This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa File: 10e25f26-1142-4a43-8091-69f9ddd435c1.roa (raw, json) Hash identifier: vOSzMT22dz+h3Fp/J/ICAHLPizZlHFG+G6bBkrVxmTk= Subject key identifier: 72:71:7B:94:F9:03:B1:49:B9:BB:60:7A:7C:03:BE:18:60:5C:95:D8 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 42F1188F7F43E284D3CA07AA6669A408666E787E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa Signing time: Wed 10 Dec 2025 06:21:01 +0000 ROA not before: Wed 10 Dec 2025 06:21:01 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d075:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f1:18:8f:7f:43:e2:84:d3:ca:07:aa:66:69:a4:08:66:6e:78:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:21:01 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=c9d5a6bc1ace901877eb62ff83a07e3be8e0e7011b03a069820bdbfab6147c61, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:25:a1:cf:ef:9f:e5:4f:94:f8:d1:bc:93: af:21:6c:85:01:47:d3:62:22:1d:be:68:d3:0b:9b: de:a1:9f:9f:1e:69:9b:c5:6f:a6:90:5e:b6:4c:15: 5d:c1:a6:39:f9:2d:61:df:83:a4:d5:e0:f9:ca:8d: 53:92:43:9d:ee:05:d0:c1:46:d4:af:4a:73:75:f6: 8f:e1:df:7d:02:fa:4e:6e:cf:81:6c:b2:38:65:ae: d4:5e:bf:91:88:e4:35:4a:bb:91:c5:22:5e:4a:85: 46:31:de:cc:b7:d5:ea:13:e4:35:2e:03:fc:dc:c5: 41:48:de:9e:a9:61:60:6d:20:df:31:92:7a:f5:1c: 0f:be:0a:bf:a4:13:76:ca:d2:cb:af:59:8a:e7:b4: 5f:92:d9:59:ac:e9:e1:fe:1c:79:d3:d9:f7:27:cf: ed:48:dc:80:d3:88:ad:f0:db:81:0c:60:f7:d6:d8: 29:ae:f9:dd:6e:15:59:5d:6b:b8:bb:dc:0e:25:aa: f0:48:62:77:2b:e0:ae:4a:48:3e:c9:1f:05:19:fd: 16:07:bf:34:a8:2e:ee:5d:42:cc:72:3f:d0:97:7d: 7f:e9:cb:e9:b4:a9:2a:29:8f:b6:a0:f4:d9:6c:1f: 30:b7:b0:db:eb:39:29:19:6a:d1:a0:77:3d:0c:df: f4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:7B:94:F9:03:B1:49:B9:BB:60:7A:7C:03:BE:18:60:5C:95:D8 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d075:1000::/40 Signature Algorithm: sha256WithRSAEncryption 06:fd:5b:e7:36:1f:61:2b:d8:e0:1b:51:b2:6e:bb:75:b2:a1: f2:13:ad:a0:30:2f:4c:08:5a:48:e0:50:95:a6:70:30:9e:6e: 01:13:f5:3b:cc:59:c5:87:84:25:25:25:9d:0a:e3:5c:19:e7: 11:d5:f2:4f:0d:60:ec:33:bb:47:0c:84:75:28:1c:5f:75:97: 30:97:86:30:b1:ee:91:57:b7:71:32:ee:e6:a5:5e:2b:ba:8a: 12:37:8c:91:c8:b7:96:3b:d2:d0:12:3f:a2:ca:bc:7f:7f:c8: 28:ad:a9:8f:df:84:73:47:a3:ab:21:13:3c:52:82:0a:9a:ef: 64:f8:4e:dc:f7:e4:73:eb:25:6f:36:10:a4:8f:d2:e4:ba:c0: 9b:4b:e1:cb:c6:6b:e3:2b:17:2e:67:ca:9d:ee:9a:4f:80:ff: 28:31:ef:20:b1:45:8f:6a:6f:77:0a:c9:93:98:4e:cf:a1:b4: eb:e9:d6:01:d0:3d:99:a2:3e:02:6b:a4:a1:f5:e6:97:cc:b7: 7b:b8:25:00:40:b7:0c:ba:23:02:3b:40:9d:c0:c5:4f:78:f0: c1:36:87:c8:d3:f4:26:1a:54:15:05:ff:e6:a8:c5:6f:37:8b: 63:43:fc:a7:03:a4:93:fa:d8:66:f4:a0:3a:d6:14:9f:10:0d: 60:27:fc:4a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQvEYj39D4oTTygeqZmmkCGZueH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIxMDFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGM5ZDVhNmJjMWFjZTkwMTg3N2ViNjJmZjgzYTA3ZTNiZThlMGU3MDExYjAz YTA2OTgyMGJkYmZhYjYxNDdjNjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKB1JaHP75/lT5T40byTryFshQFH02IiHb5o0wub3qGfnx5pm8VvppBetkwV XcGmOfktYd+DpNXg+cqNU5JDne4F0MFG1K9Kc3X2j+HffQL6Tm7PgWyyOGWu1F6/ kYjkNUq7kcUiXkqFRjHezLfV6hPkNS4D/NzFQUjenqlhYG0g3zGSevUcD74Kv6QT dsrSy69Ziue0X5LZWazp4f4cedPZ9yfP7UjcgNOIrfDbgQxg99bYKa753W4VWV1r uLvcDiWq8EhidyvgrkpIPskfBRn9Fge/NKgu7l1CzHI/0Jd9f+nL6bSpKimPtqD0 2WwfMLew2+s5KRlq0aB3PQzf9KcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRycXuU +QOxSbm7YHp8A74YYFyV2DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTBlMjVmMjYtMTE0Mi00YTQzLTgwOTEtNjlmOWRkZDQzNWMxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HUQ MA0GCSqGSIb3DQEBCwUAA4IBAQAG/VvnNh9hK9jgG1Gybrt1sqHyE62gMC9MCFpI 4FCVpnAwnm4BE/U7zFnFh4QlJSWdCuNcGecR1fJPDWDsM7tHDIR1KBxfdZcwl4Yw se6RV7dxMu7mpV4ruooSN4yRyLeWO9LQEj+iyrx/f8goramP34RzR6OrIRM8UoIK mu9k+E7c9+Rz6yVvNhCkj9LkusCbS+HLxmvjKxcuZ8qd7ppPgP8oMe8gsUWPam93 CsmTmE7PobTr6dYB0D2Zoj4Ca6Sh9eaXzLd7uCUAQLcMuiMCO0CdwMVPePDBNofI 0/QmGlQVBf/mqMVvN4tjQ/ynA6ST+thm9KA61hSfEA1gJ/xK -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:43 2025 by rpki-client