This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea0e91cd-e265-4578-9172-3a1331586357.roa File: ea0e91cd-e265-4578-9172-3a1331586357.roa (raw, json) Hash identifier: 7heDPkLSIy7jviSLVymUXWXrF+buoVJmZ0MJ8UMmNsQ= Subject key identifier: F5:26:DF:1D:24:C7:2E:22:A3:CE:E4:9E:F8:68:81:80:72:76:2C:09 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6E144BF27890651004A30C12D13DF67D77A88EE3 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea0e91cd-e265-4578-9172-3a1331586357.roa Signing time: Sat 06 Dec 2025 04:00:37 +0000 ROA not before: Sat 06 Dec 2025 04:00:37 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d035:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:14:4b:f2:78:90:65:10:04:a3:0c:12:d1:3d:f6:7d:77:a8:8e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=564bd11df8219ad7b6bf5569e071ac7efea7cbff319a0f3a08e721965786fe06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:42:b6:5f:a1:a5:a4:90:77:fc:8f:0d:ad: 65:d4:ad:d7:d9:b3:18:c8:fc:2f:58:cd:c2:d5:9d: 40:bb:4b:4d:65:e8:ff:cd:6a:30:8c:16:2b:ed:a8: 52:7e:71:13:e5:c3:56:03:a8:ab:0b:ca:5e:a8:eb: 4e:63:c7:8b:52:c8:0f:55:b2:7c:db:5f:9f:2a:34: e3:af:d4:e5:bf:f5:6e:f1:84:0e:99:ba:e1:94:72: 22:a8:6e:80:c0:2d:f6:cc:52:65:98:0d:c7:73:6f: c9:d7:f3:c9:97:0b:ad:fa:97:dc:51:24:7a:75:0a: af:ae:4c:3b:3f:5c:f6:73:59:28:6c:f5:26:81:7e: a7:f7:da:7c:e6:1e:01:7d:4f:21:17:74:a5:b4:84: 5c:60:e3:74:5f:92:04:c3:c9:4c:61:3a:b4:83:b6: 6f:22:32:b0:56:94:eb:66:dd:25:d6:3c:22:d0:79: 90:7c:72:8b:91:64:30:9b:c4:9c:f2:e9:04:72:74: e2:81:6b:5a:09:c6:0b:e3:e8:a1:ff:59:35:f4:21: 43:68:72:7e:d0:73:b4:cd:96:cb:b1:66:d3:81:7f: 2a:30:36:e6:8b:83:64:99:21:1f:80:37:5a:de:21: 76:0d:a4:1b:78:84:fb:bd:ad:2d:de:60:d8:f0:b1: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:26:DF:1D:24:C7:2E:22:A3:CE:E4:9E:F8:68:81:80:72:76:2C:09 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea0e91cd-e265-4578-9172-3a1331586357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d035:5000::/40 Signature Algorithm: sha256WithRSAEncryption 8c:e8:fd:b4:53:eb:e6:10:dd:47:eb:8c:cd:5d:26:62:18:ce: 2b:e8:31:9d:49:c4:64:2a:4c:47:d8:51:8f:0f:ba:35:90:3d: c4:90:37:a9:52:56:68:a3:41:a1:9a:ae:1f:75:fb:b4:a7:0f: 26:24:82:6d:07:91:53:66:75:11:eb:73:d8:01:4a:de:0c:6d: 28:56:3c:2f:b9:14:7a:49:ba:9e:71:07:20:e6:64:95:1c:e4: d2:ee:fd:76:22:07:d6:d4:8f:fd:fb:7a:19:99:51:69:34:a5: 59:af:32:3a:c1:d3:3d:98:da:c8:22:81:aa:7b:e7:75:e4:38: 72:d2:90:38:af:6f:80:23:44:87:4d:00:44:31:5e:62:05:63: a0:e5:7f:5c:7f:64:20:45:10:cb:4c:86:17:72:a2:b7:2a:a6: 44:3f:e9:dc:64:cc:7d:e8:42:ec:2d:ec:3f:aa:9c:e5:c8:db: 4c:9b:3e:db:e1:4e:c9:92:73:8b:79:e1:91:6c:53:0e:17:73: 11:60:36:75:ad:22:5f:42:d2:ce:b8:68:d2:92:f4:4b:c1:54: f7:25:3b:ba:fb:c1:8c:e9:3a:32:00:53:9f:6c:75:90:c9:94: 5b:c5:70:fe:67:f3:ef:fc:2d:87:08:06:12:55:69:fa:7c:16: 10:4b:1d:26 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbhRL8niQZRAEowwS0T32fXeojuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMzdaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDU2NGJkMTFkZjgyMTlhZDdiNmJmNTU2OWUwNzFhYzdlZmVhN2NiZmYzMTlh MGYzYTA4ZTcyMTk2NTc4NmZlMDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK08QrZfoaWkkHf8jw2tZdSt19mzGMj8L1jNwtWdQLtLTWXo/81qMIwWK+2o Un5xE+XDVgOoqwvKXqjrTmPHi1LID1WyfNtfnyo046/U5b/1bvGEDpm64ZRyIqhu gMAt9sxSZZgNx3NvydfzyZcLrfqX3FEkenUKr65MOz9c9nNZKGz1JoF+p/fafOYe AX1PIRd0pbSEXGDjdF+SBMPJTGE6tIO2byIysFaU62bdJdY8ItB5kHxyi5FkMJvE nPLpBHJ04oFrWgnGC+Poof9ZNfQhQ2hyftBztM2Wy7Fm04F/KjA25ouDZJkhH4A3 Wt4hdg2kG3iE+72tLd5g2PCxZqECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT1Jt8d JMcuIqPO5J74aIGAcnYsCTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZWEwZTkxY2QtZTI2NS00NTc4LTkxNzItM2ExMzMxNTg2MzU3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DVQ MA0GCSqGSIb3DQEBCwUAA4IBAQCM6P20U+vmEN1H64zNXSZiGM4r6DGdScRkKkxH 2FGPD7o1kD3EkDepUlZoo0Ghmq4fdfu0pw8mJIJtB5FTZnUR63PYAUreDG0oVjwv uRR6SbqecQcg5mSVHOTS7v12IgfW1I/9+3oZmVFpNKVZrzI6wdM9mNrIIoGqe+d1 5Dhy0pA4r2+AI0SHTQBEMV5iBWOg5X9cf2QgRRDLTIYXcqK3KqZEP+ncZMx96ELs Lew/qpzlyNtMmz7b4U7JknOLeeGRbFMOF3MRYDZ1rSJfQtLOuGjSkvRLwVT3JTu6 +8GM6ToyAFOfbHWQyZRbxXD+Z/Pv/C2HCAYSVWn6fBYQSx0m -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:17 2025 by rpki-client