This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa File: f0af2b24-5037-414d-9581-f0315174658c.roa (raw, json) Hash identifier: 4WRq5klSfUJXpY4kS/93mk3cTom0wN0ZDx5klaXwc94= Subject key identifier: 46:69:DB:6C:EA:81:8C:F4:23:F1:40:31:CE:F1:08:F6:63:37:94:9F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 19FCF3AADA68E036B9F6B98B0EF878FFD453ABAC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa Signing time: Sat 06 Dec 2025 04:00:06 +0000 ROA not before: Sat 06 Dec 2025 04:00:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07b:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fc:f3:aa:da:68:e0:36:b9:f6:b9:8b:0e:f8:78:ff:d4:53:ab:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=f8956135bd6bcca9f591e1a6acef95e8e80d2eff8d82b51895a81184f69d6b64, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e5:e7:9d:0f:32:bc:e1:c0:6a:43:ea:b9:f1: 86:8d:c8:cf:2d:5d:fa:5c:ba:9a:c0:38:42:3b:63: 2f:a9:95:b8:ee:67:3e:04:c3:44:96:b0:02:06:b8: 68:85:d7:1b:a8:be:0c:01:a9:09:f9:3d:b8:4d:d6: 66:3a:52:ea:c6:07:32:89:19:a8:af:03:cc:41:10: 71:09:5c:20:b7:61:e0:69:bd:c8:27:37:0e:18:ad: 0f:c9:42:c5:0c:0c:da:96:07:cc:9d:b6:a6:0c:32: 38:ce:e4:49:da:fb:63:f1:e0:15:2b:c5:77:9c:32: d9:62:46:6d:4b:f2:ae:58:ed:c3:b2:ce:b4:45:73: 44:6d:7c:0c:81:b1:0a:3e:85:de:ec:1d:70:e5:11: 4a:75:c8:2b:9b:ff:36:40:3a:83:cd:58:e7:5f:b7: 2f:f5:04:47:43:90:3a:af:35:19:3a:78:51:94:87: 62:c0:97:ae:b0:f0:a8:d4:a7:1d:80:53:ce:ec:b2: 5f:10:87:55:b8:d2:7f:68:84:01:2c:53:96:c3:b3: bd:5d:d3:37:74:c5:9f:bc:3f:f3:85:6e:25:fa:91: d2:be:74:11:9a:03:fa:6d:51:f4:88:ee:77:d8:39: e1:26:3b:6e:e4:40:d4:ce:63:0a:1a:7d:42:f3:fb: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:69:DB:6C:EA:81:8C:F4:23:F1:40:31:CE:F1:08:F6:63:37:94:9F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07b:c000::/40 Signature Algorithm: sha256WithRSAEncryption 11:aa:3a:06:d2:39:73:a2:a7:3b:e9:03:a4:94:5f:66:d3:e8: f6:d7:98:65:ec:17:5d:d3:eb:66:d8:d7:3d:3d:17:e3:ea:02: b4:ef:ee:2f:48:d6:a3:22:75:71:54:c2:39:4a:06:3c:b6:61: 4e:4f:5b:f5:97:1c:e7:a8:c8:80:3d:3c:45:de:f0:89:d3:2a: ca:cc:bc:53:a0:27:54:57:7b:e6:15:e6:88:d9:27:40:26:1f: 62:d6:a8:7b:83:c6:0b:af:96:53:75:33:6a:f8:61:78:5f:6c: 0e:db:ed:b0:5e:be:3e:94:4f:a2:d7:8e:ee:10:53:a6:a5:02: 30:94:03:b3:f4:83:01:cc:f3:ff:8a:31:e1:40:cf:85:43:53: 81:05:ad:68:ae:b7:2d:26:d0:94:40:c2:21:28:49:8a:9c:e3: 91:19:15:e8:ec:6e:39:a4:31:e7:bc:14:ba:a7:15:9d:c5:9e: c0:a9:f1:e8:b6:8f:c6:5d:63:4b:7b:62:41:1d:f9:50:10:a4: 46:fb:c2:cd:b5:0a:1a:58:a6:45:fa:66:7f:25:b4:64:f6:69: 76:43:cc:e7:60:d5:01:ce:e7:8f:b0:f4:ac:fe:9c:bf:36:43: 20:8a:74:1d:b3:04:a2:98:bd:05:6a:52:73:80:7a:b1:8f:76: ae:74:fe:05 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUGfzzqtpo4Da59rmLDvh4/9RTq6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMDZaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGY4OTU2MTM1YmQ2YmNjYTlmNTkxZTFhNmFjZWY5NWU4ZTgwZDJlZmY4ZDgy YjUxODk1YTgxMTg0ZjY5ZDZiNjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPPl550PMrzhwGpD6rnxho3Izy1d+ly6msA4QjtjL6mVuO5nPgTDRJawAga4 aIXXG6i+DAGpCfk9uE3WZjpS6sYHMokZqK8DzEEQcQlcILdh4Gm9yCc3DhitD8lC xQwM2pYHzJ22pgwyOM7kSdr7Y/HgFSvFd5wy2WJGbUvyrljtw7LOtEVzRG18DIGx Cj6F3uwdcOURSnXIK5v/NkA6g81Y51+3L/UER0OQOq81GTp4UZSHYsCXrrDwqNSn HYBTzuyyXxCHVbjSf2iEASxTlsOzvV3TN3TFn7w/84VuJfqR0r50EZoD+m1R9Iju d9g54SY7buRA1M5jChp9QvP7lUcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRGadts 6oGM9CPxQDHO8Qj2YzeUnzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZjBhZjJiMjQtNTAzNy00MTRkLTk1ODEtZjAzMTUxNzQ2NThjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HvA MA0GCSqGSIb3DQEBCwUAA4IBAQARqjoG0jlzoqc76QOklF9m0+j215hl7Bdd0+tm 2Nc9PRfj6gK07+4vSNajInVxVMI5SgY8tmFOT1v1lxznqMiAPTxF3vCJ0yrKzLxT oCdUV3vmFeaI2SdAJh9i1qh7g8YLr5ZTdTNq+GF4X2wO2+2wXr4+lE+i147uEFOm pQIwlAOz9IMBzPP/ijHhQM+FQ1OBBa1orrctJtCUQMIhKEmKnOORGRXo7G45pDHn vBS6pxWdxZ7AqfHoto/GXWNLe2JBHflQEKRG+8LNtQoaWKZF+mZ/JbRk9ml2Q8zn YNUBzuePsPSs/py/NkMginQdswSimL0FalJzgHqxj3audP4F -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:32 2025 by rpki-client