This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa File: 14c60b75-8947-47da-9c6d-7045cbbbea55.roa (raw, json) Hash identifier: HVj4Qpmv2g+9XIpGEGVbkS9oPE6AziUUOxBs7AD8XzU= Subject key identifier: B6:62:A3:02:33:7F:1E:29:46:4A:96:2D:29:4D:2F:AD:2A:1A:B3:29 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 74B33B43FCE837459285BB0BD60A6994DAD12305 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa Signing time: Wed 10 Dec 2025 05:30:09 +0000 ROA not before: Wed 10 Dec 2025 05:30:09 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06f:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b3:3b:43:fc:e8:37:45:92:85:bb:0b:d6:0a:69:94:da:d1:23:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:30:09 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=ecba258df10a368cbd01816bcc4d7aed4dff33059afdcc191c627cf098e94372, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:04:b6:59:48:3f:0c:28:9a:dc:9f:d4:91: 4e:ec:55:f2:89:9e:1e:6b:70:56:5e:b3:bc:da:0f: 37:ae:45:64:f3:10:c5:1b:0b:a4:da:65:cc:16:d0: 69:34:1d:98:dd:49:0d:74:4c:e6:39:92:e1:ed:f8: e3:89:16:2a:25:bd:51:d7:ad:62:75:63:e1:d5:4e: 6c:0c:88:53:97:19:94:f8:c9:19:1c:b7:45:3a:1e: 0f:a3:d8:ed:65:60:b4:2f:69:75:67:09:8f:14:0d: bd:1e:f3:c0:8b:de:e7:e3:f3:5a:85:f3:63:07:0c: 6c:f1:7b:cb:fc:f5:44:43:cc:02:84:0f:7a:b2:fe: 4b:e4:34:b1:94:93:32:ad:b4:d8:8a:6d:99:9d:50: 07:08:05:1f:7b:7e:fb:74:02:80:e3:2e:aa:6a:f6: 96:a4:8e:53:b6:bf:df:a2:bf:55:31:ef:62:44:3f: 2d:7e:13:40:b9:02:57:81:22:d6:84:b0:66:3a:2a: 35:c3:bb:67:ba:6f:e3:fb:c6:b9:19:a2:56:68:bd: d5:25:93:69:2c:2c:6d:7a:43:61:f5:4a:ea:5d:ea: a3:0f:97:73:80:6a:ff:65:71:36:a1:01:3e:f4:39: 3d:d8:5a:01:47:42:7e:d5:f3:66:a2:d2:32:d0:78: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:62:A3:02:33:7F:1E:29:46:4A:96:2D:29:4D:2F:AD:2A:1A:B3:29 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c60b75-8947-47da-9c6d-7045cbbbea55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:1000::/40 Signature Algorithm: sha256WithRSAEncryption be:05:81:a9:f4:65:5a:d7:4f:4e:54:1a:ec:1d:4d:16:34:15: 24:1e:a7:83:ef:4e:7e:da:83:e9:81:9f:5b:70:4c:45:18:1b: 8a:82:17:db:19:64:5c:80:ca:0b:cc:73:23:db:a6:15:be:af: 84:86:b9:9b:18:2b:2f:27:4e:6f:39:a9:54:a4:41:21:70:59: 8f:12:5b:98:29:61:ed:18:b9:7c:15:58:7a:31:7f:cd:a0:62: bd:e4:a2:73:85:6b:2e:c1:27:b5:96:89:d0:13:bd:51:b3:0e: d8:13:48:3e:08:55:c7:57:b4:0a:97:5a:5d:99:17:65:8a:a2: dc:16:e7:b3:4c:7f:0a:ba:ff:43:38:4b:fe:79:68:0e:6c:c0: 13:76:1d:b4:c7:12:b0:16:b5:1f:da:eb:88:c6:e6:84:6f:8a: ee:65:56:c2:8a:3d:26:48:00:a2:c1:a3:ab:65:56:57:dc:bb: 93:36:65:1a:24:34:d5:a8:e0:c1:73:60:85:22:47:dd:b6:e4: 8a:15:21:d9:d3:3d:df:50:c0:f4:cf:5e:b9:bd:7c:10:85:b0: be:92:0b:8a:76:a3:5d:48:3e:2c:28:f9:cf:cf:6b:27:5f:93: b3:f4:bd:7e:7e:bd:d8:2b:d8:9f:65:fd:34:62:3f:0c:3b:0d: 24:51:65:bf -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUdLM7Q/zoN0WShbsL1gpplNrRIwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMwMDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGVjYmEyNThkZjEwYTM2OGNiZDAxODE2YmNjNGQ3YWVkNGRmZjMzMDU5YWZk Y2MxOTFjNjI3Y2YwOThlOTQzNzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJW7BLZZSD8MKJrcn9SRTuxV8omeHmtwVl6zvNoPN65FZPMQxRsLpNplzBbQ aTQdmN1JDXRM5jmS4e3444kWKiW9UdetYnVj4dVObAyIU5cZlPjJGRy3RToeD6PY 7WVgtC9pdWcJjxQNvR7zwIve5+PzWoXzYwcMbPF7y/z1REPMAoQPerL+S+Q0sZST Mq202IptmZ1QBwgFH3t++3QCgOMuqmr2lqSOU7a/36K/VTHvYkQ/LX4TQLkCV4Ei 1oSwZjoqNcO7Z7pv4/vGuRmiVmi91SWTaSwsbXpDYfVK6l3qow+Xc4Bq/2VxNqEB PvQ5PdhaAUdCftXzZqLSMtB4FAcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS2YqMC M38eKUZKli0pTS+tKhqzKTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTRjNjBiNzUtODk0Ny00N2RhLTljNmQtNzA0NWNiYmJlYTU1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G8Q MA0GCSqGSIb3DQEBCwUAA4IBAQC+BYGp9GVa109OVBrsHU0WNBUkHqeD705+2oPp gZ9bcExFGBuKghfbGWRcgMoLzHMj26YVvq+EhrmbGCsvJ05vOalUpEEhcFmPEluY KWHtGLl8FVh6MX/NoGK95KJzhWsuwSe1lonQE71Rsw7YE0g+CFXHV7QKl1pdmRdl iqLcFuezTH8Kuv9DOEv+eWgObMATdh20xxKwFrUf2uuIxuaEb4ruZVbCij0mSACi waOrZVZX3LuTNmUaJDTVqODBc2CFIkfdtuSKFSHZ0z3fUMD0z165vXwQhbC+kguK dqNdSD4sKPnPz2snX5Oz9L1+fr3YK9ifZf00Yj8MOw0kUWW/ -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:18 2026 by rpki-client