This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa File: 375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa (raw, json) Hash identifier: fyZh7qG4WF/NUrhSbv7GnVsYnUUHHzdfmDbpReuhSpw= Subject key identifier: D7:BD:89:DB:DE:02:F7:0E:7B:E8:51:F5:F6:79:E0:3B:FF:7E:FB:0F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 21F07422235548FB146126DEB2B76C45AD05D9D6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa Signing time: Wed 10 Dec 2025 05:50:39 +0000 ROA not before: Wed 10 Dec 2025 05:50:39 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d03a:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f0:74:22:23:55:48:fb:14:61:26:de:b2:b7:6c:45:ad:05:d9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:39 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=e0f9882137d9745e29035267e917ca09f22bdb4038bfaa777287330fc7f49570, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:98:c8:ff:b4:e9:2e:9a:59:a6:df:01:43: 91:a6:08:fe:5a:91:c8:92:81:99:b0:09:37:2b:a8: 5f:71:43:bc:fc:2b:68:98:80:f3:50:48:99:52:d9: 9c:0a:49:04:aa:f3:24:0f:ab:99:80:70:c4:1f:f5: 0b:3b:9a:f6:e0:89:a2:01:9e:fd:6e:c4:69:cf:c1: 40:2d:bf:e0:a3:0c:8d:03:c8:46:31:e4:4b:b3:4c: 65:41:de:a8:a2:f3:0d:84:d3:b1:c6:34:98:cd:68: b7:99:c0:8e:67:32:f9:1f:b5:07:c0:60:34:8f:c8: 3d:86:c5:ac:f7:b5:37:4d:f5:bd:01:c8:4c:a7:b9: 2f:59:8b:b7:e3:51:a3:51:c0:75:cd:b3:89:e0:d8: a7:eb:0d:9a:2a:a0:a0:b6:57:e4:a8:67:c0:6a:56: 01:cd:f9:4c:6f:8e:f7:4c:35:cf:ba:72:39:bc:1d: b4:b6:f7:1a:02:d0:a9:79:44:e5:a4:4b:db:dc:ac: 87:b0:01:b3:ca:cb:ca:2b:e5:7c:4f:9e:8a:ad:71: c7:ce:26:51:fc:87:60:d6:b9:bc:41:d8:f2:99:a3: 17:5f:ee:1a:4e:10:e5:72:fa:27:e7:1a:fc:e3:d4: 15:4f:fd:02:5c:e2:28:fc:15:7f:a8:ec:f5:e1:f2: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BD:89:DB:DE:02:F7:0E:7B:E8:51:F5:F6:79:E0:3B:FF:7E:FB:0F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d03a:2000::/40 Signature Algorithm: sha256WithRSAEncryption ad:01:33:c8:bd:39:c9:0f:5b:41:cd:bb:11:2b:fa:e1:65:c4: f1:26:a9:1c:dc:15:84:15:c5:b8:d2:2e:7b:a2:18:c9:cf:f8: d9:9a:d5:48:ad:cf:17:69:ff:58:8a:84:7d:b7:df:30:70:7b: b9:04:02:49:f1:33:ef:ad:70:c8:3a:83:44:a1:d8:12:f0:15: 1f:c9:c5:14:65:fd:ec:6f:d9:94:11:57:dd:6a:b8:f8:b1:67: 4a:f9:da:37:5b:f8:a8:f1:30:7a:f5:76:a9:fe:3d:0e:82:4d: f0:2d:86:82:8c:ba:3a:88:4f:bb:17:99:f8:f7:13:eb:f9:57: cf:9b:a2:10:6c:5f:19:99:ad:c1:0e:08:1a:2d:59:8a:f0:da: c4:97:13:88:35:bc:3a:18:ed:66:ed:8a:dd:30:d3:26:d7:f5: 85:9b:df:88:aa:a1:fb:aa:44:71:ba:67:16:97:51:92:7d:a9: 73:82:86:72:f8:34:00:4e:f9:2d:10:02:68:84:80:c1:44:8f: 71:62:6f:ea:af:b4:a1:e2:21:0e:5c:79:6e:00:77:df:51:a7: 54:77:7b:bc:0f:76:81:f2:96:32:cd:8f:90:cd:e0:d4:b1:fb: ef:7b:89:df:0e:83:89:e0:1a:b7:bf:6f:58:96:7b:c3:46:75: c0:56:df:dc -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUIfB0IiNVSPsUYSbesrdsRa0F2dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwMzlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGUwZjk4ODIxMzdkOTc0NWUyOTAzNTI2N2U5MTdjYTA5ZjIyYmRiNDAzOGJm YWE3NzcyODczMzBmYzdmNDk1NzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeBmMj/tOkumlmm3wFDkaYI/lqRyJKBmbAJNyuoX3FDvPwraJiA81BImVLZ nApJBKrzJA+rmYBwxB/1Czua9uCJogGe/W7Eac/BQC2/4KMMjQPIRjHkS7NMZUHe qKLzDYTTscY0mM1ot5nAjmcy+R+1B8BgNI/IPYbFrPe1N031vQHITKe5L1mLt+NR o1HAdc2zieDYp+sNmiqgoLZX5KhnwGpWAc35TG+O90w1z7pyObwdtLb3GgLQqXlE 5aRL29ysh7ABs8rLyivlfE+eiq1xx84mUfyHYNa5vEHY8pmjF1/uGk4Q5XL6J+ca /OPUFU/9AlziKPwVf6js9eHypmkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTXvYnb 3gL3DnvoUfX2eeA7/377DzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Mzc1YjJhMzEtMmJmNS00OWFlLTg3M2YtNjExY2IzZWZkNmU1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dog MA0GCSqGSIb3DQEBCwUAA4IBAQCtATPIvTnJD1tBzbsRK/rhZcTxJqkc3BWEFcW4 0i57ohjJz/jZmtVIrc8Xaf9YioR9t98wcHu5BAJJ8TPvrXDIOoNEodgS8BUfycUU Zf3sb9mUEVfdarj4sWdK+do3W/io8TB69Xap/j0Ogk3wLYaCjLo6iE+7F5n49xPr +VfPm6IQbF8Zma3BDggaLVmK8NrElxOINbw6GO1m7YrdMNMm1/WFm9+IqqH7qkRx umcWl1GSfalzgoZy+DQATvktEAJohIDBRI9xYm/qr7Sh4iEOXHluAHffUadUd3u8 D3aB8pYyzY+QzeDUsfvve4nfDoOJ4Bq3v29YlnvDRnXAVt/c -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:23 2026 by rpki-client