This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa File: 36851825-b64c-4907-b152-006b17b6b7d7.roa (raw, json) Hash identifier: Ejkm+//mGbb1fPXxe9z5X9L3+RCy5tMHZkobEPCd3PY= Subject key identifier: BD:71:62:93:28:E3:BA:CA:32:85:F1:A3:BA:07:F4:31:08:A6:48:4B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 64727AE98FB1E16B7DA283C645DDA2032DF84AC7 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa Signing time: Wed 10 Dec 2025 06:31:09 +0000 ROA not before: Wed 10 Dec 2025 06:31:09 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:72:7a:e9:8f:b1:e1:6b:7d:a2:83:c6:45:dd:a2:03:2d:f8:4a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:31:09 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=3f68af5fc31ff1d30ad56cc7d9ffdca591fd3d5294b9c2af78e657f963b2df40, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:ce:d7:f9:c8:58:03:01:d5:da:c0:90:be: 09:82:b5:bf:c2:45:79:db:70:2b:bb:0b:5a:66:ed: 15:86:c2:68:0c:e6:94:da:65:51:27:ed:e4:b3:69: b9:f6:ea:fa:d6:7f:2d:b3:15:d8:57:25:90:ac:23: 3e:f0:b4:fd:c7:61:27:32:2c:89:8f:ee:97:e1:03: b4:33:41:53:d0:63:5a:71:56:33:3c:fb:27:42:19: a8:30:6c:35:90:32:ec:da:d0:f6:f3:b3:b7:05:7d: 4d:d0:c7:47:a5:6e:1b:06:9b:13:83:4d:56:23:f6: b5:bb:06:15:49:9c:86:e6:3e:e8:bf:bf:28:4f:21: 25:41:46:82:98:d2:4c:ff:8d:d1:8c:aa:97:9a:cc: e1:e6:84:fa:89:d0:67:da:d1:69:5e:c5:7f:25:4a: 53:79:56:2a:9b:2d:52:46:8b:4f:f0:f5:b2:d6:61: 23:66:7a:c0:96:75:62:e5:2d:af:d1:46:64:fe:52: 09:0e:12:be:69:c1:3c:a1:9e:0e:9d:81:81:cd:5a: 48:b2:46:cd:cd:96:2c:19:6d:83:58:95:1a:a5:e8: fe:0e:8b:24:91:41:e2:98:69:31:ef:8b:d3:c9:2c: c4:df:2c:5a:3d:54:24:59:f2:a9:c2:c5:e3:bd:37: a4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:71:62:93:28:E3:BA:CA:32:85:F1:A3:BA:07:F4:31:08:A6:48:4B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:b000::/40 Signature Algorithm: sha256WithRSAEncryption 86:6d:f9:29:26:41:92:f4:1f:ca:6b:d2:2e:79:b5:df:74:b0: 6b:e5:d0:f0:13:60:05:f8:bd:9e:09:af:36:3c:9e:95:80:73: c0:1d:39:ed:d9:c5:58:59:be:04:de:fb:b0:7a:d5:89:83:24: 8b:96:a0:9f:be:2a:54:aa:09:d9:03:0f:eb:10:ef:95:f4:a3: a5:32:cd:b9:79:6f:3b:9c:6a:29:ee:89:19:1f:4e:b2:2a:f4: 1a:50:f7:01:4b:ae:00:3e:19:a5:fe:dd:d5:03:94:2a:80:1e: 04:14:5e:5a:f2:09:29:62:7e:3a:4b:5b:3e:57:9e:56:93:ec: be:f5:f5:11:9d:c5:f5:43:59:2b:e8:ef:43:13:a6:d4:91:a4: 2c:f7:2e:19:a1:f6:b1:4f:26:9f:6f:14:de:4c:7d:71:70:f6: 5f:a1:a7:03:db:fb:11:42:55:85:f8:99:d9:f2:7a:1b:f5:ed: 32:d5:7b:66:47:e9:1f:c2:e1:a0:2c:30:7d:df:b8:9c:dc:b1: 9a:39:c5:e1:7a:6c:3c:01:b0:68:94:2c:e8:e5:55:fe:86:2d: 95:1b:fc:e4:8c:1c:2f:34:0a:f6:25:e7:3d:cc:24:95:12:b2: 7e:b5:68:2e:7e:dc:6e:31:1d:68:a3:61:ab:ce:c3:f3:dc:1d: 3c:0d:b5:5b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZHJ66Y+x4Wt9ooPGRd2iAy34SscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMxMDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDNmNjhhZjVmYzMxZmYxZDMwYWQ1NmNjN2Q5ZmZkY2E1OTFmZDNkNTI5NGI5 YzJhZjc4ZTY1N2Y5NjNiMmRmNDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYeztf5yFgDAdXawJC+CYK1v8JFedtwK7sLWmbtFYbCaAzmlNplUSft5LNp ufbq+tZ/LbMV2FclkKwjPvC0/cdhJzIsiY/ul+EDtDNBU9BjWnFWMzz7J0IZqDBs NZAy7NrQ9vOztwV9TdDHR6VuGwabE4NNViP2tbsGFUmchuY+6L+/KE8hJUFGgpjS TP+N0Yyql5rM4eaE+onQZ9rRaV7FfyVKU3lWKpstUkaLT/D1stZhI2Z6wJZ1YuUt r9FGZP5SCQ4SvmnBPKGeDp2Bgc1aSLJGzc2WLBltg1iVGqXo/g6LJJFB4phpMe+L 08ksxN8sWj1UJFnyqcLF4703pL8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS9cWKT KOO6yjKF8aO6B/QxCKZISzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MzY4NTE4MjUtYjY0Yy00OTA3LWIxNTItMDA2YjE3YjZiN2Q3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DGw MA0GCSqGSIb3DQEBCwUAA4IBAQCGbfkpJkGS9B/Ka9IuebXfdLBr5dDwE2AF+L2e Ca82PJ6VgHPAHTnt2cVYWb4E3vuwetWJgySLlqCfvipUqgnZAw/rEO+V9KOlMs25 eW87nGop7okZH06yKvQaUPcBS64APhml/t3VA5QqgB4EFF5a8gkpYn46S1s+V55W k+y+9fURncX1Q1kr6O9DE6bUkaQs9y4ZofaxTyafbxTeTH1xcPZfoacD2/sRQlWF +JnZ8nob9e0y1XtmR+kfwuGgLDB937ic3LGaOcXhemw8AbBolCzo5VX+hi2VG/zk jBwvNAr2Jec9zCSVErJ+tWguftxuMR1oo2GrzsPz3B08DbVb -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:36 2026 by rpki-client