This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa File: 73488a43-875c-415a-9969-c278b245b9fb.roa (raw, json) Hash identifier: HbpTo8xI367xLqAeO7SD2PIPfyxeQdjD+xqF7gX2yYE= Subject key identifier: FC:74:CB:2C:5D:E1:0B:55:E3:E2:19:06:26:CE:15:23:4C:C9:B1:6C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 65FC623030AEC5F21FD4F6D4B92A9A472B5E7EFC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa Signing time: Wed 10 Dec 2025 06:31:07 +0000 ROA not before: Wed 10 Dec 2025 06:31:07 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fc:62:30:30:ae:c5:f2:1f:d4:f6:d4:b9:2a:9a:47:2b:5e:7e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:31:07 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=19896a161b947be76e2843bc076ae80b41d2e37305c5b432145a75f7fd75c7e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:0a:c9:6a:60:38:90:80:0f:e7:8e:70:2f: 5b:ed:44:47:e5:d0:7f:73:d1:97:98:ba:07:5d:0b: 8e:49:9e:50:ed:ee:30:70:79:b7:fc:bc:d3:d9:b3: 03:75:84:b1:ee:d5:06:97:ed:b5:67:5a:cc:2b:0e: eb:bb:d4:cf:5d:2f:c2:f7:2f:d7:fe:6c:96:30:01: 42:7b:b2:2d:2a:ae:7c:86:53:51:d4:24:09:1d:12: b1:eb:0d:28:c0:dc:12:9c:a3:14:ea:2a:bf:b3:f9: c3:81:96:83:ac:8d:7c:4e:af:f9:5f:9a:5f:7e:cd: 90:5c:87:24:dc:2e:07:51:0f:b1:9a:f0:18:e6:4f: 6a:b3:5d:a0:cf:42:44:c2:9f:c9:98:8f:9d:aa:7d: fc:c9:a8:46:38:a5:be:3c:80:75:36:18:e3:4a:6f: 94:28:3b:62:82:1d:9a:2f:60:f6:0c:71:35:c9:8a: bd:7a:36:fb:a1:d3:c9:0c:70:25:83:f4:ef:7a:1f: d9:f3:82:03:da:cc:f9:a9:34:08:1d:25:94:9b:3f: 1f:21:ee:5e:75:c6:51:fa:5a:4a:00:b5:74:f3:34: ab:96:1a:06:c3:b1:f5:ce:a9:93:cb:d8:3d:39:e3: 21:ab:9b:75:1c:22:b4:b6:a2:96:2d:48:8d:96:4d: 32:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:74:CB:2C:5D:E1:0B:55:E3:E2:19:06:26:CE:15:23:4C:C9:B1:6C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73488a43-875c-415a-9969-c278b245b9fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:e080::/48 Signature Algorithm: sha256WithRSAEncryption 60:4f:dc:9b:38:ce:b6:b8:9e:02:fd:07:d7:69:2e:9a:17:8a: b4:e8:34:92:df:78:ce:4e:e9:1c:f1:6d:cc:c5:9f:a3:d4:71: 46:b4:54:5d:8d:95:18:f7:2b:00:08:31:08:fd:f8:b4:92:11: ff:9f:e6:49:ed:b6:6b:f9:89:2c:11:33:35:91:d9:b3:cf:e7: dd:c6:b1:2b:ff:5c:00:80:a3:6f:9c:67:65:2d:87:a7:fb:c7: 9d:e3:49:01:2d:fe:1f:c5:dd:6e:4d:04:8c:02:6b:35:22:02: 8a:e1:78:a2:11:72:2d:97:3c:fa:7b:3a:69:c4:5e:b2:0d:3f: 1a:c3:4f:0f:a8:6f:5d:57:6f:c7:ba:df:50:17:25:34:7f:e6: 3c:97:8c:63:8c:88:9f:63:cd:49:3f:7a:46:af:59:1b:bf:e7: a2:25:a1:cf:66:85:67:48:74:3d:ab:bc:b2:d9:19:ea:21:8d: f7:a8:51:38:f0:67:fe:fc:2f:c7:54:57:e2:57:c9:87:cc:1f: 90:d6:31:cf:d1:8c:cb:c8:47:6c:48:b2:03:5d:27:27:cc:ab: 32:bc:16:24:54:97:ca:84:02:95:d1:7c:00:4f:b0:90:be:96: 64:86:5c:0b:99:e3:7d:06:fd:3c:7a:2a:1b:b9:c7:8f:32:a2: dd:c4:10:b4 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUZfxiMDCuxfIf1PbUuSqaRytefvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMxMDdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDE5ODk2YTE2MWI5NDdiZTc2ZTI4NDNiYzA3NmFlODBiNDFkMmUzNzMwNWM1 YjQzMjE0NWE3NWY3ZmQ3NWM3ZTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvoCslqYDiQgA/njnAvW+1ER+XQf3PRl5i6B10LjkmeUO3uMHB5t/y809mz A3WEse7VBpfttWdazCsO67vUz10vwvcv1/5sljABQnuyLSqufIZTUdQkCR0SsesN KMDcEpyjFOoqv7P5w4GWg6yNfE6v+V+aX37NkFyHJNwuB1EPsZrwGOZParNdoM9C RMKfyZiPnap9/MmoRjilvjyAdTYY40pvlCg7YoIdmi9g9gxxNcmKvXo2+6HTyQxw JYP073of2fOCA9rM+ak0CB0llJs/HyHuXnXGUfpaSgC1dPM0q5YaBsOx9c6pk8vY PTnjIaubdRwitLaili1IjZZNMiUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT8dMss XeELVePiGQYmzhUjTMmxbDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzM0ODhhNDMtODc1Yy00MTVhLTk5NjktYzI3OGIyNDViOWZiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H/g gDANBgkqhkiG9w0BAQsFAAOCAQEAYE/cmzjOtrieAv0H12kumheKtOg0kt94zk7p HPFtzMWfo9RxRrRUXY2VGPcrAAgxCP34tJIR/5/mSe22a/mJLBEzNZHZs8/n3cax K/9cAICjb5xnZS2Hp/vHneNJAS3+H8Xdbk0EjAJrNSICiuF4ohFyLZc8+ns6acRe sg0/GsNPD6hvXVdvx7rfUBclNH/mPJeMY4yIn2PNST96Rq9ZG7/noiWhz2aFZ0h0 Pau8stkZ6iGN96hROPBn/vwvx1RX4lfJh8wfkNYxz9GMy8hHbEiyA10nJ8yrMrwW JFSXyoQCldF8AE+wkL6WZIZcC5njfQb9PHoqG7nHjzKi3cQQtA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:06 2026 by rpki-client