This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79852cc-835c-4a8a-8412-323c0281d4bf.roa File: d79852cc-835c-4a8a-8412-323c0281d4bf.roa (raw, json) Hash identifier: HJtCkbYqDLBca/cpgLc2Bby7h807Tzsie113w7pUnps= Subject key identifier: 5A:AC:A5:ED:5D:DD:EF:DD:11:4C:B7:FE:34:D2:14:68:22:EE:AD:E4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 660EA1F12DE6470E0343EFD7295EEC9728A48912 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79852cc-835c-4a8a-8412-323c0281d4bf.roa Signing time: Sat 06 Dec 2025 04:00:38 +0000 ROA not before: Sat 06 Dec 2025 04:00:38 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07b:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0e:a1:f1:2d:e6:47:0e:03:43:ef:d7:29:5e:ec:97:28:a4:89:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=cb72e29403b1720812762c913bccab4cecbf15c253bd57604809649fd1534059, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:3a:c7:77:e8:2d:8c:cf:05:7a:17:b9:39: 16:62:c9:08:87:05:70:66:24:a4:95:dc:1a:6c:b3: 48:42:af:09:57:3b:14:2d:3c:79:66:d2:7b:39:04: f7:7d:d2:13:c0:49:88:d5:e9:c4:b8:62:f4:05:54: ef:97:f0:11:40:af:10:84:a5:b0:2e:9a:4b:fe:26: 49:84:d3:37:74:84:96:90:be:d0:c4:5d:24:b4:c9: 53:bc:58:e2:51:83:d1:0b:d3:32:97:88:ca:6c:79: 82:08:2a:f7:40:5d:5a:d8:dd:fd:25:be:7f:09:ee: 34:e3:e5:e1:d1:4b:7a:fd:17:c4:78:6e:66:0a:2e: 5f:fa:4a:ca:c1:ab:f6:24:77:0f:7d:e9:b7:20:d3: 73:77:ae:69:d7:e9:0a:a7:7f:b5:19:8e:bb:d2:32: a2:30:88:4c:46:6b:31:0d:4e:41:27:93:65:31:db: ac:93:b5:2f:18:68:df:57:49:19:32:08:5f:35:97: 64:ac:91:6c:8b:51:06:38:47:a5:d3:db:25:97:bb: 20:4d:eb:48:16:76:0c:a9:ff:43:7a:be:92:c5:65: 2c:ff:33:31:81:e2:ce:a9:4c:94:84:2d:fa:05:ac: 43:b0:3d:35:84:ab:eb:14:a7:cf:80:2b:37:0c:cd: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:A5:ED:5D:DD:EF:DD:11:4C:B7:FE:34:D2:14:68:22:EE:AD:E4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79852cc-835c-4a8a-8412-323c0281d4bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07b:6000::/40 Signature Algorithm: sha256WithRSAEncryption 70:32:ce:4f:67:af:f5:8b:6a:89:03:b0:a7:0d:36:73:d3:3b: 58:eb:01:f7:94:59:08:88:fe:36:ed:89:d5:69:df:f7:8c:da: d6:21:28:8c:04:a5:be:53:17:8d:2e:e4:dc:bb:04:85:b2:87: 0e:3a:cc:5a:45:ad:52:8a:05:b5:c9:57:6d:96:69:36:51:fd: 12:8e:ab:33:ed:db:ef:40:8d:ca:7c:bf:c7:a7:3c:86:9a:41: 1d:1a:a0:71:9c:66:46:f9:5d:86:be:48:25:79:16:2e:ea:a0: b8:04:71:74:ec:1e:df:80:5f:3d:ec:32:27:ee:c5:63:1e:13: 46:db:c6:2a:1f:fe:70:50:8c:fc:35:93:c6:5b:88:e2:39:3a: ef:28:10:44:8d:c3:bb:d5:9b:fd:cd:16:f0:11:40:c8:61:33: d9:65:44:56:f1:4b:72:7c:bd:7e:b1:42:62:c4:dc:2c:71:ca: 8b:7a:70:23:cd:f7:1a:a2:1f:0e:c6:ca:bf:8a:a2:f2:95:f3: 50:bc:c4:2a:0d:93:72:04:05:93:59:95:b3:73:9e:76:ee:89: fa:8b:31:3d:9f:54:f6:cc:51:dd:87:1a:7e:d8:c9:5b:4b:91: 15:da:9d:92:13:7a:1a:dd:85:58:9c:f6:46:d8:0f:d8:bb:60: 06:58:0d:0f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZg6h8S3mRw4DQ+/XKV7slyikiRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMzhaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGNiNzJlMjk0MDNiMTcyMDgxMjc2MmM5MTNiY2NhYjRjZWNiZjE1YzI1M2Jk NTc2MDQ4MDk2NDlmZDE1MzQwNTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIxOsd36C2MzwV6F7k5FmLJCIcFcGYkpJXcGmyzSEKvCVc7FC08eWbSezkE 933SE8BJiNXpxLhi9AVU75fwEUCvEISlsC6aS/4mSYTTN3SElpC+0MRdJLTJU7xY 4lGD0QvTMpeIymx5gggq90BdWtjd/SW+fwnuNOPl4dFLev0XxHhuZgouX/pKysGr 9iR3D33ptyDTc3euadfpCqd/tRmOu9IyojCITEZrMQ1OQSeTZTHbrJO1Lxho31dJ GTIIXzWXZKyRbItRBjhHpdPbJZe7IE3rSBZ2DKn/Q3q+ksVlLP8zMYHizqlMlIQt +gWsQ7A9NYSr6xSnz4ArNwzNPQsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRarKXt Xd3v3RFMt/400hRoIu6t5DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDc5ODUyY2MtODM1Yy00YThhLTg0MTItMzIzYzAyODFkNGJmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Htg MA0GCSqGSIb3DQEBCwUAA4IBAQBwMs5PZ6/1i2qJA7CnDTZz0ztY6wH3lFkIiP42 7YnVad/3jNrWISiMBKW+UxeNLuTcuwSFsocOOsxaRa1SigW1yVdtlmk2Uf0Sjqsz 7dvvQI3KfL/HpzyGmkEdGqBxnGZG+V2GvkgleRYu6qC4BHF07B7fgF897DIn7sVj HhNG28YqH/5wUIz8NZPGW4jiOTrvKBBEjcO71Zv9zRbwEUDIYTPZZURW8UtyfL1+ sUJixNwsccqLenAjzfcaoh8Oxsq/iqLylfNQvMQqDZNyBAWTWZWzc5527on6izE9 n1T2zFHdhxp+2MlbS5EV2p2SE3oa3YVYnPZG2A/Yu2AGWA0P -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:21 2025 by rpki-client