This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa File: 4c78114f-4347-44fe-aef1-32fc688c69b9.roa (raw, json) Hash identifier: L8cnzRxm7wELn32o415fAWTUonEB7SxQy5RbPArDXy8= Subject key identifier: DA:06:7C:25:1C:4F:12:10:85:91:BA:15:F9:6C:F5:72:F1:5E:85:96 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3DEBB6DAA7E37D8BBC23B5CD23D88FFE23509060 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa Signing time: Wed 10 Dec 2025 06:01:20 +0000 ROA not before: Wed 10 Dec 2025 06:01:20 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:eb:b6:da:a7:e3:7d:8b:bc:23:b5:cd:23:d8:8f:fe:23:50:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:01:20 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2136d1e37fb1a50e5e9b06377ded1b5eaaa431d6b5c41606ab1265561c768432, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:ca:cc:1e:67:c6:67:4f:19:fc:0e:d1:10: 46:95:9b:99:c5:b2:1c:0d:b3:73:4a:9a:c5:17:a1: 0c:a3:38:03:d5:76:25:64:83:bd:78:6d:bf:05:c0: a3:7e:fd:e9:9d:61:e2:4c:c0:4a:aa:11:2c:cd:a0: 96:1c:43:a6:4f:91:77:00:16:ac:1a:5a:17:84:09: bc:41:1e:52:4c:ca:4f:8b:c5:eb:2a:73:5f:14:f4: d8:9d:ed:24:11:d0:eb:60:14:30:97:e5:5f:64:cd: 04:ca:74:9e:97:33:50:5b:d4:09:d8:a9:a2:aa:3e: 10:26:e3:94:3b:c4:36:c9:50:d3:64:3c:26:0a:50: aa:78:fd:d0:02:ce:7a:c8:da:96:b4:78:b2:05:e8: 87:f8:21:b6:32:e5:72:2c:3e:82:91:77:a9:af:39: 11:2d:d8:84:c2:0d:e7:49:ff:9b:61:66:74:85:37: 96:9f:b3:2f:f8:07:14:a9:02:0e:59:a7:09:f3:da: ed:ff:88:80:10:9b:2b:7d:2e:a5:c6:5e:5f:6e:d2: cb:1b:d5:c8:25:5f:a0:64:82:e8:e0:61:13:dd:6e: e2:b5:1f:65:1b:7d:c6:12:42:87:83:2f:32:da:77: 9e:93:9c:51:d9:e1:07:82:b8:42:ec:8a:d2:dd:0c: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:06:7C:25:1C:4F:12:10:85:91:BA:15:F9:6C:F5:72:F1:5E:85:96 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:8020::/48 Signature Algorithm: sha256WithRSAEncryption 7b:90:21:ef:df:cb:14:c1:4d:58:54:7f:97:18:3c:9c:28:a6: c2:14:f3:55:ae:2a:ed:15:05:92:07:1e:d3:54:4d:1c:f4:27: 89:2b:25:76:9c:0b:f5:13:6c:7f:73:42:8b:38:68:ac:e1:dd: ae:8c:0f:53:f6:43:3f:1d:b3:90:7e:d9:f0:79:32:3c:0d:c8: dd:74:40:cb:70:b2:4f:e3:44:eb:28:7e:0e:10:d6:6a:c1:9b: af:1f:40:8d:77:29:7a:3a:7b:f4:a5:d2:b5:36:42:b6:72:d4: 31:bb:c1:dc:7f:a4:90:a9:d1:ef:11:63:5b:af:59:8b:b2:68: dd:9e:58:6f:e4:d5:9c:6d:ef:2a:41:1c:2d:4c:c4:14:a0:95: b3:d7:1e:9e:ae:fb:f9:40:9e:0e:1c:22:67:53:d9:17:84:35: 5a:c5:56:5e:f9:79:35:e9:5b:c2:0e:dc:d8:f7:a6:7a:e6:f2: c9:c2:a5:56:2d:22:5e:b9:e7:a4:d0:cd:ce:9f:d9:37:58:d5: ef:97:4d:b3:88:e2:4b:d3:fd:c1:3a:11:d0:fe:0b:14:1a:bf: 7a:37:e5:36:c1:c0:28:97:67:ad:ed:14:11:1d:27:63:86:2a: 4f:2d:b0:96:da:eb:15:ab:c7:6f:0f:3e:67:96:cc:f9:1b:07: a7:cb:c1:d0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUPeu22qfjfYu8I7XNI9iP/iNQkGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAxMjBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDIxMzZkMWUzN2ZiMWE1MGU1ZTliMDYzNzdkZWQxYjVlYWFhNDMxZDZiNWM0 MTYwNmFiMTI2NTU2MWM3Njg0MzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEYysweZ8ZnTxn8DtEQRpWbmcWyHA2zc0qaxRehDKM4A9V2JWSDvXhtvwXA o3796Z1h4kzASqoRLM2glhxDpk+RdwAWrBpaF4QJvEEeUkzKT4vF6ypzXxT02J3t JBHQ62AUMJflX2TNBMp0npczUFvUCdipoqo+ECbjlDvENslQ02Q8JgpQqnj90ALO esjalrR4sgXoh/ghtjLlciw+gpF3qa85ES3YhMIN50n/m2FmdIU3lp+zL/gHFKkC DlmnCfPa7f+IgBCbK30upcZeX27SyxvVyCVfoGSC6OBhE91u4rUfZRt9xhJCh4Mv Mtp3npOcUdnhB4K4QuyK0t0MAC0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTaBnwl HE8SEIWRuhX5bPVy8V6FljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGM3ODExNGYtNDM0Ny00NGZlLWFlZjEtMzJmYzY4OGM2OWI5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA IDANBgkqhkiG9w0BAQsFAAOCAQEAe5Ah79/LFMFNWFR/lxg8nCimwhTzVa4q7RUF kgce01RNHPQniSsldpwL9RNsf3NCizhorOHdrowPU/ZDPx2zkH7Z8HkyPA3I3XRA y3CyT+NE6yh+DhDWasGbrx9AjXcpejp79KXStTZCtnLUMbvB3H+kkKnR7xFjW69Z i7Jo3Z5Yb+TVnG3vKkEcLUzEFKCVs9cenq77+UCeDhwiZ1PZF4Q1WsVWXvl5Nelb wg7c2PemeubyycKlVi0iXrnnpNDNzp/ZN1jV75dNs4jiS9P9wToR0P4LFBq/ejfl NsHAKJdnre0UER0nY4YqTy2wltrrFavHbw8+Z5bM+RsHp8vB0A== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:24 2026 by rpki-client