This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa File: 36e6bf1a-660d-40a9-a561-406ff743fc37.roa (raw, json) Hash identifier: lX/zVHqa41VIH9JY89VfuoohUHEQ9YxaDFEEM+1HQ6I= Subject key identifier: 26:0C:AF:72:70:AE:3E:65:0B:B0:D0:2B:08:64:CE:FF:BD:C2:6D:07 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 14B5AB45D4C4E810BB3D45B92DCAA3217DD9F7E0 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa Signing time: Wed 10 Dec 2025 06:20:43 +0000 ROA not before: Wed 10 Dec 2025 06:20:43 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d03a:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b5:ab:45:d4:c4:e8:10:bb:3d:45:b9:2d:ca:a3:21:7d:d9:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:20:43 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2cb44f86d90e03bdac6a862088ddd758a129db4ceddfbf6de614d366ccb9046e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:59:22:c9:6d:e5:4b:6c:54:c9:7b:ef:9e: 7c:6f:b3:0c:01:1c:68:c9:02:94:3c:af:be:86:78: 85:ec:26:d1:9c:e6:fa:df:f8:bb:73:4e:85:3f:9d: 11:2c:a3:95:21:3a:41:8e:80:65:3f:92:02:ef:b3: d2:0c:71:e9:84:49:f4:21:f4:b7:ce:1f:a4:2d:86: a8:19:de:9e:45:dd:4b:f3:57:4b:d2:08:10:0b:b0: fa:66:d3:57:09:74:22:24:29:70:6e:1c:2b:d0:33: 58:df:54:54:07:a7:cf:d5:ac:62:49:ae:3c:48:84: 74:f6:9b:5e:fc:0f:9d:44:a8:67:e1:01:93:4a:ac: fa:9c:6d:34:27:c4:37:af:20:76:41:85:82:f7:ce: c7:8a:3b:22:13:1c:d8:20:40:9f:94:40:ff:9f:d0: d1:07:01:91:a0:1d:1c:6c:11:b0:d9:e9:5c:aa:1d: 26:9d:73:91:5e:5e:fc:5e:d0:4e:a4:0b:6a:bc:bd: e1:67:3a:ec:d4:91:57:af:d9:a6:63:a8:ef:a2:12: a1:b9:71:9c:66:73:ab:44:8c:0b:2e:22:5a:6a:09: cb:a5:d6:a8:02:28:3f:92:df:0a:76:79:75:83:c4: 01:23:6a:6d:5f:c6:1c:66:b9:eb:a0:6d:9f:a5:ea: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0C:AF:72:70:AE:3E:65:0B:B0:D0:2B:08:64:CE:FF:BD:C2:6D:07 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d03a:1000::/40 Signature Algorithm: sha256WithRSAEncryption 28:e8:1a:d9:b9:d1:cb:63:49:6a:69:35:96:48:14:19:c4:9a: 9f:b5:c9:ce:e3:b1:93:ab:a5:6c:40:2f:6e:d8:6a:db:e7:5d: cd:ab:98:e0:4c:64:0b:80:24:ef:2d:9d:e1:3e:35:85:b2:27: e6:e7:38:44:6b:02:c3:97:f1:ce:31:53:69:46:12:d5:91:a2: 97:e8:65:c9:da:83:95:64:ba:a9:3e:96:8a:1c:f9:35:d4:28: d6:75:e5:1c:62:84:97:c0:0a:b9:88:a2:01:50:d4:55:2e:50: e5:1a:92:42:0b:1d:8f:f0:16:35:ef:da:b3:0f:3e:19:66:a4: 02:dc:48:fb:ec:23:0d:92:04:33:e0:8e:1f:5b:44:ae:5a:7d: 19:1c:b8:62:27:85:e4:02:c0:e7:6b:04:44:63:2d:9b:d9:e2: e2:7c:41:6f:7e:fc:af:1c:f9:80:f3:54:b7:e0:76:e4:13:fd: e2:7a:38:9e:86:a1:24:7f:af:f8:89:4c:f5:60:e0:b2:f6:9d: 09:e1:0c:d3:99:8b:33:b7:2e:52:0b:6a:29:53:fd:ba:5b:31: c9:0f:5f:b0:29:cb:a2:03:8c:aa:ca:02:a0:bd:3e:68:d6:c3: 72:f4:b5:22:2c:9e:4b:ce:e9:b0:de:8c:f1:47:5a:84:5b:4c: a4:bc:bb:a7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUFLWrRdTE6BC7PUW5LcqjIX3Z9+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIwNDNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDJjYjQ0Zjg2ZDkwZTAzYmRhYzZhODYyMDg4ZGRkNzU4YTEyOWRiNGNlZGRm YmY2ZGU2MTRkMzY2Y2NiOTA0NmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3BWSLJbeVLbFTJe++efG+zDAEcaMkClDyvvoZ4hewm0Zzm+t/4u3NOhT+d ESyjlSE6QY6AZT+SAu+z0gxx6YRJ9CH0t84fpC2GqBnenkXdS/NXS9IIEAuw+mbT Vwl0IiQpcG4cK9AzWN9UVAenz9WsYkmuPEiEdPabXvwPnUSoZ+EBk0qs+pxtNCfE N68gdkGFgvfOx4o7IhMc2CBAn5RA/5/Q0QcBkaAdHGwRsNnpXKodJp1zkV5e/F7Q TqQLary94Wc67NSRV6/ZpmOo76ISoblxnGZzq0SMCy4iWmoJy6XWqAIoP5LfCnZ5 dYPEASNqbV/GHGa566Btn6Xq+JsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQmDK9y cK4+ZQuw0CsIZM7/vcJtBzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MzZlNmJmMWEtNjYwZC00MGE5LWE1NjEtNDA2ZmY3NDNmYzM3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DoQ MA0GCSqGSIb3DQEBCwUAA4IBAQAo6BrZudHLY0lqaTWWSBQZxJqftcnO47GTq6Vs QC9u2Grb513Nq5jgTGQLgCTvLZ3hPjWFsifm5zhEawLDl/HOMVNpRhLVkaKX6GXJ 2oOVZLqpPpaKHPk11CjWdeUcYoSXwAq5iKIBUNRVLlDlGpJCCx2P8BY179qzDz4Z ZqQC3Ej77CMNkgQz4I4fW0SuWn0ZHLhiJ4XkAsDnawREYy2b2eLifEFvfvyvHPmA 81S34HbkE/3iejiehqEkf6/4iUz1YOCy9p0J4QzTmYszty5SC2opU/26WzHJD1+w KcuiA4yqygKgvT5o1sNy9LUiLJ5Lzumw3ozxR1qEW0ykvLun -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:29 2026 by rpki-client