This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa File: 5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa (raw, json) Hash identifier: wEtgp0TaHVBsG9YvFCDqMe1t8J62hUFdmYwiEJ8Axkc= Subject key identifier: 51:52:82:AD:CB:82:F1:F1:0B:83:6A:D7:C7:8A:65:71:3D:A5:62:54 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 42B4A898052C0A91B62F5D36FD4E509EA97BB6F6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa Signing time: Mon 08 Dec 2025 02:10:29 +0000 ROA not before: Mon 08 Dec 2025 02:10:29 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b4:a8:98:05:2c:0a:91:b6:2f:5d:36:fd:4e:50:9e:a9:7b:b6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:29 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=9b6c62404377b187b34bec1d641674f97ba869f7bf6de2213f7b204c5dbfb9a8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:eb:84:35:c4:30:13:dc:06:ec:5c:60:0c: 18:ac:d1:74:e4:13:46:f3:46:45:0e:ed:28:89:b8: ad:14:04:33:8c:30:14:0b:81:91:83:38:56:3b:38: 87:ac:c1:2c:7e:f6:af:22:84:db:c3:03:c0:5c:bb: b6:2b:bf:46:64:1c:06:8e:16:ce:82:58:85:f8:4a: 99:3d:8e:05:25:a5:71:af:a2:71:25:8c:2e:0b:5f: 46:ea:9c:73:ad:70:b1:84:cd:de:19:35:d2:bd:81: 3e:14:41:eb:ad:b3:b8:2d:a0:aa:61:de:2b:9e:6f: 8e:c6:f4:00:bc:ec:de:45:ae:cb:a2:98:56:48:14: 42:ad:f2:80:a6:a7:fa:d2:b5:af:3f:dc:5f:70:84: 26:58:5f:00:4f:4c:2e:65:b7:06:af:3b:a1:3a:af: 9d:4e:1b:57:f9:d0:70:32:c0:ff:96:59:fc:b3:d3: 7a:30:ac:99:7b:02:67:79:a7:c2:51:d7:36:d3:47: c2:b8:e9:bd:23:17:3e:b3:f2:81:7a:a0:df:05:17: ae:cf:78:19:12:9e:3c:cc:55:8d:af:82:a3:a6:fa: dd:8a:95:95:61:17:10:fd:06:c9:06:80:ec:dd:fb: c1:54:13:38:53:46:25:02:1c:14:c7:be:e9:75:f6: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:52:82:AD:CB:82:F1:F1:0B:83:6A:D7:C7:8A:65:71:3D:A5:62:54 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 71:06:b1:50:75:81:1b:12:81:96:14:5c:d8:8b:58:44:54:d2: e0:66:40:72:8b:d4:4d:12:86:4b:2d:b3:f5:52:2a:31:79:37: a9:fd:32:8a:45:db:99:de:9f:27:8c:8c:51:10:45:32:ca:5e: 77:d9:c4:16:82:8b:98:e8:fc:f6:1f:c6:42:cb:7a:1c:48:ab: 88:02:f3:5c:cb:ec:0a:86:55:5d:a8:ad:31:f7:f4:ac:be:bb: ba:14:3e:af:61:da:bb:29:65:f9:b8:05:60:bc:c9:06:ff:81: 40:85:08:76:68:c4:e8:1b:aa:70:73:0d:22:3b:e0:b5:0c:00: bd:38:30:64:26:e2:21:5f:e7:8e:ce:ca:5e:8b:34:21:04:06: a0:a6:7a:69:02:4b:7f:97:3b:f2:60:88:be:e7:00:e6:53:cf: bd:3e:78:34:d5:a2:2e:e0:08:5e:83:01:93:e3:4a:b3:c5:37: c0:33:29:63:54:c6:74:c3:57:f9:a7:53:83:ed:ca:76:a7:24: 9a:7e:89:5a:03:10:70:e3:62:54:b1:76:98:f2:e5:0c:a2:fd: fa:98:9b:81:3d:ad:3d:2a:22:e1:64:8f:99:23:db:24:fa:17: b6:f6:9d:ea:51:13:d9:8e:54:aa:ea:4c:64:49:e8:72:4a:ca: de:63:aa:5f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUQrSomAUsCpG2L102/U5Qnql7tvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMjlaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDliNmM2MjQwNDM3N2IxODdiMzRiZWMxZDY0MTY3NGY5N2JhODY5ZjdiZjZk ZTIyMTNmN2IyMDRjNWRiZmI5YTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSX64Q1xDAT3AbsXGAMGKzRdOQTRvNGRQ7tKIm4rRQEM4wwFAuBkYM4Vjs4 h6zBLH72ryKE28MDwFy7tiu/RmQcBo4WzoJYhfhKmT2OBSWlca+icSWMLgtfRuqc c61wsYTN3hk10r2BPhRB662zuC2gqmHeK55vjsb0ALzs3kWuy6KYVkgUQq3ygKan +tK1rz/cX3CEJlhfAE9MLmW3Bq87oTqvnU4bV/nQcDLA/5ZZ/LPTejCsmXsCZ3mn wlHXNtNHwrjpvSMXPrPygXqg3wUXrs94GRKePMxVja+Co6b63YqVlWEXEP0GyQaA 7N37wVQTOFNGJQIcFMe+6XX21xsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRRUoKt y4Lx8QuDatfHimVxPaViVDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWEwMjNiYTctNmRiZS00NmFjLWJjNmYtNjIxZWQ2OTQ2YjZlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H8I wDANBgkqhkiG9w0BAQsFAAOCAQEAcQaxUHWBGxKBlhRc2ItYRFTS4GZAcovUTRKG Sy2z9VIqMXk3qf0yikXbmd6fJ4yMURBFMsped9nEFoKLmOj89h/GQst6HEiriALz XMvsCoZVXaitMff0rL67uhQ+r2Hauyll+bgFYLzJBv+BQIUIdmjE6BuqcHMNIjvg tQwAvTgwZCbiIV/njs7KXos0IQQGoKZ6aQJLf5c78mCIvucA5lPPvT54NNWiLuAI XoMBk+NKs8U3wDMpY1TGdMNX+adTg+3Kdqckmn6JWgMQcONiVLF2mPLlDKL9+pib gT2tPSoi4WSPmSPbJPoXtvad6lET2Y5UqupMZEnockrK3mOqXw== -----END CERTIFICATE-----Generated at Fri Jan 2 10:57:39 2026 by rpki-client