This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a64076-9adb-4301-817c-2be1c1e1d57e.roa File: 04a64076-9adb-4301-817c-2be1c1e1d57e.roa (raw, json) Hash identifier: bWJWWUFYFR5U2CeabIvOPbpyJd7dL7lKZyN/I8jiCrw= Subject key identifier: 60:B4:37:73:88:28:1F:DD:94:2B:9B:02:9F:EE:AC:36:5F:31:BB:4E Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5A094B7CE585646F58AED94FA6B9633FE0030B5F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a64076-9adb-4301-817c-2be1c1e1d57e.roa Signing time: Mon 08 Dec 2025 02:10:09 +0000 ROA not before: Mon 08 Dec 2025 02:10:09 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d071:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:09:4b:7c:e5:85:64:6f:58:ae:d9:4f:a6:b9:63:3f:e0:03:0b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:09 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=3c97b092af75d5ec37c4e6e2dc6dadbb72696175abfbe23291e5d069f8b90ad3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:33:15:49:29:74:4d:c9:9e:41:1d:6e:b6: b8:36:33:f3:7f:a4:0d:4a:e1:c0:9b:2b:1b:e4:7c: 37:39:76:22:49:3a:51:a3:4a:9f:1e:2f:85:da:b4: 60:a2:44:2b:35:dd:37:eb:80:e6:57:f0:20:d5:63: b5:ca:87:3e:9d:ce:fe:03:f5:d1:1f:7d:f6:ff:d0: 79:5e:eb:db:e0:83:94:bc:7a:c1:f8:80:0d:0f:ee: e7:c1:85:0a:59:60:66:bc:55:5a:5e:d9:cd:c7:16: 5e:5e:14:4a:99:11:2c:55:83:e1:11:4f:ff:00:d5: 96:f5:20:03:3b:bf:8d:17:8f:11:ca:c8:1a:7f:16: 5d:0b:da:1d:50:ab:f6:ba:cd:03:b1:f0:2d:bf:c7: 26:81:af:44:2e:96:1b:77:bf:4d:28:cc:8e:ff:91: 6b:72:e5:7b:6c:03:22:17:84:1b:6e:32:94:b5:cd: 33:6d:23:67:72:50:7c:d9:01:dd:e3:34:2e:57:64: 72:12:84:d0:64:41:e0:4f:8c:e4:f8:4b:26:85:d6: 8e:b9:8d:0b:9c:21:cf:fd:73:6f:8c:24:c4:fb:97: 5c:da:a1:bf:d7:92:74:21:46:3f:4e:02:67:ed:43: 17:f8:7f:c4:d5:e8:7b:5f:d0:16:46:98:bf:ef:12: 95:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:37:73:88:28:1F:DD:94:2B:9B:02:9F:EE:AC:36:5F:31:BB:4E X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a64076-9adb-4301-817c-2be1c1e1d57e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d071:800::/40 Signature Algorithm: sha256WithRSAEncryption 34:1c:0b:1c:9b:5e:58:0d:6f:53:dc:42:2e:42:ed:d6:60:64: b0:29:c8:2e:87:49:d1:d6:64:1f:f1:00:74:92:a5:6e:49:dc: 26:91:63:31:77:2a:a5:dc:c9:c0:d1:dc:c6:ed:eb:78:8c:2d: 39:82:21:4c:cb:d6:7e:49:7f:c4:85:0e:72:f7:b0:68:91:d3: 19:31:55:3a:11:c0:49:b5:63:6f:85:ba:e6:bc:52:20:2b:41: 57:ea:c1:ec:b1:01:f3:73:3d:0f:8b:cc:7f:7a:de:67:67:68: 3c:e7:4a:02:50:34:38:94:b0:23:66:b6:40:8e:78:a5:7f:27: d3:c9:49:7b:24:41:3b:f2:ed:56:b8:bf:52:a3:79:52:c7:20: ab:47:48:3a:01:5b:25:c6:98:df:e8:86:a4:b5:11:6f:8c:10: c6:4f:4b:f8:31:a9:42:a9:9e:09:2e:38:29:73:fe:b8:ec:be: 62:7c:90:c1:f6:6f:04:38:54:97:f8:64:9a:54:61:33:19:40: b1:81:a5:ec:d9:44:3b:d8:20:d2:b9:56:24:40:c5:d6:36:38: 11:b9:17:47:cf:57:44:77:b3:3e:5d:af:37:42:99:fe:3d:29: f3:64:21:ab:41:c0:1d:1c:ea:f1:55:1b:06:c1:97:1e:f7:4f: 78:23:84:fb -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUWglLfOWFZG9YrtlPprljP+ADC18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMDlaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDNjOTdiMDkyYWY3NWQ1ZWMzN2M0ZTZlMmRjNmRhZGJiNzI2OTYxNzVhYmZi ZTIzMjkxZTVkMDY5ZjhiOTBhZDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANITMxVJKXRNyZ5BHW62uDYz83+kDUrhwJsrG+R8Nzl2Ikk6UaNKnx4vhdq0 YKJEKzXdN+uA5lfwINVjtcqHPp3O/gP10R999v/QeV7r2+CDlLx6wfiADQ/u58GF CllgZrxVWl7ZzccWXl4USpkRLFWD4RFP/wDVlvUgAzu/jRePEcrIGn8WXQvaHVCr 9rrNA7HwLb/HJoGvRC6WG3e/TSjMjv+Ra3Lle2wDIheEG24ylLXNM20jZ3JQfNkB 3eM0LldkchKE0GRB4E+M5PhLJoXWjrmNC5whz/1zb4wkxPuXXNqhv9eSdCFGP04C Z+1DF/h/xNXoe1/QFkaYv+8Slf8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRgtDdz iCgf3ZQrmwKf7qw2XzG7TjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDRhNjQwNzYtOWFkYi00MzAxLTgxN2MtMmJlMWMxZTFkNTdlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HEI MA0GCSqGSIb3DQEBCwUAA4IBAQA0HAscm15YDW9T3EIuQu3WYGSwKcguh0nR1mQf 8QB0kqVuSdwmkWMxdyql3MnA0dzG7et4jC05giFMy9Z+SX/EhQ5y97BokdMZMVU6 EcBJtWNvhbrmvFIgK0FX6sHssQHzcz0Pi8x/et5nZ2g850oCUDQ4lLAjZrZAjnil fyfTyUl7JEE78u1WuL9So3lSxyCrR0g6AVslxpjf6IaktRFvjBDGT0v4MalCqZ4J Ljgpc/647L5ifJDB9m8EOFSX+GSaVGEzGUCxgaXs2UQ72CDSuVYkQMXWNjgRuRdH z1dEd7M+Xa83Qpn+PSnzZCGrQcAdHOrxVRsGwZce9094I4T7 -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:32 2025 by rpki-client