This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fa19511-0738-48ff-a25a-e667f5ca90f8.roa File: 9fa19511-0738-48ff-a25a-e667f5ca90f8.roa (raw, json) Hash identifier: HHSdzqM1WjLkFqMzAkC2qbqw5jZEBlU1BO53u2SSrqk= Subject key identifier: 82:17:0C:79:28:65:4A:6F:1D:7A:5F:B2:B6:C2:96:DB:B3:77:6E:C3 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2EB8F3BA9880A05383F435D1448173E5E5F2DCF0 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fa19511-0738-48ff-a25a-e667f5ca90f8.roa Signing time: Sat 06 Dec 2025 04:00:33 +0000 ROA not before: Sat 06 Dec 2025 04:00:33 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d077::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b8:f3:ba:98:80:a0:53:83:f4:35:d1:44:81:73:e5:e5:f2:dc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=939e80ce37dd41f7a1ad9019ad0f4afe4bcd0c07f40a6f40990a12f79a4ca0b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:98:a3:3c:8c:6f:81:d6:d1:d7:14:b3:dc: ef:f1:87:33:a5:0d:61:cb:b5:b3:71:29:09:d7:76: dc:f1:59:59:c9:75:42:e4:01:0f:af:d7:a4:68:6b: 74:bc:97:56:e9:20:3e:45:e4:de:05:7b:2a:d4:0b: 6d:f4:3b:de:89:fa:43:9a:c7:cb:c3:51:27:a9:7a: 47:e9:21:66:17:f5:2d:a1:e0:cf:f5:a4:51:7f:94: ed:45:fd:90:aa:e8:6b:c8:93:05:b4:6f:50:4c:b0: 7e:2d:ac:cb:24:5a:90:02:2e:9b:d1:cc:cb:f4:4d: 44:d3:d4:49:ab:75:90:78:48:a6:33:63:02:13:b4: 86:0e:39:bd:d0:4c:ba:e6:f1:fc:b0:fe:9c:29:02: f5:d7:f8:61:94:66:d7:ce:bd:b0:b3:6e:95:cd:00: d0:a5:70:15:12:ba:c5:2f:4a:8e:3f:9a:aa:de:aa: 46:d6:c2:ec:10:8e:d3:fa:61:11:e7:90:2d:77:a1: 03:b0:1b:59:72:b1:5e:f9:dd:7e:5f:8f:57:68:a6: c3:df:ef:9f:b1:55:84:1c:2b:47:5b:de:de:98:41: 8e:0f:72:3e:60:83:e4:55:3a:ed:cd:2b:8e:49:e1: 26:e3:93:5b:72:ad:06:4e:9a:69:2e:30:fb:92:3a: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:17:0C:79:28:65:4A:6F:1D:7A:5F:B2:B6:C2:96:DB:B3:77:6E:C3 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fa19511-0738-48ff-a25a-e667f5ca90f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d077::/32 Signature Algorithm: sha256WithRSAEncryption 58:db:46:72:e7:80:30:48:66:bd:d4:66:ac:dc:88:88:70:a4: e4:93:0c:56:a0:7b:45:45:97:a1:57:a3:d2:2f:a2:d5:ee:4a: 78:7e:a8:a1:37:50:ab:63:dc:ce:8d:14:45:cf:72:c2:2c:68: 9a:7e:2c:ac:8a:79:f0:fe:c7:86:a0:fe:82:c5:52:36:fa:b2: d7:9d:ae:91:5e:aa:5e:c3:f6:2b:df:9c:98:b4:65:e9:1f:a0: 1c:c2:54:ec:91:f5:ed:ba:b6:51:3b:8b:74:45:67:c8:7a:22: 7a:69:7c:56:cf:46:7e:25:1b:1a:64:d4:86:80:42:fc:26:96: a3:c5:3f:21:78:4e:63:ff:60:cf:89:20:d7:27:90:52:1d:4f: 56:4f:87:c7:2e:d7:d8:f3:be:8b:44:2d:37:58:99:40:a8:65: 15:bb:90:e9:ea:a3:d0:fb:97:eb:fa:2c:3e:64:af:f9:df:53: 8c:af:cd:69:53:6b:0f:4a:80:36:a0:40:2e:f1:9b:66:ed:c8: 03:e7:f8:3c:d0:c9:f1:73:29:3c:02:4c:2e:0d:a4:a4:7b:a0: ea:ae:ea:8c:45:81:ca:77:98:e3:f5:2f:f4:c2:bb:be:86:0b: 01:18:b1:d2:d8:b5:cd:13:d0:ba:09:26:a3:3b:d6:33:d5:e2: 06:2a:ac:4f -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIULrjzupiAoFOD9DXRRIFz5eXy3PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMzNaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDkzOWU4MGNlMzdkZDQxZjdhMWFkOTAxOWFkMGY0YWZlNGJjZDBjMDdmNDBh NmY0MDk5MGExMmY3OWE0Y2EwYjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMSmKM8jG+B1tHXFLPc7/GHM6UNYcu1s3EpCdd23PFZWcl1QuQBD6/XpGhr dLyXVukgPkXk3gV7KtQLbfQ73on6Q5rHy8NRJ6l6R+khZhf1LaHgz/WkUX+U7UX9 kKroa8iTBbRvUEywfi2syyRakAIum9HMy/RNRNPUSat1kHhIpjNjAhO0hg45vdBM uubx/LD+nCkC9df4YZRm1869sLNulc0A0KVwFRK6xS9Kjj+aqt6qRtbC7BCO0/ph EeeQLXehA7AbWXKxXvndfl+PV2imw9/vn7FVhBwrR1ve3phBjg9yPmCD5FU67c0r jknhJuOTW3KtBk6aaS4w+5I6WNcCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBSCFwx5 KGVKbx16X7K2wpbbs3duwzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWZhMTk1MTEtMDczOC00OGZmLWEyNWEtZTY2N2Y1Y2E5MGY4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Hcw DQYJKoZIhvcNAQELBQADggEBAFjbRnLngDBIZr3UZqzciIhwpOSTDFage0VFl6FX o9IvotXuSnh+qKE3UKtj3M6NFEXPcsIsaJp+LKyKefD+x4ag/oLFUjb6stedrpFe ql7D9ivfnJi0ZekfoBzCVOyR9e26tlE7i3RFZ8h6InppfFbPRn4lGxpk1IaAQvwm lqPFPyF4TmP/YM+JINcnkFIdT1ZPh8cu19jzvotELTdYmUCoZRW7kOnqo9D7l+v6 LD5kr/nfU4yvzWlTaw9KgDagQC7xm2btyAPn+DzQyfFzKTwCTC4NpKR7oOqu6oxF gcp3mOP1L/TCu76GCwEYsdLYtc0T0LoJJqM71jPV4gYqrE8= -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:01 2025 by rpki-client