This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa File: cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa (raw, json) Hash identifier: 8eTXv9oZPHRPgEBcxUgQn7EYza3e19y/mgo+E1OHHSk= Subject key identifier: 12:76:8B:05:F8:E1:A8:CC:06:9B:7E:F5:6A:BE:B5:29:2B:22:EF:A3 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 358CF349507A7248CDD7146C766C433E3E6991F7 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa Signing time: Wed 10 Dec 2025 06:20:05 +0000 ROA not before: Wed 10 Dec 2025 06:20:05 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8c:f3:49:50:7a:72:48:cd:d7:14:6c:76:6c:43:3e:3e:69:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:20:05 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=41b7b0e5e376f3c237aa2b89d7f75ac9e288be235d2ea14ab522063b1354fa29, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:11:67:af:cd:58:e1:b2:6d:08:09:33:57: 56:f2:3d:e6:ca:63:25:52:44:9f:a8:99:71:70:ee: e2:94:94:29:ee:47:2b:f2:86:92:24:c1:24:90:30: 54:de:c0:81:b5:24:f7:f0:c0:c3:47:f1:c5:97:15: 51:8b:23:08:7f:5c:03:35:f2:18:d3:9d:f4:38:09: 8b:5e:ef:1f:3a:c9:f8:14:22:ee:b7:f8:71:05:94: b1:82:f5:b2:f9:e6:38:d3:87:de:9b:92:c1:2f:fe: 0d:60:ba:6f:1f:25:e7:e6:54:78:55:c8:43:b2:20: 66:8b:13:d7:64:ab:21:01:64:24:5f:6a:ee:31:03: b1:9e:c0:ca:45:89:b7:ec:36:33:23:3a:fe:4c:39: 51:3b:c8:88:bf:72:dd:d1:9a:6e:6a:45:12:04:40: c3:18:ad:7a:fd:10:15:d2:8d:9d:39:c1:8d:b7:47: 0d:24:33:15:51:03:df:99:85:4b:7b:2b:21:36:26: f7:c8:56:61:23:b7:b6:ba:63:b9:5d:41:15:e5:f9: ba:30:b6:c7:9a:ab:72:64:97:67:59:81:5a:a5:58: 33:53:2a:96:4d:79:a9:68:fe:eb:43:50:aa:05:2b: ff:43:84:09:5b:d4:60:b7:c3:51:68:f7:ef:8b:a3: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:8B:05:F8:E1:A8:CC:06:9B:7E:F5:6A:BE:B5:29:2B:22:EF:A3 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:1040::/48 Signature Algorithm: sha256WithRSAEncryption 50:fb:66:73:75:d0:dd:2d:32:06:99:0b:96:83:b2:74:90:5a: 09:4b:0b:15:55:77:0a:bc:c0:09:ea:16:44:27:20:d2:25:58: 99:ce:2e:c5:06:c6:fa:7e:13:15:bd:04:d6:27:98:df:7f:b3: 89:97:5c:21:e7:f2:83:e6:7b:a5:b2:7d:d9:72:7a:33:de:8e: 5f:cf:57:76:d8:21:c3:2a:53:a9:d9:7e:19:89:5b:37:9f:9a: 60:d1:69:df:f8:12:ad:64:15:50:e4:2f:14:20:f4:fd:df:46: f8:5f:2f:35:19:57:9e:d4:2c:54:bb:46:9b:77:11:2c:0c:de: 6c:6f:01:bf:b6:41:d9:7e:04:34:c7:04:1d:0b:3a:3d:ad:e3: b1:7f:68:53:93:ad:94:d0:f1:a1:1a:82:53:58:ce:53:a1:6e: 23:47:bc:0e:9c:49:9e:eb:2c:af:4a:9c:37:fb:28:87:df:d2: 81:86:d8:94:8a:31:51:d6:e1:b3:98:18:b2:3d:33:10:d3:26: 7c:d0:f3:11:20:a0:bb:e6:20:d2:4d:32:1e:ba:31:f4:a1:49: 85:67:0a:ed:a1:84:01:2d:f6:ea:70:f5:2a:6e:f8:f0:a8:5b: 05:e7:40:05:a9:67:22:87:50:17:eb:89:da:eb:89:40:d8:4b: fe:ff:29:e4 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUNYzzSVB6ckjN1xRsdmxDPj5pkfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIwMDVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDQxYjdiMGU1ZTM3NmYzYzIzN2FhMmI4OWQ3Zjc1YWM5ZTI4OGJlMjM1ZDJl YTE0YWI1MjIwNjNiMTM1NGZhMjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMulEWevzVjhsm0ICTNXVvI95spjJVJEn6iZcXDu4pSUKe5HK/KGkiTBJJAw VN7AgbUk9/DAw0fxxZcVUYsjCH9cAzXyGNOd9DgJi17vHzrJ+BQi7rf4cQWUsYL1 svnmONOH3puSwS/+DWC6bx8l5+ZUeFXIQ7IgZosT12SrIQFkJF9q7jEDsZ7AykWJ t+w2MyM6/kw5UTvIiL9y3dGabmpFEgRAwxitev0QFdKNnTnBjbdHDSQzFVED35mF S3srITYm98hWYSO3trpjuV1BFeX5ujC2x5qrcmSXZ1mBWqVYM1Mqlk15qWj+60NQ qgUr/0OECVvUYLfDUWj374ujFn8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQSdosF +OGozAabfvVqvrUpKyLvozAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2Y4MzI2ZDAtZWNjMC00OTM5LTk5MzktMmVkNzBmNmVhNTM2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIQ QDANBgkqhkiG9w0BAQsFAAOCAQEAUPtmc3XQ3S0yBpkLloOydJBaCUsLFVV3CrzA CeoWRCcg0iVYmc4uxQbG+n4TFb0E1ieY33+ziZdcIefyg+Z7pbJ92XJ6M96OX89X dtghwypTqdl+GYlbN5+aYNFp3/gSrWQVUOQvFCD0/d9G+F8vNRlXntQsVLtGm3cR LAzebG8Bv7ZB2X4ENMcEHQs6Pa3jsX9oU5OtlNDxoRqCU1jOU6FuI0e8DpxJnuss r0qcN/soh9/SgYbYlIoxUdbhs5gYsj0zENMmfNDzESCgu+Yg0k0yHrox9KFJhWcK 7aGEAS326nD1Km748KhbBedABalnIodQF+uJ2uuJQNhL/v8p5A== -----END CERTIFICATE-----Generated at Mon Dec 15 15:31:31 2025 by rpki-client