This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa File: a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa (raw, json) Hash identifier: Z3uUrt4K/kxaWgyfzEGuF4Zg1RV4Rthw2P0KGWKzc+Y= Subject key identifier: FB:AD:C3:47:65:14:3E:65:ED:59:CD:49:D9:6A:85:9B:EC:AB:98:79 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 125A41C1F016433BFB288ADEC696701864A66F7D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa Signing time: Sat 06 Dec 2025 00:40:06 +0000 ROA not before: Sat 06 Dec 2025 00:40:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d035:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:41:c1:f0:16:43:3b:fb:28:8a:de:c6:96:70:18:64:a6:6f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 00:40:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=7639770c33364fd89245905c3876c4909ed17abdf19df6799ff9ff0a3afd816e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:ef:47:bd:82:f9:3d:d1:94:1c:1e:d3:be: 19:bc:e6:0b:cd:b4:00:3c:49:f8:7c:2e:38:bc:fc: ef:d7:86:de:0a:9c:0b:2a:ae:90:c5:d6:84:b8:1e: 73:a9:51:b8:2d:13:4a:1a:d1:59:0f:9e:e2:42:fa: f7:61:f5:c4:c7:eb:a7:76:8c:8d:fa:92:1d:c4:29: fd:1f:ba:27:c4:e4:2c:b1:2a:6a:36:a5:6a:a0:4f: db:3c:83:c9:17:47:2d:f1:81:e8:d3:cd:c2:87:f9: a5:72:f1:e0:eb:08:71:97:55:61:5f:67:60:84:5a: a0:bc:f1:28:90:7b:fd:f5:c1:6a:7b:86:ae:e2:88: 04:dc:63:63:e9:9d:75:3c:9d:27:c5:02:42:36:3b: d7:8f:c4:f2:23:b7:53:70:bc:bb:cd:25:c6:d1:74: 5e:35:4e:64:5b:75:ef:92:2e:35:69:45:05:be:af: 5c:14:6b:ba:40:9d:16:e2:0d:54:a2:f8:5f:38:b7: e9:1e:69:09:08:4b:9e:9a:0d:5c:ec:b4:5b:1f:d3: 15:86:4c:ef:dd:d5:72:4a:52:14:a5:5e:64:1d:cc: fd:a9:85:63:6f:b1:92:a6:03:0f:86:32:81:85:50: 4c:01:fc:65:c6:ef:2c:8f:c2:57:32:a2:9e:09:5d: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AD:C3:47:65:14:3E:65:ED:59:CD:49:D9:6A:85:9B:EC:AB:98:79 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5f344a4-fbcf-4285-a32d-8dce04a2290e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d035:e000::/40 Signature Algorithm: sha256WithRSAEncryption 92:70:1f:5f:83:75:5e:6d:e2:bc:50:50:b6:bb:0f:9c:ce:88: 71:be:fd:fc:96:ae:7a:03:72:61:39:f7:6f:82:71:60:91:7f: 61:b8:d4:2e:46:58:bf:54:9a:dc:a6:32:d0:32:b9:f1:f1:c9: a2:51:4d:6a:70:b7:fb:72:7e:7b:5e:01:d9:b9:e3:db:00:83: 8d:84:01:77:46:b2:a6:d4:79:d6:20:48:f6:72:75:42:34:a9: 2d:ed:93:70:a7:b4:b8:76:5d:00:0d:79:dc:62:78:2a:10:03: 39:bf:1d:fa:71:e2:92:cc:75:ee:ec:3b:8f:dc:99:d3:7d:3a: be:df:c9:af:39:ec:c8:1c:91:db:0a:65:a9:44:df:66:18:4b: 2f:b7:5d:c2:97:28:a0:76:bd:36:5f:bb:75:98:ca:fc:d5:38: 97:57:14:aa:15:8e:d7:23:91:43:e2:3c:cf:8c:41:f9:d3:44: cf:44:90:bc:df:2b:59:09:04:2f:57:be:f6:6c:81:4f:2c:c3: 5a:bb:ca:7c:4a:b9:5c:4e:e7:be:32:c0:38:24:ac:9d:00:16: 7c:24:35:4a:fa:8c:51:c9:61:38:45:8b:6f:86:cc:30:46:38: 62:34:6d:cb:4d:bd:98:66:6f:d9:4b:78:86:38:0f:be:bb:d9: 32:36:07:56 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUElpBwfAWQzv7KIrexpZwGGSmb30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwMDQwMDZaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDc2Mzk3NzBjMzMzNjRmZDg5MjQ1OTA1YzM4NzZjNDkwOWVkMTdhYmRmMTlk ZjY3OTlmZjlmZjBhM2FmZDgxNmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4n70e9gvk90ZQcHtO+GbzmC820ADxJ+HwuOLz879eG3gqcCyqukMXWhLge c6lRuC0TShrRWQ+e4kL692H1xMfrp3aMjfqSHcQp/R+6J8TkLLEqajalaqBP2zyD yRdHLfGB6NPNwof5pXLx4OsIcZdVYV9nYIRaoLzxKJB7/fXBanuGruKIBNxjY+md dTydJ8UCQjY714/E8iO3U3C8u80lxtF0XjVOZFt175IuNWlFBb6vXBRrukCdFuIN VKL4Xzi36R5pCQhLnpoNXOy0Wx/TFYZM793VckpSFKVeZB3M/amFY2+xkqYDD4Yy gYVQTAH8ZcbvLI/CVzKingldg28CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT7rcNH ZRQ+Ze1ZzUnZaoWb7KuYeTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTVmMzQ0YTQtZmJjZi00Mjg1LWEzMmQtOGRjZTA0YTIyOTBlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DXg MA0GCSqGSIb3DQEBCwUAA4IBAQCScB9fg3VebeK8UFC2uw+czohxvv38lq56A3Jh OfdvgnFgkX9huNQuRli/VJrcpjLQMrnx8cmiUU1qcLf7cn57XgHZuePbAIONhAF3 RrKm1HnWIEj2cnVCNKkt7ZNwp7S4dl0ADXncYngqEAM5vx36ceKSzHXu7DuP3JnT fTq+38mvOezIHJHbCmWpRN9mGEsvt13Clyigdr02X7t1mMr81TiXVxSqFY7XI5FD 4jzPjEH500TPRJC83ytZCQQvV772bIFPLMNau8p8SrlcTue+MsA4JKydABZ8JDVK +oxRyWE4RYtvhswwRjhiNG3LTb2YZm/ZS3iGOA++u9kyNgdW -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:41 2025 by rpki-client