This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa File: 5c829516-8640-4a9a-a2b3-cfababf09faa.roa (raw, json) Hash identifier: Thoe6S9mqc6I7zwqw1DLS3remJzLZBLze6zRDuAqEaw= Subject key identifier: AA:EF:E7:F6:52:D8:34:29:AC:0E:DE:A7:24:D6:7C:A6:A5:67:3F:67 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 23E2DE73B7BCDCB62D9711D02C03CDCE85511D0C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa Signing time: Wed 10 Dec 2025 06:21:24 +0000 ROA not before: Wed 10 Dec 2025 06:21:24 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e2:de:73:b7:bc:dc:b6:2d:97:11:d0:2c:03:cd:ce:85:51:1d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:21:24 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2bd2f2796015f288da1b4414dc33bfb4e1f03c9f0fba0ffa49a69e56701fa404, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:78:10:17:87:a6:a5:93:6c:0c:d7:7a:27: bf:ef:81:40:8b:eb:59:9c:85:e1:81:6f:a2:0e:87: 04:d9:9e:66:69:79:d9:5c:9c:d5:c8:2b:28:5c:11: 7c:20:99:17:b1:c9:e8:46:41:50:5a:6a:4f:79:3a: 7b:86:82:10:ea:2a:08:27:cd:65:f3:3a:63:9c:c1: 29:f1:ec:3c:76:5a:69:16:89:a7:29:0a:ee:dc:2f: a2:c4:95:be:95:64:a1:df:7f:db:b2:e7:26:bc:3b: 9d:6d:a1:ef:03:58:5f:24:2e:2d:29:6b:b1:ed:aa: 26:6a:53:a5:bb:b3:85:48:2f:12:ea:f6:df:f0:1b: ec:2a:0d:da:1d:19:80:15:9d:e0:55:47:58:94:52: 73:b8:42:ed:7c:10:7b:b0:6a:cf:89:63:e1:ba:ac: d3:de:7f:82:c1:e3:43:8c:0e:23:34:1e:41:76:31: 6a:ca:d7:03:e3:05:01:1a:bf:76:bc:26:88:c7:ea: 46:e3:b9:d7:9e:f6:32:ef:58:81:de:16:f9:12:68: 47:6c:5d:11:f7:53:45:34:47:da:78:5d:87:db:5b: 01:51:f8:ff:4c:07:50:9c:d6:06:4e:b3:3c:b5:39: 8f:67:f9:21:78:18:0f:30:c0:92:3b:88:e8:af:b3: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EF:E7:F6:52:D8:34:29:AC:0E:DE:A7:24:D6:7C:A6:A5:67:3F:67 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:e080::/48 Signature Algorithm: sha256WithRSAEncryption 89:d7:4d:fb:97:b4:f5:95:85:55:80:ff:7e:89:b3:96:00:e3: 4d:8c:43:93:e7:09:0a:1c:a5:ba:07:fa:6d:a7:b4:7b:3b:ac: 68:75:60:7e:93:a2:71:8a:cb:ba:a2:46:a4:0b:6e:16:41:7d: e1:95:c4:eb:e4:f3:27:82:cf:b2:ae:7e:b6:5b:6d:de:36:db: a3:18:d5:37:e3:af:f8:f1:98:65:e1:74:c8:5c:43:64:21:a0: f8:76:d8:3a:ba:2a:bb:96:fc:07:a8:be:ec:5a:5f:be:8c:78: d1:33:1d:28:22:ae:3b:3e:4d:40:dc:4d:b5:0c:11:42:5b:f1: c1:ef:a6:bc:ef:a7:6a:3e:08:9e:7b:21:a1:51:c3:d2:2d:3d: 6b:58:7c:69:82:48:f0:56:c4:22:7d:86:d4:4d:65:49:6b:f1: 1b:d4:ef:55:4c:8e:17:a8:16:12:ce:80:ae:af:78:21:e5:0f: f0:5e:bc:ec:11:4c:e1:31:ae:a6:7e:2b:a5:b4:98:9f:05:90: ef:9d:10:07:6b:f4:cf:08:a3:10:92:fd:16:bc:5f:61:81:20: 90:32:81:41:49:44:e6:05:41:74:6b:62:2b:33:56:e9:ce:c4: 10:fe:33:a4:c5:2e:3d:c9:fc:1b:3b:48:46:bb:4e:26:0a:32: 8d:0e:f7:97 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUI+Lec7e83LYtlxHQLAPNzoVRHQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIxMjRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDJiZDJmMjc5NjAxNWYyODhkYTFiNDQxNGRjMzNiZmI0ZTFmMDNjOWYwZmJh MGZmYTQ5YTY5ZTU2NzAxZmE0MDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJFheBAXh6alk2wM13onv++BQIvrWZyF4YFvog6HBNmeZml52Vyc1cgrKFwR fCCZF7HJ6EZBUFpqT3k6e4aCEOoqCCfNZfM6Y5zBKfHsPHZaaRaJpykK7twvosSV vpVkod9/27LnJrw7nW2h7wNYXyQuLSlrse2qJmpTpbuzhUgvEur23/Ab7CoN2h0Z gBWd4FVHWJRSc7hC7XwQe7Bqz4lj4bqs095/gsHjQ4wOIzQeQXYxasrXA+MFARq/ drwmiMfqRuO51572Mu9Ygd4W+RJoR2xdEfdTRTRH2nhdh9tbAVH4/0wHUJzWBk6z PLU5j2f5IXgYDzDAkjuI6K+zE8UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSq7+f2 Utg0KawO3qck1nympWc/ZzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWM4Mjk1MTYtODY0MC00YTlhLWEyYjMtY2ZhYmFiZjA5ZmFhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DHg gDANBgkqhkiG9w0BAQsFAAOCAQEAiddN+5e09ZWFVYD/fomzlgDjTYxDk+cJChyl ugf6bae0ezusaHVgfpOicYrLuqJGpAtuFkF94ZXE6+TzJ4LPsq5+tltt3jbboxjV N+Ov+PGYZeF0yFxDZCGg+HbYOroqu5b8B6i+7Fpfvox40TMdKCKuOz5NQNxNtQwR Qlvxwe+mvO+naj4InnshoVHD0i09a1h8aYJI8FbEIn2G1E1lSWvxG9TvVUyOF6gW Es6Arq94IeUP8F687BFM4TGupn4rpbSYnwWQ750QB2v0zwijEJL9FrxfYYEgkDKB QUlE5gVBdGtiKzNW6c7EEP4zpMUuPcn8GztIRrtOJgoyjQ73lw== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:33 2026 by rpki-client