This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json) Hash identifier: vGfbRiNCo0q23GDT0ZyMqqbXQ4g8Ld2XCp16L+c8Lo0= Subject key identifier: 37:18:18:E0:FA:8F:9F:60:05:12:2B:A8:79:1A:41:24:4C:1B:C8:F6 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 79B277C12D8F9CF5667A18FEC67C72DEE42CE474 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa Signing time: Wed 10 Dec 2025 05:20:27 +0000 ROA not before: Wed 10 Dec 2025 05:20:27 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:80b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b2:77:c1:2d:8f:9c:f5:66:7a:18:fe:c6:7c:72:de:e4:2c:e4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:20:27 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=fae27a130f4f42cde96dd9d8cada0a8cdebe7aca229a7e27a4238d9d75778656, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:7d:25:44:5a:60:36:77:d9:6c:32:b4:ac: 8b:08:43:37:c0:70:12:40:18:34:b2:3c:fa:e9:c9: da:92:db:7c:d4:fc:55:bd:36:67:ef:d0:e6:1a:13: 2f:cc:37:6a:32:9e:86:53:50:ec:79:9e:4b:90:1a: cc:05:f6:ff:d1:3a:03:44:3b:1e:62:3a:bb:bc:9e: 80:d6:3e:ce:6b:a0:af:7b:e6:4b:db:fd:78:97:4b: 97:4d:bc:55:29:37:76:69:b4:20:ce:e4:83:46:ef: 7f:ff:bc:be:57:7d:3f:54:39:94:28:75:64:f0:64: 58:a7:1c:cd:2e:78:57:ed:8e:a8:d6:f2:70:68:53: 9d:b4:9f:ac:ef:a4:fa:ae:2c:1a:d0:19:e6:7b:b4: af:f6:15:2b:11:55:ca:7d:71:38:7e:78:a5:f9:05: 1a:3f:b1:98:30:e4:d5:71:97:81:1d:36:25:64:8f: b9:67:be:60:cb:47:64:b5:8a:b6:08:4a:e5:4a:0e: a6:23:4d:0b:ab:36:f7:b2:61:cd:25:1f:64:60:32: da:f2:f1:86:e0:a8:6d:08:d8:d9:fa:53:86:95:bd: 0a:29:f0:28:1b:6a:79:eb:62:7e:0f:9c:25:95:73: 19:a7:c5:c8:47:68:02:42:70:9b:50:69:e0:64:b3: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:18:18:E0:FA:8F:9F:60:05:12:2B:A8:79:1A:41:24:4C:1B:C8:F6 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:80b0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:d6:25:da:2a:5f:da:09:51:6c:c4:f1:8e:66:a0:aa:4a:10: 78:5f:76:9e:95:cd:8f:c7:3a:6e:65:33:99:e3:d0:96:03:cb: 88:cf:f6:6e:f2:3b:f2:96:ec:d5:b5:a6:df:6d:d3:33:fe:c7: e2:6a:d1:f9:0d:e2:94:20:ab:02:ea:30:53:72:51:99:4f:fc: c5:74:db:09:c1:f7:ef:77:a2:bf:87:c3:b9:c9:82:47:41:01: c4:3b:53:47:cb:cd:aa:7a:69:b8:e0:e9:8a:0f:25:6b:e4:f3: 03:fe:90:d0:49:0f:40:01:f8:0f:21:77:42:7f:2b:3c:ea:60: 33:83:92:50:3a:2d:02:77:60:19:f7:ec:66:a3:52:43:bc:e7: 62:9b:70:8b:d9:03:12:fa:f3:b3:8a:e4:81:2f:ab:db:80:07: 66:35:e3:26:59:86:bc:fa:04:d3:5d:08:83:c1:cc:bf:9f:a6: a0:e6:cc:bd:a1:16:23:2c:a4:6b:78:5e:d2:61:7b:3e:73:f6: bb:77:69:37:2a:ce:49:15:6c:86:52:e7:73:f1:db:c8:ef:5a: c2:ae:73:62:64:27:09:a9:4e:68:91:f8:8a:68:ef:f3:5f:ad: 26:d7:c9:a1:1f:63:05:ce:78:dd:9a:53:cb:98:7d:12:c0:cb: c0:fe:8d:0b -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUebJ3wS2PnPVmehj+xnxy3uQs5HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTIwMjdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGZhZTI3YTEzMGY0ZjQyY2RlOTZkZDlkOGNhZGEwYThjZGViZTdhY2EyMjlh N2UyN2E0MjM4ZDlkNzU3Nzg2NTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4OfSVEWmA2d9lsMrSsiwhDN8BwEkAYNLI8+unJ2pLbfNT8Vb02Z+/Q5hoT L8w3ajKehlNQ7HmeS5AazAX2/9E6A0Q7HmI6u7yegNY+zmugr3vmS9v9eJdLl028 VSk3dmm0IM7kg0bvf/+8vld9P1Q5lCh1ZPBkWKcczS54V+2OqNbycGhTnbSfrO+k +q4sGtAZ5nu0r/YVKxFVyn1xOH54pfkFGj+xmDDk1XGXgR02JWSPuWe+YMtHZLWK tghK5UoOpiNNC6s297JhzSUfZGAy2vLxhuCobQjY2fpThpW9CinwKBtqeetifg+c JZVzGafFyEdoAkJwm1Bp4GSzyusCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ3GBjg +o+fYAUSK6h5GkEkTBvI9jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTJmYTAwOTQtMzcyMS00YTYxLWE3MmYtOGNkZWZmNWU1ZjM3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA sDANBgkqhkiG9w0BAQsFAAOCAQEAX9Yl2ipf2glRbMTxjmagqkoQeF92npXNj8c6 bmUzmePQlgPLiM/2bvI78pbs1bWm323TM/7H4mrR+Q3ilCCrAuowU3JRmU/8xXTb CcH373eiv4fDucmCR0EBxDtTR8vNqnppuODpig8la+TzA/6Q0EkPQAH4DyF3Qn8r POpgM4OSUDotAndgGffsZqNSQ7znYptwi9kDEvrzs4rkgS+r24AHZjXjJlmGvPoE 010Ig8HMv5+moObMvaEWIyyka3he0mF7PnP2u3dpNyrOSRVshlLnc/HbyO9awq5z YmQnCalOaJH4imjv81+tJtfJoR9jBc543ZpTy5h9EsDLwP6NCw== -----END CERTIFICATE-----Generated at Fri Jan 2 12:22:20 2026 by rpki-client