This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa File: 773f4606-0d98-4350-9ccd-3aba599136ef.roa (raw, json) Hash identifier: wNXKt1ifBqyEmqJ7JD9b8xWKzBXLZvfJV5WLczz+HqY= Subject key identifier: 05:95:5B:C3:99:AD:AF:87:1D:92:0F:20:DB:80:93:50:6C:0A:A4:7F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 64A49316171449D277DB05EA7DA596281ED93BC8 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa Signing time: Mon 08 Dec 2025 02:10:12 +0000 ROA not before: Mon 08 Dec 2025 02:10:12 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d038:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a4:93:16:17:14:49:d2:77:db:05:ea:7d:a5:96:28:1e:d9:3b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:12 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=62af0da10378f4b13b3fa8d7a94d9eff695cb4767123d458831f4da56c6d4ae2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f0:7c:ec:3f:47:ec:2c:63:14:27:26:75:b0: 53:c0:c2:9a:e0:bc:6e:52:aa:c8:47:fc:4b:ba:2c: 53:14:48:7a:9a:ad:c0:45:55:09:c4:7e:99:e7:06: c6:d4:f4:84:e1:ce:70:50:19:0a:0a:d5:5c:d8:7d: 61:f8:53:bd:07:35:48:df:d7:41:64:09:ba:ed:ed: 18:1b:01:0c:f8:aa:bd:cc:83:6e:bc:ce:05:fd:30: 32:78:7a:8f:42:0f:3a:b8:ca:30:e1:3f:39:aa:ef: 1d:02:07:55:2a:42:81:db:1d:6b:d2:8e:68:5b:4b: 86:e0:ca:17:1c:91:1f:d5:39:ad:90:4f:a5:53:e9: 36:e0:e0:85:aa:d2:70:e0:fe:1d:a1:72:72:58:03: ac:52:e7:1c:1e:9c:81:e9:cf:61:04:48:f7:d4:6e: 66:77:78:a4:5e:f9:3e:00:ea:5d:7d:a3:21:83:3f: 54:06:44:16:3b:16:8e:fa:85:1c:c7:50:7c:c0:2d: fe:eb:ae:36:ea:1a:78:b4:12:2c:bd:0f:f6:c7:12: d4:73:30:df:02:b1:68:75:4d:bd:83:f7:3b:64:52: 37:e2:c7:79:51:a4:3a:88:6a:e2:1f:b2:45:81:92: 88:4f:07:70:fd:10:be:4c:67:6f:d6:5e:e3:b7:1c: 63:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:95:5B:C3:99:AD:AF:87:1D:92:0F:20:DB:80:93:50:6C:0A:A4:7F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d038:800::/40 Signature Algorithm: sha256WithRSAEncryption 2f:88:84:8a:91:a8:5f:5b:92:5b:41:0e:8b:f4:ee:88:14:40: 44:d9:74:ac:1a:1e:09:aa:a3:5d:7a:ed:88:77:9d:6f:d6:96: 4e:24:a1:0c:e4:a4:21:9f:43:bd:28:b3:21:c7:20:27:76:c4: ee:03:e0:2b:a3:3a:29:b2:cd:6f:31:3b:ea:fd:cd:cf:13:3f: 2f:4c:3b:75:ab:2c:ce:76:72:3e:96:18:82:73:9f:96:c5:40: 23:57:2c:4a:71:01:8f:3c:ee:93:8a:91:78:86:43:cb:0e:fb: 6f:ce:8e:cd:cf:5e:cb:57:5d:f0:30:08:d4:cf:4b:aa:47:99: 86:e0:fa:60:e7:9b:23:93:4f:d0:c7:c9:88:22:fa:b8:28:65: ac:e4:a1:9a:9e:73:6d:37:7c:c8:8d:06:b7:87:a6:95:84:c8: e2:f9:c7:c7:c2:29:76:41:03:84:5d:4f:7f:98:c9:15:46:36: 43:29:25:a2:31:ef:e5:ba:b4:eb:00:06:75:bc:f7:97:84:4a: 09:ad:b7:b8:95:84:54:cd:b4:2d:8f:3c:e7:05:cc:8c:d3:4e: 8e:ed:c1:82:be:9d:8b:dc:dd:24:69:44:51:2e:5b:b7:53:5e: 6d:6f:19:fe:d4:d9:ec:71:74:45:18:ea:97:44:46:cd:6d:6b: b3:77:ce:5c -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZKSTFhcUSdJ32wXqfaWWKB7ZO8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMTJaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDYyYWYwZGExMDM3OGY0YjEzYjNmYThkN2E5NGQ5ZWZmNjk1Y2I0NzY3MTIz ZDQ1ODgzMWY0ZGE1NmM2ZDRhZTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIzwfOw/R+wsYxQnJnWwU8DCmuC8blKqyEf8S7osUxRIepqtwEVVCcR+mecG xtT0hOHOcFAZCgrVXNh9YfhTvQc1SN/XQWQJuu3tGBsBDPiqvcyDbrzOBf0wMnh6 j0IPOrjKMOE/OarvHQIHVSpCgdsda9KOaFtLhuDKFxyRH9U5rZBPpVPpNuDgharS cOD+HaFyclgDrFLnHB6cgenPYQRI99RuZnd4pF75PgDqXX2jIYM/VAZEFjsWjvqF HMdQfMAt/uuuNuoaeLQSLL0P9scS1HMw3wKxaHVNvYP3O2RSN+LHeVGkOohq4h+y RYGSiE8HcP0Qvkxnb9Ze47ccY7cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQFlVvD ma2vhx2SDyDbgJNQbAqkfzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzczZjQ2MDYtMGQ5OC00MzUwLTljY2QtM2FiYTU5OTEzNmVmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DgI MA0GCSqGSIb3DQEBCwUAA4IBAQAviISKkahfW5JbQQ6L9O6IFEBE2XSsGh4JqqNd eu2Id51v1pZOJKEM5KQhn0O9KLMhxyAndsTuA+Arozopss1vMTvq/c3PEz8vTDt1 qyzOdnI+lhiCc5+WxUAjVyxKcQGPPO6TipF4hkPLDvtvzo7Nz17LV13wMAjUz0uq R5mG4Ppg55sjk0/Qx8mIIvq4KGWs5KGannNtN3zIjQa3h6aVhMji+cfHwil2QQOE XU9/mMkVRjZDKSWiMe/lurTrAAZ1vPeXhEoJrbe4lYRUzbQtjzznBcyM006O7cGC vp2L3N0kaURRLlu3U15tbxn+1NnscXRFGOqXREbNbWuzd85c -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:19 2026 by rpki-client