This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa File: cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa (raw, json) Hash identifier: 29x6kuo/o+cKQur+l5Uj83om2mLYU/Vxn8vfPzhL+IU= Subject key identifier: 3E:95:03:2F:3F:9C:44:6A:C5:3B:62:7F:6A:6E:9E:99:C4:35:B5:FA Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 44B010FF1A17FA742C484797A111D13075DB1A1E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa Signing time: Wed 10 Dec 2025 05:31:22 +0000 ROA not before: Wed 10 Dec 2025 05:31:22 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b0:10:ff:1a:17:fa:74:2c:48:47:97:a1:11:d1:30:75:db:1a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:22 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=e6b7048ad014a016741af099b4e35fd9122f3f07abd93acee1c7146f7bab8516, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:a9:43:8d:40:d8:2f:d3:ec:4a:50:55:94: 6e:00:27:6e:f1:69:24:e7:e2:ff:8e:e7:cb:e0:3b: a4:40:95:46:dc:62:d8:0a:2c:43:c3:37:2b:76:36: 9f:13:83:7e:1b:d2:32:79:8f:46:65:4f:da:ac:a6: 35:c7:30:07:f1:65:6e:9b:dc:73:a6:6d:92:83:51: 40:c2:07:43:6a:57:7a:ef:01:e8:c5:76:0e:b8:23: b3:1b:4f:14:f8:28:2b:f1:5a:13:64:f7:20:35:74: c8:14:12:94:ad:49:67:20:68:06:dc:be:25:de:d3: a7:2b:48:8b:0c:93:bc:43:09:e1:7b:1b:d3:df:a3: 6c:89:ee:31:6b:94:e8:68:8c:6e:16:53:38:0e:7e: d7:64:86:29:d6:66:b5:bd:8f:7c:8d:b1:62:37:8a: 74:a1:04:0a:b3:00:f2:a0:02:c7:3f:d1:cb:e4:b9: b8:22:e7:9a:12:78:85:3e:75:dd:f5:d1:ee:9a:b7: bb:dd:39:9e:8d:00:aa:d6:a4:d8:b4:fd:76:f6:88: 6b:4a:c0:98:1c:8a:6a:9b:8d:e4:ea:13:6b:97:8c: 19:12:51:4f:69:37:f8:f0:09:d4:fa:a6:59:77:58: 65:af:c6:40:5c:3c:e3:22:2c:03:1b:22:20:c4:1c: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:95:03:2F:3F:9C:44:6A:C5:3B:62:7F:6A:6E:9E:99:C4:35:B5:FA X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:9000::/40 Signature Algorithm: sha256WithRSAEncryption b1:d3:af:73:79:07:77:52:b7:83:da:a1:8e:8b:7c:64:39:01: 94:b4:98:01:76:8b:9b:85:31:ac:8d:98:f9:a2:b2:e5:69:03: 08:4e:91:71:6d:c1:bf:4b:34:a7:a9:a0:66:44:01:3d:bd:9a: 88:4a:0d:f3:06:51:60:de:72:a6:f7:41:96:42:db:84:75:7c: b5:a8:13:8f:06:8d:0f:36:2e:b2:5a:ec:aa:f3:3c:bc:d3:62: a4:1f:68:0e:c6:44:f8:68:aa:c6:23:a2:a6:de:70:a1:37:80: 07:3d:74:ca:66:71:41:c9:16:78:05:d7:53:ad:f1:66:f7:ff: 6a:c6:0b:d9:43:d6:d9:75:10:5a:b4:b8:71:5e:d8:66:75:27: 02:2a:db:a0:f6:9c:8a:43:2e:30:2a:6f:5c:1b:4b:5e:c5:94: cd:a2:2e:0e:00:ed:8e:ca:fb:ed:b7:0c:77:09:73:67:42:4f: f8:2f:30:10:39:94:2c:34:2c:6e:6a:83:67:37:b3:21:02:df: ae:92:d2:95:f8:84:f9:6e:7c:62:cb:32:5b:d4:b9:d0:80:f9: c6:ac:ce:6d:ea:56:9c:e1:14:64:b5:16:c2:5f:64:4f:08:59: 66:a1:b4:fc:ff:f1:a3:50:98:2f:5c:2f:9c:a9:25:54:0c:33: b1:be:02:f0 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIURLAQ/xoX+nQsSEeXoRHRMHXbGh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMjJaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGU2YjcwNDhhZDAxNGEwMTY3NDFhZjA5OWI0ZTM1ZmQ5MTIyZjNmMDdhYmQ5 M2FjZWUxYzcxNDZmN2JhYjg1MTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI3IqUONQNgv0+xKUFWUbgAnbvFpJOfi/47ny+A7pECVRtxi2AosQ8M3K3Y2 nxODfhvSMnmPRmVP2qymNccwB/Flbpvcc6ZtkoNRQMIHQ2pXeu8B6MV2DrgjsxtP FPgoK/FaE2T3IDV0yBQSlK1JZyBoBty+Jd7TpytIiwyTvEMJ4Xsb09+jbInuMWuU 6GiMbhZTOA5+12SGKdZmtb2PfI2xYjeKdKEECrMA8qACxz/Ry+S5uCLnmhJ4hT51 3fXR7pq3u905no0Aqtak2LT9dvaIa0rAmByKapuN5OoTa5eMGRJRT2k3+PAJ1Pqm WXdYZa/GQFw84yIsAxsiIMQckr0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ+lQMv P5xEasU7Yn9qbp6ZxDW1+jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2FjYWQzZDktYmZhMS00OWE4LWE5YjMtY2JhYzdiZTlmZGIyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DGQ MA0GCSqGSIb3DQEBCwUAA4IBAQCx069zeQd3UreD2qGOi3xkOQGUtJgBdoubhTGs jZj5orLlaQMITpFxbcG/SzSnqaBmRAE9vZqISg3zBlFg3nKm90GWQtuEdXy1qBOP Bo0PNi6yWuyq8zy802KkH2gOxkT4aKrGI6Km3nChN4AHPXTKZnFByRZ4BddTrfFm 9/9qxgvZQ9bZdRBatLhxXthmdScCKtug9pyKQy4wKm9cG0texZTNoi4OAO2Oyvvt twx3CXNnQk/4LzAQOZQsNCxuaoNnN7MhAt+uktKV+IT5bnxiyzJb1LnQgPnGrM5t 6lac4RRktRbCX2RPCFlmobT8//GjUJgvXC+cqSVUDDOxvgLw -----END CERTIFICATE-----Generated at Mon Dec 15 15:28:28 2025 by rpki-client