWBgOcB/1gEz3coIXyIWSVylhU32llj/eueBQesILfoIdHv 7VgpuIoRpIk6ARkVdERJbBcNdzOCplYKjC7CjTBt6e9FMuwtN0PUZTLaRuk17Nf0 VW5952eV57sMGvc40KhmsFISTRsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRBbeDs RAlhGvu8jo45NB8zqLz4mDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OGNkYWE1NWQtNTI4ZS00ODU2LTgxMzItYzE4NmUwNzliNGNiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HZA MA0GCSqGSIb3DQEBCwUAA4IBAQCfqxIAjeyC/nhiYSwRWLjuIwhgfb9ZntBIlpWn +WLDNi2m2Gne7pfrxktMl4WZFDB9HzG6WwTxxeXgUqEf+JJqoPumkHnt6a9L21Q+ dziIZKcwS1NwpB9N10SnT4FFvpD4aAw+HHBWryob50ZMRtNphYc7XQYO+wJYPkN4 XVwFLo0fyu1Kz7JOdXZ6o38p1MnomfwE4D8Hqq6YRVeSNw1t0AOyoAFtK7mIWIBb cexm52nfoj41Y7nOg0ECdkBD9OUfP0Aa1j8x9ePGggK+SLARbnz6Yo7JisAwN+Ml Cmd67dL6TzshXKLUX7uOwi6IJZVkLlig3u3yv/h7SkTPsxSo -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:55 2025 by rpki-client