This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa File: 4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa (raw, json) Hash identifier: K5BSqI3Ph15puzOeu6iJorAsbp28/BHpgoMYbMymztw= Subject key identifier: CC:BA:BB:13:92:ED:83:16:D2:82:76:ED:E6:8B:72:92:98:77:EF:20 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1BA16895A8103BEB61EBDFCA421710AE4F9B4BE1 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa Signing time: Wed 10 Dec 2025 05:50:58 +0000 ROA not before: Wed 10 Dec 2025 05:50:58 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06f:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a1:68:95:a8:10:3b:eb:61:eb:df:ca:42:17:10:ae:4f:9b:4b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:58 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=8c3569804330401a6142d4b8270ebbf7ac7c6fec56c8ab3fd342f695f30c219d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:b0:71:71:2d:d4:b3:de:74:c2:29:f2:43: 7e:e2:db:e0:d2:f2:70:ca:c2:1a:d9:d8:39:a3:f5: 1c:5d:26:1c:3e:3e:94:7d:25:bb:0b:21:c3:ad:13: 8f:35:9b:38:9a:d4:41:22:b7:f0:bd:bd:2f:7e:46: f1:f2:ff:fc:60:2d:64:7b:6c:95:50:4e:ca:b5:69: 4f:9f:b8:a8:34:55:8c:a7:7c:55:4d:2d:8b:d7:87: ca:02:02:9c:21:a1:e3:0a:99:eb:d3:ea:50:71:3f: 2d:b0:04:2c:f5:53:e9:71:84:99:77:9e:b6:71:48: 23:3c:4d:59:2f:4d:03:38:ac:50:e5:7a:1c:85:e6: 11:b4:04:66:7d:ad:8e:76:fc:58:8f:3f:ab:78:50: 53:ac:3b:4e:24:3c:a7:82:52:56:64:19:7b:fe:cc: 09:78:f1:d5:cb:4d:39:cf:2e:c7:de:a3:4a:77:06: 53:fb:99:27:ee:91:7a:33:8e:89:2b:d8:fc:c8:ea: c0:c6:94:51:50:f0:ee:56:f4:37:26:2e:98:b6:72: 15:de:6e:27:93:97:0d:54:c1:4a:30:8a:64:be:87: 0f:fd:30:8c:d7:d1:28:fd:39:3c:2e:f1:ff:b6:52: bd:6a:38:4c:25:68:b4:40:16:41:4d:3e:40:eb:1e: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:BB:13:92:ED:83:16:D2:82:76:ED:E6:8B:72:92:98:77:EF:20 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:9000::/40 Signature Algorithm: sha256WithRSAEncryption 46:88:c4:aa:66:76:64:c5:12:85:79:79:01:2f:30:a7:fc:d9: 47:b1:af:f0:43:64:0b:aa:7c:fe:54:97:50:2f:67:98:e5:6a: 57:5e:4c:c5:43:f8:ea:50:0f:6b:92:62:d7:65:2a:d8:01:bc: 65:01:0f:ea:e0:ec:b7:94:13:5c:8a:b5:dc:1c:8b:43:e8:b3: e3:c0:be:12:a4:37:a2:69:32:8a:99:74:a4:90:06:3d:68:83: bc:8b:ce:9c:35:e8:a6:a3:76:38:d4:99:ec:ea:ba:eb:e6:01: ec:06:b0:f5:cb:0d:5f:ec:91:f0:03:78:f1:51:37:cb:31:6b: 42:1e:81:d8:aa:b7:b5:33:b8:91:31:a6:9b:a0:80:95:fe:77: 7d:5c:00:3b:fc:9d:b2:09:c9:19:fa:e6:1a:d3:0b:b8:ec:c4: 79:7d:8f:0d:fd:67:59:1c:27:9a:df:5f:1f:b1:36:fa:b6:21: 64:5e:a1:81:63:53:0f:ef:27:1b:6c:18:b9:83:13:4f:11:db: 90:aa:34:97:b4:80:b4:b4:99:39:ae:42:dd:c8:0a:e1:15:91: 75:23:f4:5a:cb:17:51:de:57:13:5b:e8:42:e7:c5:00:91:7a: 9b:cb:bd:d9:04:93:5b:54:86:94:7d:e7:f7:f3:41:a6:ac:38: 66:09:9b:04 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUG6FolagQO+th69/KQhcQrk+bS+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwNThaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDhjMzU2OTgwNDMzMDQwMWE2MTQyZDRiODI3MGViYmY3YWM3YzZmZWM1NmM4 YWIzZmQzNDJmNjk1ZjMwYzIxOWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbhsHFxLdSz3nTCKfJDfuLb4NLycMrCGtnYOaP1HF0mHD4+lH0luwshw60T jzWbOJrUQSK38L29L35G8fL//GAtZHtslVBOyrVpT5+4qDRVjKd8VU0ti9eHygIC nCGh4wqZ69PqUHE/LbAELPVT6XGEmXeetnFIIzxNWS9NAzisUOV6HIXmEbQEZn2t jnb8WI8/q3hQU6w7TiQ8p4JSVmQZe/7MCXjx1ctNOc8ux96jSncGU/uZJ+6RejOO iSvY/MjqwMaUUVDw7lb0NyYumLZyFd5uJ5OXDVTBSjCKZL6HD/0wjNfRKP05PC7x /7ZSvWo4TCVotEAWQU0+QOseee0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTMursT ku2DFtKCdu3mi3KSmHfvIDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGUwY2JiMTUtM2NiNy00NDliLTk1M2EtYjQwOTQ5YmRjMzJiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+Q MA0GCSqGSIb3DQEBCwUAA4IBAQBGiMSqZnZkxRKFeXkBLzCn/NlHsa/wQ2QLqnz+ VJdQL2eY5WpXXkzFQ/jqUA9rkmLXZSrYAbxlAQ/q4Oy3lBNcirXcHItD6LPjwL4S pDeiaTKKmXSkkAY9aIO8i86cNeimo3Y41Jns6rrr5gHsBrD1yw1f7JHwA3jxUTfL MWtCHoHYqre1M7iRMaaboICV/nd9XAA7/J2yCckZ+uYa0wu47MR5fY8N/WdZHCea 318fsTb6tiFkXqGBY1MP7ycbbBi5gxNPEduQqjSXtIC0tJk5rkLdyArhFZF1I/Ra yxdR3lcTW+hC58UAkXqby73ZBJNbVIaUfef380GmrDhmCZsE -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:35 2026 by rpki-client