This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa File: 9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json) Hash identifier: nEcXTmspItKQKThjhXcApQWC1Fqv46qrDtQLAgRcaMo= Subject key identifier: E6:69:3E:F6:F9:62:61:51:60:A9:8F:96:7F:11:8B:56:B3:18:C9:43 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 402D88167141470A6BD11F6451008CBD6F1CB8A9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa Signing time: Wed 10 Dec 2025 06:01:04 +0000 ROA not before: Wed 10 Dec 2025 06:01:04 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d01a::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2d:88:16:71:41:47:0a:6b:d1:1f:64:51:00:8c:bd:6f:1c:b8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:01:04 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=c34370f9ac83b9ff93aeb00af77840e11ff50c9f41ae9a9f61ea9027152aa408, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:eb:9a:38:9f:26:7c:a1:ee:68:c6:b1:f4: ef:18:e6:7e:2a:e1:b7:a0:e8:6d:73:4e:06:ef:31: a7:02:38:54:dd:36:5e:8a:1a:6d:81:f7:95:a0:c3: f5:75:fc:01:e0:2d:c8:e5:1d:a7:69:4e:89:75:40: a4:08:59:40:97:e9:d6:19:7c:71:74:c6:eb:33:f5: a5:ca:e4:01:56:e4:7b:e6:1e:d6:06:56:dd:39:0a: 9f:91:5a:85:db:d7:6c:62:e0:6c:79:7c:d1:5f:96: 98:d0:88:14:95:6e:c2:6c:ed:d7:af:b4:a5:75:48: d8:03:4f:a0:0b:96:cf:d3:7e:f1:55:6d:b3:1d:9e: 71:0f:91:97:a9:4e:08:65:c5:fb:ef:9e:cb:d2:17: cc:7f:1b:34:2e:6c:c3:b6:81:60:a1:b9:9e:77:b9: da:05:4f:47:43:95:cc:e6:7d:b0:e8:e3:5e:6b:ec: 74:8c:e9:e9:30:e2:38:f0:a2:90:d1:34:a4:d9:8a: 4f:65:c0:7d:e6:06:09:89:da:f7:81:fd:45:29:04: de:d9:d1:53:c9:6a:ee:35:04:50:dd:7b:39:d9:ce: a7:27:de:d4:31:af:49:8c:23:60:d6:e2:7b:7f:4f: ac:7f:e5:38:09:29:8b:1a:cb:d9:4c:6e:02:65:05: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:69:3E:F6:F9:62:61:51:60:A9:8F:96:7F:11:8B:56:B3:18:C9:43 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d01a::/38 Signature Algorithm: sha256WithRSAEncryption 78:c5:b5:e4:84:fb:f0:7c:83:68:9c:ee:d4:ad:95:7c:15:13: 85:89:96:5c:f3:11:57:61:dc:ec:7d:24:52:92:49:e9:d9:cc: 50:bf:28:e5:33:8e:ff:7d:b9:78:1b:d7:60:2b:00:80:f7:8a: 47:35:82:a8:15:45:ed:2a:dc:cd:fd:a6:e1:fa:31:7c:51:d3: a2:91:03:e1:40:5a:54:42:2f:70:57:e5:42:6b:15:d3:a4:52: 0b:c9:2a:8e:2f:42:08:55:79:b0:8b:86:42:bb:7a:82:1a:52: cc:22:b8:ee:98:4f:8f:34:25:dd:22:14:44:e1:6f:b6:15:5b: ac:59:9b:85:27:f3:61:57:d6:c2:b6:83:5c:f8:96:24:bf:e6: c9:b9:78:d6:dd:28:c5:6b:11:ca:66:5d:5a:25:92:04:41:8d: 74:18:6e:c8:01:ac:82:fb:b8:7f:2e:54:21:27:33:0c:8e:86: 4c:af:cb:ec:57:8e:be:79:f7:12:d0:08:e1:f8:7e:37:c7:a3: c8:af:5a:c1:07:61:8d:3d:78:75:22:d6:d7:ce:fe:53:99:77: 42:0d:7c:35:94:95:7a:80:0e:b2:25:08:6e:c5:a5:1b:d9:b0: b8:7f:b4:55:c0:b8:de:4d:7c:99:e1:3b:9b:fc:6c:b4:8c:e2: 98:24:df:ba -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQC2IFnFBRwpr0R9kUQCMvW8cuKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAxMDRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGMzNDM3MGY5YWM4M2I5ZmY5M2FlYjAwYWY3Nzg0MGUxMWZmNTBjOWY0MWFl OWE5ZjYxZWE5MDI3MTUyYWE0MDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+265o4nyZ8oe5oxrH07xjmfirht6DobXNOBu8xpwI4VN02XooabYH3laDD 9XX8AeAtyOUdp2lOiXVApAhZQJfp1hl8cXTG6zP1pcrkAVbke+Ye1gZW3TkKn5Fa hdvXbGLgbHl80V+WmNCIFJVuwmzt16+0pXVI2ANPoAuWz9N+8VVtsx2ecQ+Rl6lO CGXF+++ey9IXzH8bNC5sw7aBYKG5nne52gVPR0OVzOZ9sOjjXmvsdIzp6TDiOPCi kNE0pNmKT2XAfeYGCYna94H9RSkE3tnRU8lq7jUEUN17OdnOpyfe1DGvSYwjYNbi e39PrH/lOAkpixrL2UxuAmUF+osCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTmaT72 +WJhUWCpj5Z/EYtWsxjJQzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTQzMGQ1ZGItNWEwOS00NDYxLWI4MGEtYjlkNzU1ZDM0NmE5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BoA MA0GCSqGSIb3DQEBCwUAA4IBAQB4xbXkhPvwfINonO7UrZV8FROFiZZc8xFXYdzs fSRSkknp2cxQvyjlM47/fbl4G9dgKwCA94pHNYKoFUXtKtzN/abh+jF8UdOikQPh QFpUQi9wV+VCaxXTpFILySqOL0IIVXmwi4ZCu3qCGlLMIrjumE+PNCXdIhRE4W+2 FVusWZuFJ/NhV9bCtoNc+JYkv+bJuXjW3SjFaxHKZl1aJZIEQY10GG7IAayC+7h/ LlQhJzMMjoZMr8vsV46+efcS0Ajh+H43x6PIr1rBB2GNPXh1ItbXzv5TmXdCDXw1 lJV6gA6yJQhuxaUb2bC4f7RVwLjeTXyZ4Tub/Gy0jOKYJN+6 -----END CERTIFICATE-----Generated at Mon Dec 15 17:09:07 2025 by rpki-client