This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a732efb-e23f-49a4-ad51-1a43431e07c9.roa File: 9a732efb-e23f-49a4-ad51-1a43431e07c9.roa (raw, json) Hash identifier: O7vdsDBGESWszfpTJW5ahljkkO9iJZNPufeT6lMvskk= Subject key identifier: 8E:B6:F5:03:9F:FC:F2:68:37:79:C5:9D:21:FF:D7:0D:ED:53:13:D1 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: DC25A8D5291CBA366945E6CCBE1F3904534A92 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a732efb-e23f-49a4-ad51-1a43431e07c9.roa Signing time: Wed 10 Dec 2025 06:30:46 +0000 ROA not before: Wed 10 Dec 2025 06:30:46 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d034:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: dc:25:a8:d5:29:1c:ba:36:69:45:e6:cc:be:1f:39:04:53:4a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:30:46 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a1ae0ea918970be87bc4a9d4ccdc5a6aa92f2d548af6a74604d6215bc9bba4c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:3e:5b:fe:b8:7e:7e:fe:43:39:af:69:68: 06:73:6a:1a:35:c9:a9:18:3f:4b:86:bc:ca:cc:ce: 56:bb:08:93:f7:49:91:a6:c5:38:ba:66:f9:64:de: d7:eb:f0:51:e6:68:df:ee:f2:d7:7e:ea:cc:e4:62: 25:24:c5:6c:1e:93:90:20:48:86:7f:4a:9a:af:e8: fd:45:28:45:17:d0:84:5b:4e:37:43:08:c4:f7:5c: 6a:c6:30:23:53:da:f1:99:69:25:4b:70:80:7c:69: f3:23:19:77:b4:79:1a:6b:02:e3:9d:00:c8:c7:b3: bc:7a:a0:7b:3d:83:ec:a5:b1:5a:f9:53:0a:79:70: f8:ac:65:6b:c7:21:9e:56:cd:0a:61:22:19:ce:57: 18:06:c0:3b:04:93:e8:b9:83:e1:a4:49:9f:0d:6d: 44:48:95:04:30:c7:c2:90:6c:35:81:84:88:67:82: 4a:c0:41:fd:8f:01:30:3e:e8:67:29:86:30:af:df: 1f:00:0c:d9:27:89:7d:61:04:25:32:dd:35:03:95: ca:34:3f:bc:8d:30:84:d8:f2:7a:ef:b6:a5:1c:9e: 84:e9:62:af:7d:ac:6f:38:a9:a8:2a:d3:69:d9:ae: f5:95:e0:21:ac:f5:7e:26:8b:df:1d:57:a8:6e:95: 98:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:F5:03:9F:FC:F2:68:37:79:C5:9D:21:FF:D7:0D:ED:53:13:D1 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a732efb-e23f-49a4-ad51-1a43431e07c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d034:9000::/40 Signature Algorithm: sha256WithRSAEncryption aa:53:82:1e:14:93:75:7e:56:51:47:8f:ac:09:89:da:5e:61: 86:05:ce:9b:21:ca:ff:6c:f2:de:b2:e9:c1:f6:4a:31:a9:ca: 41:f7:1a:98:87:bf:ab:38:0b:a1:9f:ad:d3:86:16:56:15:19: a8:d5:a9:6c:dc:1d:96:a2:22:1c:f8:1f:a1:99:80:89:4e:73: 75:ae:30:b3:71:8c:c9:1f:a7:ba:66:a9:2a:c3:2f:7b:bc:3a: 18:a0:66:31:ac:c5:5a:a3:26:4b:23:70:1b:ef:13:5b:db:ca: 97:e8:37:b4:6c:78:52:2c:ca:ea:71:c1:66:7c:10:2f:53:d1: 32:f5:c6:9e:be:17:e5:5b:70:29:43:ad:fd:d3:ca:8a:85:d7: 15:72:69:01:73:9b:50:94:c3:54:99:e5:6f:2f:c8:64:f7:2c: 61:15:bd:5c:32:ee:3a:73:66:ea:06:2f:78:44:a1:3a:cc:27: ca:32:3e:f1:06:76:42:70:24:97:16:89:2e:35:ec:ce:cd:bd: 44:84:d6:49:95:87:a9:28:70:5a:87:12:8e:79:df:54:10:db: df:fb:1e:90:74:5c:d9:2c:e8:98:22:64:0d:f3:4c:68:5d:26: d7:b5:66:95:4e:97:08:eb:de:c7:e5:d9:f8:1f:4d:38:e8:02: 16:3e:93:b4 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUANwlqNUpHLo2aUXmzL4fOQRTSpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMwNDZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGExYWUwZWE5MTg5NzBiZTg3YmM0YTlkNGNjZGM1YTZhYTkyZjJkNTQ4YWY2 YTc0NjA0ZDYyMTViYzliYmE0YzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLEPlv+uH5+/kM5r2loBnNqGjXJqRg/S4a8yszOVrsIk/dJkabFOLpm+WTe 1+vwUeZo3+7y137qzORiJSTFbB6TkCBIhn9Kmq/o/UUoRRfQhFtON0MIxPdcasYw I1Pa8ZlpJUtwgHxp8yMZd7R5GmsC450AyMezvHqgez2D7KWxWvlTCnlw+Kxla8ch nlbNCmEiGc5XGAbAOwST6LmD4aRJnw1tREiVBDDHwpBsNYGEiGeCSsBB/Y8BMD7o ZymGMK/fHwAM2SeJfWEEJTLdNQOVyjQ/vI0whNjyeu+2pRyehOlir32sbzipqCrT admu9ZXgIaz1fiaL3x1XqG6VmAsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSOtvUD n/zyaDd5xZ0h/9cN7VMT0TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWE3MzJlZmItZTIzZi00OWE0LWFkNTEtMWE0MzQzMWUwN2M5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DSQ MA0GCSqGSIb3DQEBCwUAA4IBAQCqU4IeFJN1flZRR4+sCYnaXmGGBc6bIcr/bPLe sunB9koxqcpB9xqYh7+rOAuhn63ThhZWFRmo1als3B2WoiIc+B+hmYCJTnN1rjCz cYzJH6e6Zqkqwy97vDoYoGYxrMVaoyZLI3Ab7xNb28qX6De0bHhSLMrqccFmfBAv U9Ey9caevhflW3ApQ63908qKhdcVcmkBc5tQlMNUmeVvL8hk9yxhFb1cMu46c2bq Bi94RKE6zCfKMj7xBnZCcCSXFokuNezOzb1EhNZJlYepKHBahxKOed9UENvf+x6Q dFzZLOiYImQN80xoXSbXtWaVTpcI697H5dn4H0046AIWPpO0 -----END CERTIFICATE-----Generated at Sun Dec 14 00:00:37 2025 by rpki-client