This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json) Hash identifier: YP5F6IptHImnUOJDbivrXG/jiTkLNyoGahazIdwlIbk= Subject key identifier: F5:AE:1B:43:B6:51:C8:5A:71:7A:9B:82:E0:31:17:84:EC:00:CC:0B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5E76EB980019C25ABD78A372AF877391C97089F9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa Signing time: Wed 10 Dec 2025 05:31:20 +0000 ROA not before: Wed 10 Dec 2025 05:31:20 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:76:eb:98:00:19:c2:5a:bd:78:a3:72:af:87:73:91:c9:70:89:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:20 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=9b2f18841117edfab33fff9b6d275e45b7bbb8ba8bb7ad54f0307d5b0f5e88da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:1e:13:5b:d6:a3:c7:45:d4:94:66:05:b6: ce:c1:6d:eb:4d:c7:44:a4:dc:67:e9:f5:45:d9:bc: 3c:a6:39:b3:9d:e4:2b:44:2e:bc:99:fb:83:ce:42: 36:89:bc:12:50:65:ec:c8:91:84:06:21:78:3f:d8: d7:c3:5b:ee:aa:cd:38:53:c7:3c:98:6f:88:60:a1: dd:50:0e:00:68:83:29:25:97:1a:14:49:45:fe:bd: f3:e3:66:4b:85:1f:17:49:57:88:73:b5:43:30:3d: 80:e3:4d:32:bc:ab:32:b9:f6:85:e9:ed:d3:f4:88: e8:12:a1:41:58:26:93:01:65:81:3f:2e:15:a1:f7: b5:e4:e5:a3:6a:c2:5b:c0:c4:04:ff:e7:c2:b6:d8: 88:98:de:79:8e:55:4f:eb:53:7f:37:b5:fb:0e:b8: ae:87:23:db:62:e8:83:17:b4:15:2d:19:20:a5:a9: 29:79:db:b0:44:f3:c7:5f:a5:fc:d5:a0:4e:e2:df: 02:31:c3:ec:48:87:3f:4f:94:0f:d8:9c:f6:0f:40: de:67:06:22:93:ab:08:05:5b:f4:4e:4f:38:ef:25: 07:1b:11:5e:b0:79:f9:e8:8e:f0:d8:f9:80:15:ef: 11:51:37:3e:97:c5:26:c4:54:30:73:b9:b2:d7:c5: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AE:1B:43:B6:51:C8:5A:71:7A:9B:82:E0:31:17:84:EC:00:CC:0B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:50c0::/48 Signature Algorithm: sha256WithRSAEncryption 86:77:d1:c3:b5:e4:cf:df:ac:e6:aa:e5:df:87:d8:2f:7a:02: f4:be:72:42:11:e3:eb:a2:42:4d:ce:e5:4e:b9:6b:7f:40:9b: 56:e2:32:8b:7c:ac:8b:49:12:de:ab:dc:54:15:4e:71:a3:80: 02:17:e2:c3:db:2f:23:e1:92:db:33:72:ac:4e:c7:1d:2d:16: ca:ea:01:0f:8d:e0:64:73:31:a0:71:cf:28:9c:b8:96:82:01: f2:2a:ea:a2:83:93:c0:6c:6f:dd:7b:1f:35:9d:11:9b:ec:06: 76:2b:5c:52:93:e8:12:6b:61:f6:5f:4e:5f:da:ac:e5:2e:e5: 2f:03:53:47:0c:b5:c5:7d:c5:2d:7c:f6:47:fd:6d:1b:94:d7: 6a:9c:1b:b2:20:50:81:11:a1:07:fe:d0:68:09:db:52:8b:b3: 4d:ba:b3:bb:23:3a:8d:5c:ba:1f:94:6b:10:e1:1b:8f:96:56: 99:f4:3f:84:67:c3:0b:15:45:0f:24:1b:11:ed:57:78:f6:99: 6b:f3:44:2a:c9:a0:fa:a1:9e:47:6c:af:5f:61:59:32:d6:4d: 7a:aa:f1:1b:db:98:39:e6:ad:46:00:de:af:f2:27:1d:c0:ca: 64:92:85:59:b8:b5:e8:8a:9b:df:71:6c:95:47:27:0b:25:99: a8:10:98:2b -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUXnbrmAAZwlq9eKNyr4dzkclwifkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMjBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDliMmYxODg0MTExN2VkZmFiMzNmZmY5YjZkMjc1ZTQ1YjdiYmI4YmE4YmI3 YWQ1NGYwMzA3ZDViMGY1ZTg4ZGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANC/HhNb1qPHRdSUZgW2zsFt603HRKTcZ+n1Rdm8PKY5s53kK0QuvJn7g85C Nom8ElBl7MiRhAYheD/Y18Nb7qrNOFPHPJhviGCh3VAOAGiDKSWXGhRJRf698+Nm S4UfF0lXiHO1QzA9gONNMryrMrn2hent0/SI6BKhQVgmkwFlgT8uFaH3teTlo2rC W8DEBP/nwrbYiJjeeY5VT+tTfze1+w64rocj22Logxe0FS0ZIKWpKXnbsETzx1+l /NWgTuLfAjHD7EiHP0+UD9ic9g9A3mcGIpOrCAVb9E5POO8lBxsRXrB5+eiO8Nj5 gBXvEVE3PpfFJsRUMHO5stfFni0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT1rhtD tlHIWnF6m4LgMReE7ADMCzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTdjMzYxYWEtOWQyMy00OGYxLTgyNTAtYmM3NzJmYTc3NzNhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFQ wDANBgkqhkiG9w0BAQsFAAOCAQEAhnfRw7Xkz9+s5qrl34fYL3oC9L5yQhHj66JC Tc7lTrlrf0CbVuIyi3ysi0kS3qvcVBVOcaOAAhfiw9svI+GS2zNyrE7HHS0WyuoB D43gZHMxoHHPKJy4loIB8irqooOTwGxv3XsfNZ0Rm+wGditcUpPoEmth9l9OX9qs 5S7lLwNTRwy1xX3FLXz2R/1tG5TXapwbsiBQgRGhB/7QaAnbUouzTbqzuyM6jVy6 H5RrEOEbj5ZWmfQ/hGfDCxVFDyQbEe1XePaZa/NEKsmg+qGeR2yvX2FZMtZNeqrx G9uYOeatRgDer/InHcDKZJKFWbi16Iqb33FslUcnCyWZqBCYKw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:31 2026 by rpki-client