This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa File: 5387f3e7-ef20-46b2-8929-bf638dce97e1.roa (raw, json) Hash identifier: bSou4V2iBTIM1PyCPVEFaZ5jKcGyOZZBl8tb8GsXhh0= Subject key identifier: 11:3A:E8:A9:5B:AA:DF:73:1D:20:FA:72:FA:88:9B:BC:CF:E2:B4:E7 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 648D0CEC83FEA2CC026F1755B222AC6F1D7D013F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa Signing time: Wed 10 Dec 2025 05:41:14 +0000 ROA not before: Wed 10 Dec 2025 05:41:14 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8d:0c:ec:83:fe:a2:cc:02:6f:17:55:b2:22:ac:6f:1d:7d:01:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:41:14 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=0dba57b059976b9362d23d218344165c2776b8eba87d937e44a97c47f69bbab0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:e5:a5:c5:03:6a:43:13:2f:9e:51:99:ef: 13:52:46:c2:cc:8f:dd:8d:81:7b:e7:8f:cf:ae:ce: b4:d2:a9:08:1a:ed:8d:b3:8a:18:29:d1:08:0f:63: 4b:64:be:cb:8c:cb:4c:17:8a:d6:85:69:23:b6:bf: 60:85:d5:1f:6a:37:e8:9f:1b:2b:d4:06:2c:ff:65: 70:48:21:7c:af:a4:45:70:60:06:96:72:82:27:25: b8:52:76:eb:80:c7:e9:d2:74:a2:d3:0e:12:58:4e: c7:6c:1c:41:ee:6a:89:be:6d:1f:8f:09:63:16:76: 08:6c:6b:5c:a7:56:cd:9d:a1:22:6c:24:5b:78:ac: 2f:a2:41:c7:31:d7:05:2a:7a:bb:1a:cf:c5:6d:ba: e5:93:7f:92:7c:9c:73:1b:81:38:15:b3:70:43:c6: 16:7e:f1:96:4a:bd:1d:1e:f0:d2:98:59:3c:9e:87: 02:81:a7:62:37:e3:8b:4d:e4:65:ce:28:1a:91:6a: 1d:27:e4:a7:b1:71:04:21:55:bc:14:b8:93:aa:93: d1:df:78:0a:9c:ff:97:33:b8:bc:f2:15:90:73:ad: 1f:fd:02:a7:e5:6f:e1:38:c6:ff:c6:a9:05:c9:8a: cb:d0:c1:8e:ef:55:f9:bd:bb:40:76:d8:fe:52:e7: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3A:E8:A9:5B:AA:DF:73:1D:20:FA:72:FA:88:9B:BC:CF:E2:B4:E7 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:5000::/40 Signature Algorithm: sha256WithRSAEncryption 21:79:24:39:e3:30:9f:de:31:8c:a5:fa:d2:6c:c8:82:36:c1: 74:8d:fe:9e:dd:c4:56:83:75:46:ef:2b:88:4d:91:87:c0:ec: 9c:5a:86:2f:f0:c4:a1:33:70:88:58:ae:0a:ef:11:fa:59:b0: c4:66:56:19:b5:24:70:94:3e:13:36:27:fc:6f:ef:97:ec:ce: ca:60:71:1c:c1:42:dc:3b:43:7d:b9:63:db:12:e8:1a:f0:85: bb:8a:ae:05:f7:ef:11:5d:fd:9a:9b:94:ab:71:59:c1:69:f7: 9c:04:de:7e:ef:86:13:69:07:f5:59:04:90:f5:40:d8:7e:6f: 2b:d4:08:e0:e7:03:63:56:3e:24:55:78:46:c6:7e:cd:b8:f3: 26:40:0b:d1:06:0b:03:90:ec:a9:2f:5a:a7:2b:66:3e:cd:91: 18:f1:ae:2f:25:ff:f6:a4:98:9e:60:ec:c1:fd:19:ae:d1:9e: 10:fa:58:17:d2:28:d2:d0:f8:c6:d3:67:84:68:c5:d8:db:61: 5a:64:03:7f:1e:49:ea:1c:d6:38:07:96:4c:19:51:c7:15:4b: 1a:c1:6f:ea:ef:f6:d7:a5:03:b0:9d:31:42:4d:5a:45:a5:47: 84:ef:e3:b4:a6:f3:aa:36:6e:76:60:ac:95:9c:a0:df:62:af: 0f:17:42:71 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZI0M7IP+oswCbxdVsiKsbx19AT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQxMTRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDBkYmE1N2IwNTk5NzZiOTM2MmQyM2QyMTgzNDQxNjVjMjc3NmI4ZWJhODdk OTM3ZTQ0YTk3YzQ3ZjY5YmJhYjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFT5aXFA2pDEy+eUZnvE1JGwsyP3Y2Be+ePz67OtNKpCBrtjbOKGCnRCA9j S2S+y4zLTBeK1oVpI7a/YIXVH2o36J8bK9QGLP9lcEghfK+kRXBgBpZygicluFJ2 64DH6dJ0otMOElhOx2wcQe5qib5tH48JYxZ2CGxrXKdWzZ2hImwkW3isL6JBxzHX BSp6uxrPxW265ZN/knyccxuBOBWzcEPGFn7xlkq9HR7w0phZPJ6HAoGnYjfji03k Zc4oGpFqHSfkp7FxBCFVvBS4k6qT0d94Cpz/lzO4vPIVkHOtH/0Cp+Vv4TjG/8ap BcmKy9DBju9V+b27QHbY/lLnw1kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQROuip W6rfcx0g+nL6iJu8z+K05zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTM4N2YzZTctZWYyMC00NmIyLTg5MjktYmY2MzhkY2U5N2UxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DFQ MA0GCSqGSIb3DQEBCwUAA4IBAQAheSQ54zCf3jGMpfrSbMiCNsF0jf6e3cRWg3VG 7yuITZGHwOycWoYv8MShM3CIWK4K7xH6WbDEZlYZtSRwlD4TNif8b++X7M7KYHEc wULcO0N9uWPbEuga8IW7iq4F9+8RXf2am5SrcVnBafecBN5+74YTaQf1WQSQ9UDY fm8r1Ajg5wNjVj4kVXhGxn7NuPMmQAvRBgsDkOypL1qnK2Y+zZEY8a4vJf/2pJie YOzB/Rmu0Z4Q+lgX0ijS0PjG02eEaMXY22FaZAN/HknqHNY4B5ZMGVHHFUsawW/q 7/bXpQOwnTFCTVpFpUeE7+O0pvOqNm52YKyVnKDfYq8PF0Jx -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:24 2026 by rpki-client