This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa File: 515f7e85-9223-47e5-be2b-42ec6a12a88b.roa (raw, json) Hash identifier: fccp0UENSserqLrD3sL/rJEODd5IHzf5Jqohxw52y6g= Subject key identifier: 3B:BB:EB:F5:70:2A:8A:B7:9E:31:20:C7:2A:5A:C4:AB:AB:1F:1A:2A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7727A732F93833ACB96B226818A612AA1AA7FC15 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa Signing time: Wed 10 Dec 2025 05:50:10 +0000 ROA not before: Wed 10 Dec 2025 05:50:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06d:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:27:a7:32:f9:38:33:ac:b9:6b:22:68:18:a6:12:aa:1a:a7:fc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=300315e77b4898f148b604729346066ed39de73ee0ad89848ff1ce4992daa960, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:d2:e7:43:ca:ef:f5:b6:ed:a4:f6:9e:f5: e0:a5:c3:6c:0a:43:a9:e2:f3:f5:c2:8e:87:2a:21: 97:02:57:73:e9:d7:ff:a9:63:2f:fc:64:2e:83:d0: 25:10:1e:8f:b6:cb:ac:26:95:10:7a:06:64:72:be: fa:59:2b:b3:d1:ed:44:ff:04:35:b8:77:35:55:65: 6c:1e:da:2f:c3:97:1f:4d:6a:da:98:6a:36:34:15: 24:eb:a9:97:51:8c:11:d8:24:44:a0:11:f3:04:c0: 1e:96:19:99:fb:30:28:3e:09:1f:97:f5:aa:93:1c: 20:6e:b3:75:2e:f9:58:29:b4:64:3b:29:b5:22:53: 5e:56:b9:74:5f:a3:71:a9:c9:35:ea:08:f3:40:d8: 19:55:c5:44:2b:b3:05:a9:16:d7:d5:a0:28:c1:d0: 9d:f1:97:15:a6:f3:d2:a6:a0:e8:5a:00:86:7a:74: dd:b0:98:2c:35:5e:96:63:4a:d9:b3:6e:c3:39:22: f9:ad:6b:60:44:a1:92:72:97:b5:5b:56:ba:f3:85: d8:45:85:70:6a:88:f7:73:7d:e8:66:5a:b6:ae:b2: 5c:80:8d:3f:1c:b0:48:2c:87:30:15:3f:1c:62:11: 70:9d:c2:6a:5c:64:39:b8:10:ed:6b:94:68:4c:7d: 79:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BB:EB:F5:70:2A:8A:B7:9E:31:20:C7:2A:5A:C4:AB:AB:1F:1A:2A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/515f7e85-9223-47e5-be2b-42ec6a12a88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06d:9000::/40 Signature Algorithm: sha256WithRSAEncryption a3:b3:cb:31:24:b5:31:83:85:83:fa:97:31:78:db:9a:95:16: 08:9f:11:61:3b:df:3a:41:15:a5:ce:53:60:83:79:a8:cc:e5: 42:6c:79:d8:65:79:1e:df:92:3b:bf:a2:c1:13:62:d6:ad:1f: 1a:1a:04:3b:ae:fb:ed:bc:51:ee:d0:ed:21:f6:f3:93:ed:4a: 62:d8:c5:33:40:e0:e5:8d:5b:4f:e9:51:2d:6b:a3:e3:f9:5e: c6:f7:5d:15:92:8e:5a:41:b5:9d:56:73:02:92:5b:35:4c:cd: 43:e0:2f:45:b3:59:13:4b:4d:0d:7d:1f:75:9c:94:f8:f6:7d: 2d:b5:8c:52:20:fd:e9:f3:99:55:80:82:ae:9e:1c:73:e9:50: 53:d5:a5:88:a4:d3:13:e5:3c:b6:6d:50:60:5a:3c:a7:87:32: 6d:4c:98:04:94:66:60:a7:8f:ef:c9:3c:c9:43:5f:3d:6c:08: c7:ed:b1:a1:a5:ff:81:d2:b3:be:17:08:a0:0a:2e:10:76:d5: d6:a6:e2:75:d4:70:44:44:42:57:47:8d:ce:e0:fc:ca:17:2c: 3e:42:fc:0c:df:23:fa:f0:b8:df:fd:d9:d8:84:12:a0:19:b7: 5c:ed:0c:cb:72:43:cd:84:a1:4e:81:16:18:7a:a5:7b:d3:4a: 92:a0:e3:ba -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUdyenMvk4M6y5ayJoGKYSqhqn/BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDMwMDMxNWU3N2I0ODk4ZjE0OGI2MDQ3MjkzNDYwNjZlZDM5ZGU3M2VlMGFk ODk4NDhmZjFjZTQ5OTJkYWE5NjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqM0udDyu/1tu2k9p714KXDbApDqeLz9cKOhyohlwJXc+nX/6ljL/xkLoPQ JRAej7bLrCaVEHoGZHK++lkrs9HtRP8ENbh3NVVlbB7aL8OXH01q2phqNjQVJOup l1GMEdgkRKAR8wTAHpYZmfswKD4JH5f1qpMcIG6zdS75WCm0ZDsptSJTXla5dF+j canJNeoI80DYGVXFRCuzBakW19WgKMHQnfGXFabz0qag6FoAhnp03bCYLDVelmNK 2bNuwzki+a1rYEShknKXtVtWuvOF2EWFcGqI93N96GZatq6yXICNPxywSCyHMBU/ HGIRcJ3CalxkObgQ7WuUaEx9eeECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ7u+v1 cCqKt54xIMcqWsSrqx8aKjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTE1ZjdlODUtOTIyMy00N2U1LWJlMmItNDJlYzZhMTJhODhiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G2Q MA0GCSqGSIb3DQEBCwUAA4IBAQCjs8sxJLUxg4WD+pcxeNualRYInxFhO986QRWl zlNgg3mozOVCbHnYZXke35I7v6LBE2LWrR8aGgQ7rvvtvFHu0O0h9vOT7Upi2MUz QODljVtP6VEta6Pj+V7G910Vko5aQbWdVnMCkls1TM1D4C9Fs1kTS00NfR91nJT4 9n0ttYxSIP3p85lVgIKunhxz6VBT1aWIpNMT5Ty2bVBgWjynhzJtTJgElGZgp4/v yTzJQ189bAjH7bGhpf+B0rO+FwigCi4QdtXWpuJ11HBEREJXR43O4PzKFyw+QvwM 3yP68Ljf/dnYhBKgGbdc7QzLckPNhKFOgRYYeqV700qSoOO6 -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:53 2026 by rpki-client