This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa File: 452f19af-8187-465e-9ab8-4e678c11315e.roa (raw, json) Hash identifier: DUnxKUHGffd9glmrrhn5qIYAATmS5oCZsoa3nGr3G10= Subject key identifier: E7:7D:31:CD:91:55:BE:80:BB:CE:1F:E8:A0:35:72:82:9C:6A:7C:C6 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 30BF9704ACB84A5B3FB9B9138BDB2EB331F5B030 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa Signing time: Wed 10 Dec 2025 06:30:46 +0000 ROA not before: Wed 10 Dec 2025 06:30:46 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d02b::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bf:97:04:ac:b8:4a:5b:3f:b9:b9:13:8b:db:2e:b3:31:f5:b0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:30:46 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=dfa5c95d82534ac1c99201939fefae78c5b0164a07073343181b645bf57af38d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:d8:00:0e:b4:ef:1a:14:08:af:60:d9:05: c3:ea:dd:bc:f6:09:e9:c1:25:ea:aa:0a:84:ef:7d: 04:b9:f7:d3:6b:d8:29:44:1a:cd:0a:08:7f:13:8f: d7:df:fe:5a:83:a5:e9:f8:d9:ef:cc:3a:5a:b1:0c: b6:13:27:33:ee:b7:36:64:84:1e:83:c6:72:b9:c8: 1f:a9:5e:14:89:33:19:cc:e8:06:0f:25:4e:7f:ba: 30:ac:dc:45:7c:1a:aa:87:60:c2:c8:65:a5:29:f6: 24:ad:19:96:22:da:b8:c3:e9:5d:35:76:ca:78:8b: fb:bc:ab:78:f5:7f:f6:2a:e2:88:04:af:54:ab:04: e3:e8:88:08:a4:86:c2:c0:ec:6b:92:12:dc:84:b8: c6:ad:2c:4f:8c:ab:f8:3b:03:66:6e:a1:17:9c:77: 46:47:00:f9:71:f9:46:6d:42:ea:7f:05:15:93:36: b0:7c:ca:af:53:d9:06:ce:b7:b1:0b:2c:de:12:c6: 26:9a:4a:b1:cc:a7:5a:4c:d0:21:f3:3b:2c:fa:9b: 01:f9:cc:09:b4:56:8a:97:80:e4:04:38:3b:67:b6: ad:4e:fd:ec:31:77:a6:1a:c2:aa:3d:9d:a7:38:5f: 14:31:60:3a:ab:7c:42:fd:45:c0:4d:6a:a8:fe:33: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:31:CD:91:55:BE:80:BB:CE:1F:E8:A0:35:72:82:9C:6A:7C:C6 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d02b::/37 Signature Algorithm: sha256WithRSAEncryption 21:87:4a:20:a7:b0:d8:57:0a:d6:35:2a:54:d6:6f:ae:7d:dd: 76:5e:c3:b2:f6:be:0f:e7:c5:c6:b4:b2:22:48:a6:06:35:03: ec:53:ed:f2:de:98:87:6c:11:45:1d:00:d5:08:fb:95:5c:f3: 61:2d:71:98:90:08:4b:95:71:32:35:0b:88:b5:5b:0f:83:08: ec:21:4a:fe:c0:54:61:27:bb:e8:11:82:74:ce:ab:65:25:f7: b0:18:97:c5:a5:dc:77:3b:f5:84:ad:85:77:89:59:3b:ca:f0: 6b:9a:fc:e5:ab:38:02:c3:8e:f3:5b:c6:e5:27:89:75:76:7e: 36:e3:49:dd:d8:6d:27:96:4c:0a:bc:9d:7e:89:8e:82:c4:88: 9c:9b:fc:aa:fe:f1:3a:c0:24:42:a8:15:41:e7:52:8b:fd:b9: 7c:06:28:87:d0:67:15:d2:a6:65:be:cb:36:e8:79:2a:eb:ba: d6:e8:49:6d:6a:97:c3:43:0f:2b:18:93:a4:af:d1:e3:04:d1: d0:12:26:b0:dd:e0:27:7e:c0:cc:0f:68:4d:4f:78:6b:e0:65: 43:e8:98:56:e0:3f:20:b8:43:42:11:05:83:c4:66:0c:a9:29: 6b:33:0d:68:be:ef:d3:df:1e:c9:26:1b:bf:67:31:5c:03:54: db:2d:bc:2e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUML+XBKy4Sls/ubkTi9suszH1sDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMwNDZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGRmYTVjOTVkODI1MzRhYzFjOTkyMDE5MzlmZWZhZTc4YzViMDE2NGEwNzA3 MzM0MzE4MWI2NDViZjU3YWYzOGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXd2AAOtO8aFAivYNkFw+rdvPYJ6cEl6qoKhO99BLn302vYKUQazQoIfxOP 19/+WoOl6fjZ78w6WrEMthMnM+63NmSEHoPGcrnIH6leFIkzGczoBg8lTn+6MKzc RXwaqodgwshlpSn2JK0ZliLauMPpXTV2yniL+7yrePV/9iriiASvVKsE4+iICKSG wsDsa5IS3IS4xq0sT4yr+DsDZm6hF5x3RkcA+XH5Rm1C6n8FFZM2sHzKr1PZBs63 sQss3hLGJppKscynWkzQIfM7LPqbAfnMCbRWipeA5AQ4O2e2rU797DF3phrCqj2d pzhfFDFgOqt8Qv1FwE1qqP4ze2cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTnfTHN kVW+gLvOH+igNXKCnGp8xjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDUyZjE5YWYtODE4Ny00NjVlLTlhYjgtNGU2NzhjMTEzMTVlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0CsA MA0GCSqGSIb3DQEBCwUAA4IBAQAhh0ogp7DYVwrWNSpU1m+ufd12XsOy9r4P58XG tLIiSKYGNQPsU+3y3piHbBFFHQDVCPuVXPNhLXGYkAhLlXEyNQuItVsPgwjsIUr+ wFRhJ7voEYJ0zqtlJfewGJfFpdx3O/WErYV3iVk7yvBrmvzlqzgCw47zW8blJ4l1 dn4240nd2G0nlkwKvJ1+iY6CxIicm/yq/vE6wCRCqBVB51KL/bl8BiiH0GcV0qZl vss26Hkq67rW6EltapfDQw8rGJOkr9HjBNHQEiaw3eAnfsDMD2hNT3hr4GVD6JhW 4D8guENCEQWDxGYMqSlrMw1ovu/T3x7JJhu/ZzFcA1TbLbwu -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:23 2026 by rpki-client