This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa File: a33fb27e-b368-403f-89e6-08d05302535f.roa (raw, json) Hash identifier: ovL9nHfhd68vXkOMQKZFjv20Tj56QjST/hiI22aWTNI= Subject key identifier: 7A:01:12:BB:FF:1B:21:7F:F4:7B:2C:0F:98:85:88:8E:90:41:EF:11 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 032B174384F1E96A60238B6E3E3F0A5C80FD85DC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa Signing time: Wed 10 Dec 2025 06:31:11 +0000 ROA not before: Wed 10 Dec 2025 06:31:11 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:40e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2b:17:43:84:f1:e9:6a:60:23:8b:6e:3e:3f:0a:5c:80:fd:85:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:31:11 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=4e9d4820e8c18e3cf3b2edd47c00c6d7654b64962cd9201da3bf7287413cfbb4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:ac:fc:c3:52:46:9a:d5:cb:8d:bd:25:25: bf:b2:23:1e:37:d3:54:dc:d5:68:15:69:aa:dc:83: ae:95:80:1d:91:6f:fd:a4:ad:2e:79:4f:7a:16:2e: 4f:ba:6f:3b:6e:49:38:29:17:ae:c1:d1:83:16:0d: 02:2b:22:73:df:75:46:a6:f7:72:e8:31:e1:96:ec: 0e:e3:24:0e:66:3f:dc:fa:df:02:0a:a7:3f:9d:47: 64:b2:5d:b4:e3:57:82:d6:af:06:da:69:4e:ec:72: d6:51:2f:6e:c5:be:48:5e:3e:99:dc:1f:06:c1:4d: 2b:a3:16:27:a8:71:bd:9a:b9:6a:af:19:c2:55:84: f6:8b:cf:45:6e:80:ad:64:8e:57:dc:0b:64:b2:ac: 70:0d:71:9e:63:78:3d:82:ac:16:49:7f:f6:f7:38: 41:28:ae:71:19:63:ac:46:39:b7:fa:54:98:98:79: e6:5a:64:4c:e5:89:50:70:56:b6:aa:12:9a:4c:fd: cd:4e:19:a7:48:85:6b:4d:5b:8b:c5:3e:8f:0f:5e: 21:9e:5d:15:c5:76:9e:63:7c:df:2e:97:4f:28:68: 18:dc:6a:00:17:06:3c:8d:71:13:ce:d5:04:1a:33: ca:a3:4e:34:24:38:23:1c:37:4a:38:17:5e:27:0c: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:01:12:BB:FF:1B:21:7F:F4:7B:2C:0F:98:85:88:8E:90:41:EF:11 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:40e0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:aa:6a:09:1d:fb:75:15:04:9d:80:1d:63:8c:84:31:74:45: 2f:66:1d:17:70:34:55:83:f9:61:08:70:13:e7:6c:72:af:0b: d9:92:e7:51:35:5e:3e:6f:e7:f6:5a:7a:87:31:54:5d:44:5f: bc:73:b9:2a:4a:5e:16:04:d0:70:a6:a8:04:b0:4d:0b:52:c4: 4d:15:38:ce:84:b0:b4:8a:15:fd:bc:d0:fe:04:90:24:a5:03: 51:a2:69:5a:e6:a5:83:1d:99:31:3a:d9:ba:81:5f:c8:d8:0b: f5:16:84:fa:9d:28:f8:b4:96:c8:61:d0:5a:70:9f:66:4f:55: 7e:e6:c4:50:8e:15:92:da:b9:81:11:5d:c3:2a:13:6b:91:a3: 40:33:35:39:57:d4:59:14:e9:64:2e:e9:dd:d4:54:43:9a:2f: 51:6c:2d:93:78:9a:e1:f6:71:1c:db:cc:e9:7a:59:fe:13:6e: 78:74:44:5a:87:91:39:ca:ed:6b:8b:9a:d7:1a:0c:e9:ec:ba: 32:46:9f:0a:16:4d:1c:0f:35:2d:ad:c8:ec:34:74:93:ec:61: 3a:50:fe:5f:5c:85:3c:b6:11:87:bf:d3:07:3c:ec:da:21:25: bb:ce:5a:cb:21:63:89:a5:22:b9:3c:c5:54:f2:ad:14:aa:ba: f3:f9:f4:2d -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAysXQ4Tx6WpgI4tuPj8KXID9hdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMxMTFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDRlOWQ0ODIwZThjMThlM2NmM2IyZWRkNDdjMDBjNmQ3NjU0YjY0OTYyY2Q5 MjAxZGEzYmY3Mjg3NDEzY2ZiYjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbgrPzDUkaa1cuNvSUlv7IjHjfTVNzVaBVpqtyDrpWAHZFv/aStLnlPehYu T7pvO25JOCkXrsHRgxYNAisic991Rqb3cugx4ZbsDuMkDmY/3PrfAgqnP51HZLJd tONXgtavBtppTuxy1lEvbsW+SF4+mdwfBsFNK6MWJ6hxvZq5aq8ZwlWE9ovPRW6A rWSOV9wLZLKscA1xnmN4PYKsFkl/9vc4QSiucRljrEY5t/pUmJh55lpkTOWJUHBW tqoSmkz9zU4Zp0iFa01bi8U+jw9eIZ5dFcV2nmN83y6XTyhoGNxqABcGPI1xE87V BBozyqNONCQ4Ixw3SjgXXicMhB0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR6ARK7 /xshf/R7LA+YhYiOkEHvETAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTMzZmIyN2UtYjM2OC00MDNmLTg5ZTYtMDhkMDUzMDI1MzVmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A 4DANBgkqhkiG9w0BAQsFAAOCAQEAHapqCR37dRUEnYAdY4yEMXRFL2YdF3A0VYP5 YQhwE+dscq8L2ZLnUTVePm/n9lp6hzFUXURfvHO5KkpeFgTQcKaoBLBNC1LETRU4 zoSwtIoV/bzQ/gSQJKUDUaJpWualgx2ZMTrZuoFfyNgL9RaE+p0o+LSWyGHQWnCf Zk9VfubEUI4Vktq5gRFdwyoTa5GjQDM1OVfUWRTpZC7p3dRUQ5ovUWwtk3ia4fZx HNvM6XpZ/hNueHREWoeROcrta4ua1xoM6ey6MkafChZNHA81La3I7DR0k+xhOlD+ X1yFPLYRh7/TBzzs2iElu85ayyFjiaUiuTzFVPKtFKq68/n0LQ== -----END CERTIFICATE-----Generated at Mon Dec 15 15:34:31 2025 by rpki-client