This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa File: f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa (raw, json) Hash identifier: 5Go+y/KGTVjCpyeh/vPPtt3AaWWY2OBxc1fJ1yc23w0= Subject key identifier: 6E:EF:5E:E8:D5:F2:D3:96:19:D0:87:26:50:6E:DA:6A:75:96:FC:FB Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 433F8ADB9B46543BF728E649C1186EAEB35584BA Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa Signing time: Mon 08 Dec 2025 02:10:13 +0000 ROA not before: Mon 08 Dec 2025 02:10:13 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3f:8a:db:9b:46:54:3b:f7:28:e6:49:c1:18:6e:ae:b3:55:84:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:13 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=624161108f87f0da0d031253ed9e0b6d41e8b8738edd854ce24a72239438db39, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:74:44:50:75:88:76:48:cc:f9:91:a9:24: 70:2b:56:df:d1:7a:96:8a:72:77:6a:44:98:3f:a6: d1:f9:2f:12:41:1f:2c:5f:4d:11:ec:06:31:0c:4b: a3:f9:ce:f2:48:06:f4:86:b4:9e:ab:02:20:89:39: 20:1f:50:95:59:8a:fc:78:4f:7d:9c:5b:9a:c8:65: 48:93:a2:d6:a2:c1:f4:6d:3b:f2:7c:4c:40:94:6e: 17:e2:60:7b:47:57:e4:39:be:76:37:04:cc:61:a3: 65:4d:e9:d7:60:57:ea:e6:f2:c9:a3:11:52:24:b5: 39:90:d1:70:bb:18:3d:94:fe:b3:8e:fd:01:cc:51: 64:c1:ed:6b:2a:3d:3e:11:6b:f3:c5:fc:2b:56:65: 29:54:05:0b:01:d1:69:09:86:7f:4f:8d:42:bd:85: 59:08:45:20:db:05:c6:5c:00:c7:b4:40:bf:f0:f9: 30:ff:13:01:16:85:4d:be:ff:e9:aa:c2:08:89:03: 36:a5:05:c2:84:10:80:37:d2:76:e8:7b:76:d3:74: a4:21:cf:c9:25:3e:00:d5:8a:34:8e:d1:c6:6a:f3: 39:36:89:c7:82:95:b1:2e:d2:00:6f:fc:71:83:2f: 06:4b:2a:2c:82:74:e1:ae:03:f9:fa:3c:72:33:74: 51:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EF:5E:E8:D5:F2:D3:96:19:D0:87:26:50:6E:DA:6A:75:96:FC:FB X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 22:10:20:74:1e:76:cd:87:9a:5b:bc:f8:61:45:89:00:0b:4a: 3c:aa:47:3e:59:64:91:de:4c:6a:1f:b1:fc:f6:34:7a:fc:6f: b0:e9:68:b9:7c:8d:78:50:e3:22:bf:78:0b:0c:be:f7:15:66: 1d:80:66:c0:09:07:c8:d1:2a:77:95:0d:20:ec:80:69:82:db: a0:e6:84:26:38:2b:7e:60:57:e5:14:24:37:fa:00:21:2c:f4: e4:65:19:f3:cf:da:8a:fb:db:81:a0:e0:e4:6f:1d:05:e8:58: 13:17:2d:40:ce:59:19:7a:67:c7:84:3b:7c:3d:2b:24:0b:b8: 14:99:98:37:f8:49:7f:f8:01:ac:0f:d0:2b:ab:4c:02:2d:e4: ec:08:51:fd:43:02:72:03:a6:bb:73:5e:70:ba:b9:6a:3e:a0: 53:d5:0a:ed:e8:48:d3:e2:51:2e:27:2d:a4:f7:65:ff:b3:dc: d9:ec:6d:ee:fc:ea:03:14:bc:41:28:cf:10:2c:c8:56:74:25: 5e:5b:7d:a4:b8:1a:bb:29:1f:ec:01:36:3e:81:32:54:2c:7f: 59:9f:d7:ac:1e:f2:cd:8c:55:f7:58:81:3d:18:b8:d2:49:a6: 70:11:78:40:f0:d2:1b:b5:21:c7:01:e2:88:cb:64:07:02:c8: b5:27:c5:49 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUQz+K25tGVDv3KOZJwRhurrNVhLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMTNaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDYyNDE2MTEwOGY4N2YwZGEwZDAzMTI1M2VkOWUwYjZkNDFlOGI4NzM4ZWRk ODU0Y2UyNGE3MjIzOTQzOGRiMzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCbdERQdYh2SMz5kakkcCtW39F6lopyd2pEmD+m0fkvEkEfLF9NEewGMQxL o/nO8kgG9Ia0nqsCIIk5IB9QlVmK/HhPfZxbmshlSJOi1qLB9G078nxMQJRuF+Jg e0dX5Dm+djcEzGGjZU3p12BX6ubyyaMRUiS1OZDRcLsYPZT+s479AcxRZMHtayo9 PhFr88X8K1ZlKVQFCwHRaQmGf0+NQr2FWQhFINsFxlwAx7RAv/D5MP8TARaFTb7/ 6arCCIkDNqUFwoQQgDfSduh7dtN0pCHPySU+ANWKNI7RxmrzOTaJx4KVsS7SAG/8 cYMvBksqLIJ04a4D+fo8cjN0UdcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRu717o 1fLTlhnQhyZQbtpqdZb8+zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZjIzMWY3YWUtN2RiZi00ZGJiLThmN2EtOTFiNDEwMzIxOGFhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HII wDANBgkqhkiG9w0BAQsFAAOCAQEAIhAgdB52zYeaW7z4YUWJAAtKPKpHPllkkd5M ah+x/PY0evxvsOlouXyNeFDjIr94Cwy+9xVmHYBmwAkHyNEqd5UNIOyAaYLboOaE JjgrfmBX5RQkN/oAISz05GUZ88/aivvbgaDg5G8dBehYExctQM5ZGXpnx4Q7fD0r JAu4FJmYN/hJf/gBrA/QK6tMAi3k7AhR/UMCcgOmu3NecLq5aj6gU9UK7ehI0+JR LictpPdl/7Pc2ext7vzqAxS8QSjPECzIVnQlXlt9pLgauykf7AE2PoEyVCx/WZ/X rB7yzYxV91iBPRi40kmmcBF4QPDSG7UhxwHiiMtkBwLItSfFSQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:07:13 2025 by rpki-client