This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa File: 5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa (raw, json) Hash identifier: inXsuLJcmXrs6K96SZ5XLZoqdHMO9ejUX/Bgczu/zqE= Subject key identifier: CF:91:0D:CB:4C:3D:6B:41:49:02:2E:48:AD:A4:15:5B:1E:C5:C6:A7 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 54353A48180648B90BC6807FFB2ED66ED1AE5638 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa Signing time: Wed 10 Dec 2025 06:20:11 +0000 ROA not before: Wed 10 Dec 2025 06:20:11 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d01d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:35:3a:48:18:06:48:b9:0b:c6:80:7f:fb:2e:d6:6e:d1:ae:56:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:20:11 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=47f976596dda6c590f8490da557f527a9da4f690a996c8168da431c18a6700c2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:1f:e7:de:7b:8d:2f:6e:ab:7c:67:4b:87: 95:eb:75:26:15:71:bc:91:26:d8:5f:32:10:fd:c4: 78:89:c1:e0:d9:b9:0b:4d:a6:d1:67:20:cb:c7:8d: 56:a0:fc:7f:72:80:b7:e1:d2:1c:d2:d1:94:65:9e: 2a:22:4e:7e:7a:f2:3e:ab:24:04:0b:26:ca:3f:be: 0a:9a:83:23:04:a3:5c:dc:3c:dd:24:74:5c:96:1e: 44:21:4a:5d:5f:3c:5f:f7:96:a8:39:fd:84:bb:3e: e0:88:8b:07:21:a4:87:cd:d1:29:35:ac:38:0d:6f: 0a:53:07:22:70:5d:98:9e:b0:c2:92:35:cc:b5:af: 55:80:ae:29:58:c9:bc:d8:78:a3:17:66:a5:c9:cb: 76:60:ba:cb:da:df:f3:17:f0:1d:95:43:0b:39:68: 6d:35:5a:6f:11:e2:7c:86:11:00:db:e8:73:f5:ed: df:01:5b:b6:64:5a:ca:de:0a:1f:34:da:d5:2b:a9: 59:bd:06:75:b5:4c:58:f9:4e:b6:5d:64:96:39:4e: b0:81:92:04:a1:73:fe:29:b6:28:14:06:df:6c:da: b4:25:3b:2a:3e:c7:9a:b1:c2:c6:db:6a:3a:e3:60: 85:a6:5e:06:03:70:84:c3:e2:3a:83:10:33:c9:95: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:91:0D:CB:4C:3D:6B:41:49:02:2E:48:AD:A4:15:5B:1E:C5:C6:A7 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d01d::/36 Signature Algorithm: sha256WithRSAEncryption 2c:3b:30:8a:6b:0e:40:d7:15:b2:c2:85:43:db:c6:5b:4b:62: d5:2f:c5:a5:a9:d9:e2:69:4f:62:c6:bf:22:47:4b:f2:61:d7: eb:10:04:2b:86:53:08:d2:c2:c8:73:af:08:86:f8:b3:ff:29: f0:a6:9c:68:2b:67:65:1f:57:c3:a0:c2:26:98:94:50:b1:c2: a2:76:7b:8c:5f:46:39:31:9e:4b:2b:f1:50:07:48:cd:eb:60: 5e:8e:bd:ad:d7:5a:0c:1e:64:31:4d:b5:1a:b7:a7:4e:66:16: ef:33:da:3e:55:f0:6d:70:df:a3:f0:8f:51:94:a9:39:c9:33: 7c:cf:66:65:d6:77:06:68:87:f4:3a:47:cb:a8:3f:b5:e4:f4: 79:24:16:92:8e:66:25:13:5d:63:31:44:9b:89:64:93:d8:b6: 06:52:e8:4b:0e:20:00:08:85:e1:09:72:09:f5:0f:ee:71:f8: b9:05:7b:9d:0f:17:68:04:5a:ce:ff:3c:b6:92:f0:f4:2a:22: ed:5b:b4:78:01:64:c9:5a:0c:22:90:5b:55:22:48:18:44:5a: eb:29:ad:c9:64:0e:c7:d2:a5:67:fd:01:cf:31:9b:cb:8f:da: 95:7e:da:6d:0a:b6:97:05:b7:dd:39:92:7a:0f:e4:b9:27:82: ad:ba:0b:d7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUVDU6SBgGSLkLxoB/+y7WbtGuVjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIwMTFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDQ3Zjk3NjU5NmRkYTZjNTkwZjg0OTBkYTU1N2Y1MjdhOWRhNGY2OTBhOTk2 YzgxNjhkYTQzMWMxOGE2NzAwYzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBBH+fee40vbqt8Z0uHlet1JhVxvJEm2F8yEP3EeInB4Nm5C02m0Wcgy8eN VqD8f3KAt+HSHNLRlGWeKiJOfnryPqskBAsmyj++CpqDIwSjXNw83SR0XJYeRCFK XV88X/eWqDn9hLs+4IiLByGkh83RKTWsOA1vClMHInBdmJ6wwpI1zLWvVYCuKVjJ vNh4oxdmpcnLdmC6y9rf8xfwHZVDCzlobTVabxHifIYRANvoc/Xt3wFbtmRayt4K HzTa1SupWb0GdbVMWPlOtl1kljlOsIGSBKFz/im2KBQG32zatCU7Kj7HmrHCxttq OuNghaZeBgNwhMPiOoMQM8mVawkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTPkQ3L TD1rQUkCLkitpBVbHsXGpzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWZlNzFjZDktY2JmZi00Y2E0LWI4YTYtN2RjMTNiMTAxM2U0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0B0A MA0GCSqGSIb3DQEBCwUAA4IBAQAsOzCKaw5A1xWywoVD28ZbS2LVL8WlqdniaU9i xr8iR0vyYdfrEAQrhlMI0sLIc68Ihviz/ynwppxoK2dlH1fDoMImmJRQscKidnuM X0Y5MZ5LK/FQB0jN62Bejr2t11oMHmQxTbUat6dOZhbvM9o+VfBtcN+j8I9RlKk5 yTN8z2Zl1ncGaIf0OkfLqD+15PR5JBaSjmYlE11jMUSbiWST2LYGUuhLDiAACIXh CXIJ9Q/ucfi5BXudDxdoBFrO/zy2kvD0KiLtW7R4AWTJWgwikFtVIkgYRFrrKa3J ZA7H0qVn/QHPMZvLj9qVftptCraXBbfdOZJ6D+S5J4KtugvX -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:43 2026 by rpki-client