This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa File: 1fb46240-1c3f-4b2f-9927-3470c9898890.roa (raw, json) Hash identifier: K5vUvsa+ehAtRdVoHnpKL5IdiMll47VgWahX3l0IzSs= Subject key identifier: 38:FA:08:18:43:AE:9B:57:6B:D0:17:0F:6F:42:5C:63:DB:AB:27:AB Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 01BBC69A594772C389FB3C5EDDA02BE5CFAE0759 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa Signing time: Wed 10 Dec 2025 06:10:45 +0000 ROA not before: Wed 10 Dec 2025 06:10:45 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bb:c6:9a:59:47:72:c3:89:fb:3c:5e:dd:a0:2b:e5:cf:ae:07:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:10:45 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=f7040e765f0e092269e210b2a9b6eabe252562113e870925a107a871a5d47ec6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b1:cd:b8:65:f0:8e:7e:64:7b:6b:28:46:0f: ee:76:b2:8d:ba:7d:3b:33:07:98:c1:36:51:24:63: fc:3a:41:ea:7a:23:38:0d:a1:43:d4:50:9e:fe:ff: ff:2d:57:f4:0a:93:d8:38:e1:cc:5f:03:2e:c2:16: de:7b:99:dd:06:76:f0:5a:b4:f9:58:c0:76:e2:3a: ba:11:2f:20:fb:5e:6d:b4:35:9f:c6:c9:09:28:5f: 3c:72:11:8a:2a:a1:2b:ca:8c:f0:e1:6a:e8:be:ca: b7:34:67:ea:d7:95:3e:8a:6c:e0:66:b6:a8:74:b5: 3d:89:f3:c2:f1:94:8a:26:af:92:3a:a7:51:d7:38: f9:33:e2:00:9b:14:17:fa:c1:fc:52:95:b2:84:0b: 0e:bd:c4:85:78:6a:02:2f:07:19:68:f0:f6:be:9e: ee:17:10:7e:df:8b:55:dc:ee:16:86:b7:99:3d:bb: e0:b6:8e:19:8e:79:87:6c:63:c6:d9:27:5e:b8:b2: 7a:46:e0:52:9d:db:15:c6:4f:70:d0:26:da:e5:05: c4:11:aa:97:dd:df:ee:ba:eb:f1:d9:81:e6:43:aa: bf:a0:11:dc:4a:c3:e1:d9:b6:2d:f4:b0:bf:8f:3d: b3:63:c7:0b:32:53:f8:d0:23:9a:d1:7b:d3:a3:e5: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FA:08:18:43:AE:9B:57:6B:D0:17:0F:6F:42:5C:63:DB:AB:27:AB X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 7e:1a:67:47:64:66:3a:c2:ca:00:c4:01:72:64:97:30:9b:d8: b7:e3:e9:7c:bb:a1:a0:17:e0:4b:70:2a:07:22:27:43:57:9f: 5d:f7:8d:a0:f1:05:ae:89:2b:9b:20:fe:ef:b1:21:ea:84:75: dc:b6:2d:3a:6c:a1:f0:7a:da:5f:37:55:55:15:1e:09:da:35: 72:46:a3:21:ac:96:26:a2:a4:2e:a1:78:81:73:6b:78:dd:fa: d9:4a:a8:7a:2a:a4:7c:e3:e3:0e:4f:ce:e2:a0:a0:c7:09:4e: d3:16:38:a9:38:22:b6:78:fe:6b:a4:d7:05:b1:9b:ec:5a:a8: da:ba:e9:41:a9:a3:12:04:e2:5a:e8:20:3c:e3:29:9a:eb:37: 9c:57:d3:24:77:bf:07:82:bb:40:21:44:12:d3:e0:fd:83:38: 0a:b6:0e:ed:ff:83:45:67:60:5e:b5:1f:bd:25:ba:2a:4c:26: 99:51:a8:4e:b4:d4:79:a6:02:bf:31:ca:ff:29:fc:b1:8e:fd: 58:0d:75:15:70:f6:c1:44:f1:b8:f7:e8:1d:ef:df:0f:84:ec: 0a:27:7e:a3:87:d2:2d:ec:ac:60:f9:94:fa:45:ea:0c:18:89: d6:2d:4a:90:1f:6f:d1:3a:af:bb:86:d2:50:b0:67:69:61:93: 4f:d9:41:07 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAbvGmllHcsOJ+zxe3aAr5c+uB1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjEwNDVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGY3MDQwZTc2NWYwZTA5MjI2OWUyMTBiMmE5YjZlYWJlMjUyNTYyMTEzZTg3 MDkyNWExMDdhODcxYTVkNDdlYzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWxzbhl8I5+ZHtrKEYP7nayjbp9OzMHmME2USRj/DpB6nojOA2hQ9RQnv7/ /y1X9AqT2DjhzF8DLsIW3nuZ3QZ28Fq0+VjAduI6uhEvIPtebbQ1n8bJCShfPHIR iiqhK8qM8OFq6L7KtzRn6teVPops4Ga2qHS1PYnzwvGUiiavkjqnUdc4+TPiAJsU F/rB/FKVsoQLDr3EhXhqAi8HGWjw9r6e7hcQft+LVdzuFoa3mT274LaOGY55h2xj xtknXriyekbgUp3bFcZPcNAm2uUFxBGql93f7rrr8dmB5kOqv6AR3ErD4dm2LfSw v489s2PHCzJT+NAjmtF706PljBECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ4+ggY Q66bV2vQFw9vQlxj26snqzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWZiNDYyNDAtMWMzZi00YjJmLTk5MjctMzQ3MGM5ODk4ODkwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A oDANBgkqhkiG9w0BAQsFAAOCAQEAfhpnR2RmOsLKAMQBcmSXMJvYt+PpfLuhoBfg S3AqByInQ1efXfeNoPEFrokrmyD+77Eh6oR13LYtOmyh8HraXzdVVRUeCdo1ckaj IayWJqKkLqF4gXNreN362UqoeiqkfOPjDk/O4qCgxwlO0xY4qTgitnj+a6TXBbGb 7Fqo2rrpQamjEgTiWuggPOMpmus3nFfTJHe/B4K7QCFEEtPg/YM4CrYO7f+DRWdg XrUfvSW6KkwmmVGoTrTUeaYCvzHK/yn8sY79WA11FXD2wUTxuPfoHe/fD4TsCid+ o4fSLeysYPmU+kXqDBiJ1i1KkB9v0Tqvu4bSULBnaWGTT9lBBw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:00 2026 by rpki-client