This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa File: d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa (raw, json) Hash identifier: gJGAecYBEUmA6ACLFusxxJyhqeSxiuImZqCgR5eaf/I= Subject key identifier: 4C:F0:C7:25:D5:47:B6:A7:14:C6:31:C8:FB:52:72:54:9B:1F:BA:9E Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5E768A97C98EE7145506CB5581DEB701D876619D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa Signing time: Mon 08 Dec 2025 02:10:25 +0000 ROA not before: Mon 08 Dec 2025 02:10:25 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:76:8a:97:c9:8e:e7:14:55:06:cb:55:81:de:b7:01:d8:76:61:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:25 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=e0c366db04f3d6cc8a80152118d403f1b8794b12b346826ba88e62fb6aa856c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:3f:27:57:7a:7c:eb:27:b8:c8:ee:78:84: 98:72:46:fa:3e:e5:fc:33:09:1a:6b:e1:4c:9b:03: 5f:c4:af:1a:53:cd:a4:0b:ee:63:37:75:32:07:cb: 12:c7:88:95:09:e0:df:bd:1b:12:f3:29:5a:23:00: ea:db:9f:2f:96:9e:76:a6:a4:de:a4:be:4c:8d:5c: b8:31:17:a5:c8:b6:26:db:8c:4f:63:81:f3:06:71: 68:7f:89:3c:f6:30:4c:76:fa:63:86:55:58:ae:5e: f4:ab:ed:e6:ef:ba:13:1d:b2:c8:3e:3e:d2:cf:5e: 7d:78:cd:eb:7c:e0:e9:3b:6a:3a:47:27:b1:08:3b: ff:8c:dd:71:c7:25:3d:5a:e2:a7:bf:9a:71:ea:85: 61:2f:8d:ad:bb:c5:b6:d7:f8:8d:d6:1f:8b:b4:1a: 2f:03:96:11:70:b0:18:88:d6:f6:ff:4e:e8:a9:71: 50:28:e5:e9:8c:19:55:47:99:8a:fb:a1:b2:2d:e6: 2c:39:d3:66:41:94:a1:ed:b4:97:1d:9d:c4:7b:f3: 25:09:9f:92:8c:62:d3:09:77:d4:59:51:7f:11:69: 1e:8e:e2:d5:bf:80:2b:21:d2:29:49:a3:0a:7c:18: 71:03:d5:36:db:b7:80:69:88:bd:01:80:e3:06:ea: c1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:C7:25:D5:47:B6:A7:14:C6:31:C8:FB:52:72:54:9B:1F:BA:9E X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:800::/40 Signature Algorithm: sha256WithRSAEncryption ab:f1:2c:ba:2e:d4:e6:a1:c9:74:74:ab:f5:79:de:3a:63:df: 87:6a:75:9d:dd:26:85:aa:7e:72:f3:9a:d7:b3:e2:2f:c5:cf: eb:6e:7d:93:36:a0:25:30:f1:d2:9e:4e:30:14:37:6f:02:d1: e7:28:2d:8c:9f:41:9c:a7:79:d3:4a:a5:47:56:69:d5:ba:c0: ab:74:6e:56:06:b3:e5:13:e7:46:b7:9b:7e:35:a6:85:ce:c1: 11:58:b9:92:45:be:f6:5e:63:32:21:e9:3c:58:b8:f8:d6:5d: 5c:4f:e4:2a:1e:1f:f2:65:4d:6b:fe:05:cd:1a:9c:37:56:3d: e4:4a:ca:a5:da:4c:6a:dc:01:07:eb:47:6f:76:64:1f:cf:24: b5:df:d3:85:40:e2:20:be:f7:99:85:13:fd:0d:14:98:64:7d: 84:39:80:96:f4:fe:e4:5f:a3:ff:80:bd:a8:38:d3:57:fd:65: 2b:a8:ab:4b:a7:d9:e2:91:d2:da:19:dd:ed:92:39:7f:ea:b6: 90:8f:d2:4c:02:81:ae:9e:ae:96:5d:27:79:62:d7:f9:61:f0: c4:56:f1:38:77:93:02:ae:57:74:fc:15:98:90:59:ba:f4:54: 56:55:b7:3a:a3:22:c3:ee:16:24:fd:83:65:67:27:d3:87:89: 90:3e:b9:3b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXnaKl8mO5xRVBstVgd63Adh2YZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMjVaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQGUwYzM2NmRiMDRmM2Q2Y2M4YTgwMTUyMTE4ZDQwM2YxYjg3OTRiMTJiMzQ2 ODI2YmE4OGU2MmZiNmFhODU2YzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSePydXenzrJ7jI7niEmHJG+j7l/DMJGmvhTJsDX8SvGlPNpAvuYzd1MgfL EseIlQng370bEvMpWiMA6tufL5aedqak3qS+TI1cuDEXpci2JtuMT2OB8wZxaH+J PPYwTHb6Y4ZVWK5e9Kvt5u+6Ex2yyD4+0s9efXjN63zg6TtqOkcnsQg7/4zdcccl PVrip7+aceqFYS+NrbvFttf4jdYfi7QaLwOWEXCwGIjW9v9O6KlxUCjl6YwZVUeZ ivuhsi3mLDnTZkGUoe20lx2dxHvzJQmfkoxi0wl31FlRfxFpHo7i1b+AKyHSKUmj CnwYcQPVNtu3gGmIvQGA4wbqwWUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRM8Mcl 1Ue2pxTGMcj7UnJUmx+6njAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDJiMTk5NTYtOTIwMi00ZTcxLTliZWUtZmRiYjRjNTJiYjZlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DEI MA0GCSqGSIb3DQEBCwUAA4IBAQCr8Sy6LtTmocl0dKv1ed46Y9+HanWd3SaFqn5y 85rXs+Ivxc/rbn2TNqAlMPHSnk4wFDdvAtHnKC2Mn0Gcp3nTSqVHVmnVusCrdG5W BrPlE+dGt5t+NaaFzsERWLmSRb72XmMyIek8WLj41l1cT+QqHh/yZU1r/gXNGpw3 Vj3kSsql2kxq3AEH60dvdmQfzyS139OFQOIgvveZhRP9DRSYZH2EOYCW9P7kX6P/ gL2oONNX/WUrqKtLp9nikdLaGd3tkjl/6raQj9JMAoGunq6WXSd5Ytf5YfDEVvE4 d5MCrld0/BWYkFm69FRWVbc6oyLD7hYk/YNlZyfTh4mQPrk7 -----END CERTIFICATE-----Generated at Tue Dec 16 04:35:21 2025 by rpki-client