This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa File: 0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa (raw, json) Hash identifier: aMscrGMC9VQU3NQx15uDWr3YAev/MLKCDqPEhYgzKqY= Subject key identifier: 5B:A8:FD:59:3D:D5:C1:71:CA:68:7F:75:A5:B8:CB:D7:85:96:82:FB Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 187AACCD88CA790604E35A8FEFCF852AB721FED2 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa Signing time: Wed 10 Dec 2025 05:40:48 +0000 ROA not before: Wed 10 Dec 2025 05:40:48 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7a:ac:cd:88:ca:79:06:04:e3:5a:8f:ef:cf:85:2a:b7:21:fe:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:40:48 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=883266d369dc271385721bdc37a58779d3fe507c9542124396dab8c3c1237152, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a7:e9:55:c7:f7:42:64:ab:0a:12:2e:da:ce: b7:1f:48:08:db:ce:0f:02:b9:ce:9e:43:0d:26:b6: 97:ef:1a:06:be:8f:ca:a9:b9:4b:22:f2:d2:3a:fb: 68:30:ec:e5:c5:16:dd:10:da:c7:ab:06:da:08:e1: ea:a8:97:3d:c2:a9:b2:4f:16:31:07:e6:9a:ed:9a: cd:4e:e4:53:ff:37:af:b3:54:52:de:ad:96:8d:86: cf:fc:09:ac:c8:e9:c6:c6:df:52:13:87:b9:cc:38: 15:c1:88:af:95:0d:f3:f2:81:05:61:ce:17:ee:18: d0:d4:a0:58:6b:28:f1:0c:47:35:61:e6:db:f3:b7: 6d:1e:3f:94:ca:32:52:b8:d4:40:61:69:2c:f6:db: fd:c1:7d:15:b5:98:b9:55:02:a6:08:58:f3:fb:f8: 86:30:7a:fb:2d:89:a5:c8:cd:ea:65:5e:b6:53:d1: 77:f6:24:aa:b1:3d:b0:7b:fd:01:21:20:09:7a:ab: 97:27:f5:d0:96:be:47:1d:4b:34:da:5c:e8:8e:5b: ca:40:92:f2:3d:77:7c:b6:c9:43:2d:51:68:30:d0: d6:1f:c6:ad:18:4b:99:5a:ba:ea:d3:f9:2b:c8:f1: 13:c6:79:5e:6d:cd:04:31:dc:0c:35:bd:52:94:2f: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A8:FD:59:3D:D5:C1:71:CA:68:7F:75:A5:B8:CB:D7:85:96:82:FB X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 38:1f:a7:42:d7:87:b3:53:fe:fc:c1:75:e2:81:58:36:26:ec: be:a7:70:83:e0:dc:db:49:49:01:b0:17:77:db:00:f1:8f:d3: a1:9a:8d:ff:d6:48:3d:3f:af:fe:f3:9f:cd:2c:43:7c:39:18: e4:d8:d1:b8:18:61:8f:8e:d7:ff:9f:56:df:3b:24:22:65:67: ca:c0:dc:c2:d2:55:73:83:75:c7:4a:e3:3f:37:27:47:8b:7c: 31:4b:50:56:35:53:d6:ba:a6:93:02:3d:33:6e:77:4e:a8:97: b4:cb:7d:ba:a2:4c:43:b1:3b:cf:00:40:1c:53:76:f3:d4:a7: 8f:99:02:e1:f3:8c:4c:93:76:a8:11:66:5f:62:5f:61:eb:96: 44:06:92:f4:74:26:b1:a9:43:1a:d7:b5:78:0e:f3:89:b7:17: c1:d7:04:c6:aa:76:b5:c2:5b:18:d8:07:44:b4:1f:87:76:6d: 24:d1:e2:b0:92:55:2a:e9:bb:89:d2:f8:32:e4:4f:0f:23:f8: 2f:7d:6f:62:6c:01:8c:c9:e0:ed:42:42:d5:05:7f:b7:ab:d7: 0c:0b:65:72:9a:8b:6b:ab:e5:66:1b:c6:12:e0:05:aa:67:b3: a3:19:fb:88:a4:8a:c4:27:e6:78:1e:03:72:dd:93:c7:74:a5: 2d:dc:42:8e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUGHqszYjKeQYE41qP78+FKrch/tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQwNDhaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDg4MzI2NmQzNjlkYzI3MTM4NTcyMWJkYzM3YTU4Nzc5ZDNmZTUwN2M5NTQy MTI0Mzk2ZGFiOGMzYzEyMzcxNTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOen6VXH90JkqwoSLtrOtx9ICNvODwK5zp5DDSa2l+8aBr6Pyqm5SyLy0jr7 aDDs5cUW3RDax6sG2gjh6qiXPcKpsk8WMQfmmu2azU7kU/83r7NUUt6tlo2Gz/wJ rMjpxsbfUhOHucw4FcGIr5UN8/KBBWHOF+4Y0NSgWGso8QxHNWHm2/O3bR4/lMoy UrjUQGFpLPbb/cF9FbWYuVUCpghY8/v4hjB6+y2JpcjN6mVetlPRd/YkqrE9sHv9 ASEgCXqrlyf10Ja+Rx1LNNpc6I5bykCS8j13fLbJQy1RaDDQ1h/GrRhLmVq66tP5 K8jxE8Z5Xm3NBDHcDDW9UpQvVeUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRbqP1Z PdXBccpof3WluMvXhZaC+zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MGIyZTMwOWUtZTlkNC00NTQ2LTg5NjktMmQ3YjRiOWQ1MTNmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEQ wDANBgkqhkiG9w0BAQsFAAOCAQEAOB+nQteHs1P+/MF14oFYNibsvqdwg+Dc20lJ AbAXd9sA8Y/ToZqN/9ZIPT+v/vOfzSxDfDkY5NjRuBhhj47X/59W3zskImVnysDc wtJVc4N1x0rjPzcnR4t8MUtQVjVT1rqmkwI9M253TqiXtMt9uqJMQ7E7zwBAHFN2 89Snj5kC4fOMTJN2qBFmX2JfYeuWRAaS9HQmsalDGte1eA7zibcXwdcExqp2tcJb GNgHRLQfh3ZtJNHisJJVKum7idL4MuRPDyP4L31vYmwBjMng7UJC1QV/t6vXDAtl cpqLa6vlZhvGEuAFqmezoxn7iKSKxCfmeB4Dct2Tx3SlLdxCjg== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:43 2026 by rpki-client