This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa File: 29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa (raw, json) Hash identifier: 2G2a+JRDoz3kxHQtwHXrSZ5d0equ0ysWHdKUapEaHnY= Subject key identifier: E9:9B:09:A0:41:07:80:06:C9:AC:E9:FE:39:43:D8:3E:3F:08:F5:32 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0E66EAFF254E093FD1DC6813557A676170DF5809 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa Signing time: Wed 10 Dec 2025 05:31:25 +0000 ROA not before: Wed 10 Dec 2025 05:31:25 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:8030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:66:ea:ff:25:4e:09:3f:d1:dc:68:13:55:7a:67:61:70:df:58:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:25 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=f2caf994ff2541f9684c959ffdefa2f48ee00b74c73dbe28338442a8963fc41b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a2:8c:f2:8a:c8:99:2c:ba:e6:16:e2:e7:cc: 42:99:15:b5:27:51:d3:3d:52:d3:21:55:7d:d1:b5: 72:4f:65:39:34:5e:72:30:71:fc:4d:6e:6b:01:f8: bd:6c:43:fc:e5:86:a9:9e:da:7b:36:59:5d:cf:3d: eb:be:63:dd:31:9c:6a:a3:cd:29:61:52:af:aa:b9: 87:bc:41:d8:3f:2a:74:eb:00:a5:75:ec:76:35:46: bf:b1:f9:28:70:18:e7:a6:ae:7b:a6:95:40:77:8a: 90:41:f5:59:80:6a:e3:b2:44:d2:cf:99:13:98:42: 75:d2:49:22:bb:d4:0d:70:f9:82:56:a8:74:62:f5: 28:24:a3:b4:c4:ed:df:eb:3e:27:74:80:69:75:67: 23:8c:2d:88:5e:81:50:b8:d0:38:2a:a4:38:f7:9b: be:7e:5d:65:34:ed:d5:99:56:45:b1:90:20:c2:89: f8:73:f5:0a:1b:9d:03:98:ea:d6:cd:56:74:95:a8: 23:c2:ce:8b:97:5c:ff:43:6a:a2:a5:17:78:d2:b2: c3:5f:d8:3e:fc:99:f3:34:39:ca:0b:68:cf:db:4b: 2e:d5:35:ca:62:f2:17:62:15:01:2a:4c:87:a4:0e: b4:0d:13:37:a6:b0:cb:41:d5:48:29:db:cc:39:84: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9B:09:A0:41:07:80:06:C9:AC:E9:FE:39:43:D8:3E:3F:08:F5:32 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:8030::/48 Signature Algorithm: sha256WithRSAEncryption 51:24:5c:78:1a:e5:db:ce:bb:33:cd:e1:06:bd:23:ab:e1:f6: 72:b5:24:c4:60:02:f2:45:fa:d0:b7:fe:3a:14:7a:7f:6e:7e: 87:65:cd:23:bc:0c:2b:4b:d9:d8:d9:d1:b1:64:8f:df:27:ec: 0b:84:3e:d1:82:a1:39:7b:8d:17:b8:e3:bf:a7:aa:f2:0f:03: 3e:35:c0:12:e9:64:ef:6d:41:b1:96:c8:0a:e2:37:f5:2b:7e: 08:6a:46:92:8b:a9:2f:44:1d:20:b1:84:db:b8:93:cf:56:bd: 18:0a:d5:7a:74:58:0a:7c:f2:c1:70:cb:b8:e0:7b:01:22:c2: 54:ba:48:e1:e8:74:71:40:b5:76:7a:b8:67:a0:e5:99:28:c9: ed:a5:79:2a:5c:57:b7:20:62:8a:5b:53:9c:76:fd:fb:e2:36: 92:45:88:d8:1e:90:26:61:63:f8:e5:b9:15:f6:6f:19:72:aa: 92:66:e8:ac:eb:b2:50:a6:e6:7d:16:88:61:5c:8d:fd:26:a4: 64:99:11:43:a2:e9:13:35:2a:dc:a5:8b:14:b7:a0:14:b7:55: 9b:9d:fa:bc:f9:50:a8:90:10:40:8f:eb:27:db:f9:1e:8c:d5: 3f:eb:49:17:98:f6:5e:77:78:81:0d:ea:f0:7b:48:98:b4:37: 66:5d:8c:94 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUDmbq/yVOCT/R3GgTVXpnYXDfWAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMjVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGYyY2FmOTk0ZmYyNTQxZjk2ODRjOTU5ZmZkZWZhMmY0OGVlMDBiNzRjNzNk YmUyODMzODQ0MmE4OTYzZmM0MWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKijPKKyJksuuYW4ufMQpkVtSdR0z1S0yFVfdG1ck9lOTRecjBx/E1uawH4 vWxD/OWGqZ7aezZZXc89675j3TGcaqPNKWFSr6q5h7xB2D8qdOsApXXsdjVGv7H5 KHAY56aue6aVQHeKkEH1WYBq47JE0s+ZE5hCddJJIrvUDXD5glaodGL1KCSjtMTt 3+s+J3SAaXVnI4wtiF6BULjQOCqkOPebvn5dZTTt1ZlWRbGQIMKJ+HP1ChudA5jq 1s1WdJWoI8LOi5dc/0NqoqUXeNKyw1/YPvyZ8zQ5ygtoz9tLLtU1ymLyF2IVASpM h6QOtA0TN6awy0HVSCnbzDmEw80CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTpmwmg QQeABsms6f45Q9g+Pwj1MjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjljY2JmMWYtYmQxOC00MzdmLTg3Y2ItYzhkODU1ODdjYmVhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA MDANBgkqhkiG9w0BAQsFAAOCAQEAUSRceBrl2867M83hBr0jq+H2crUkxGAC8kX6 0Lf+OhR6f25+h2XNI7wMK0vZ2NnRsWSP3yfsC4Q+0YKhOXuNF7jjv6eq8g8DPjXA Eulk721BsZbICuI39St+CGpGkoupL0QdILGE27iTz1a9GArVenRYCnzywXDLuOB7 ASLCVLpI4eh0cUC1dnq4Z6DlmSjJ7aV5KlxXtyBiiltTnHb9++I2kkWI2B6QJmFj +OW5FfZvGXKqkmborOuyUKbmfRaIYVyN/SakZJkRQ6LpEzUq3KWLFLegFLdVm536 vPlQqJAQQI/rJ9v5HozVP+tJF5j2Xnd4gQ3q8HtImLQ3Zl2MlA== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:43 2026 by rpki-client