This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa File: 88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa (raw, json) Hash identifier: IFIEobrnP1iPmIiACG3P6c+10d9HfBkk7VYaqCcBxc8= Subject key identifier: 24:F0:52:44:77:16:76:94:EA:7F:E8:21:89:25:4D:AB:44:AC:6E:76 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 59CC64404EC6998A06A79A318E7FF9985C6A3846 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa Signing time: Wed 10 Dec 2025 05:41:15 +0000 ROA not before: Wed 10 Dec 2025 05:41:15 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d012:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cc:64:40:4e:c6:99:8a:06:a7:9a:31:8e:7f:f9:98:5c:6a:38:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:41:15 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=0cec604ff77604af256916768124233e32879875a69c3f82b957064c510ff5d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:b6:cc:5d:7a:72:94:c2:f2:a9:c6:17:d2: 45:c7:cf:4b:c0:52:a3:59:6f:3a:ef:f9:83:31:dc: 07:05:6e:b3:98:28:e0:3b:44:bc:1a:c5:73:c6:21: 32:f1:4a:e0:29:a1:b4:a7:7e:ea:91:a3:1c:3a:d1: 4e:cd:85:ab:2f:00:2f:f6:62:f8:9d:89:d7:53:96: 99:1e:72:ff:d8:0a:19:35:3e:2c:94:a7:a2:90:55: 1e:84:b9:94:89:3d:0f:41:4e:d4:0b:30:f7:1a:1e: 66:d3:bf:e2:94:ac:34:68:a1:c4:81:10:28:fd:f3: aa:d1:88:11:41:3a:9e:4b:49:98:1d:4e:5a:ee:ce: 5a:28:b1:52:08:02:6b:b9:65:84:ee:13:a3:f6:e8: 76:26:2c:24:c0:1d:29:fe:0c:3c:68:f8:d9:4d:27: 2f:35:61:93:05:81:7c:7d:26:0e:02:0d:92:31:44: 56:fb:e1:00:a3:7c:3e:dc:69:b9:5b:67:84:28:35: 7e:e8:d5:e5:07:ce:f9:87:7e:c8:8a:0b:e4:1b:d1: d0:9d:9e:ad:ef:c7:4e:fc:ff:10:64:32:2c:5e:e8: c8:c8:0b:65:ee:d5:18:80:06:51:fc:04:ca:8f:77: 25:cb:79:64:73:ab:65:28:0e:a1:06:9e:e1:18:52: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:52:44:77:16:76:94:EA:7F:E8:21:89:25:4D:AB:44:AC:6E:76 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d012:c00::/38 Signature Algorithm: sha256WithRSAEncryption 42:0f:f4:2b:28:f3:64:b8:03:1d:59:e6:d5:24:24:0e:76:38: 5e:f4:44:a7:0c:8d:19:94:2d:f6:b8:dd:a0:a2:1d:91:44:10: 1e:2b:57:2c:ce:33:e0:da:98:22:32:5f:87:7f:02:81:6e:08: d1:44:67:8b:4f:94:9c:c8:c1:65:18:81:b6:75:ef:83:34:1d: 8d:97:fc:94:36:2b:06:51:e5:cb:98:fb:56:30:95:bc:df:2f: 6c:9e:19:3a:91:a2:e3:7b:eb:48:b0:b0:59:69:f1:cc:0c:21: 1f:57:30:e8:61:68:37:37:37:96:b5:e5:2a:0b:02:17:0c:73: 13:88:ac:29:d0:36:98:4e:5f:b5:c9:7f:6e:2c:7b:fe:dd:f6: 9f:d2:6a:22:90:30:8e:6f:92:64:dc:d6:32:1d:d1:af:15:df: 25:d7:29:a7:98:b6:24:b3:96:d2:2b:fa:52:fd:36:02:4b:b5: 05:d3:b5:1f:eb:c4:27:8a:f9:5c:29:aa:25:cf:02:6c:c1:9d: b5:5a:d8:9d:df:af:11:a4:5c:45:86:d5:2a:1c:03:65:71:4c: 88:e3:2f:31:bc:fe:7b:e5:5a:ee:eb:35:f3:aa:16:d8:8b:86: 40:62:36:1c:cd:33:22:f1:be:77:b6:39:28:87:5d:00:c6:ba: 1b:a5:d3:4d -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUWcxkQE7GmYoGp5oxjn/5mFxqOEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQxMTVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDBjZWM2MDRmZjc3NjA0YWYyNTY5MTY3NjgxMjQyMzNlMzI4Nzk4NzVhNjlj M2Y4MmI5NTcwNjRjNTEwZmY1ZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI/StsxdenKUwvKpxhfSRcfPS8BSo1lvOu/5gzHcBwVus5go4DtEvBrFc8Yh MvFK4CmhtKd+6pGjHDrRTs2Fqy8AL/Zi+J2J11OWmR5y/9gKGTU+LJSnopBVHoS5 lIk9D0FO1Asw9xoeZtO/4pSsNGihxIEQKP3zqtGIEUE6nktJmB1OWu7OWiixUggC a7llhO4To/bodiYsJMAdKf4MPGj42U0nLzVhkwWBfH0mDgINkjFEVvvhAKN8Ptxp uVtnhCg1fujV5QfO+Yd+yIoL5BvR0J2ere/HTvz/EGQyLF7oyMgLZe7VGIAGUfwE yo93Jct5ZHOrZSgOoQae4RhSK6ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQk8FJE dxZ2lOp/6CGJJU2rRKxudjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODg4MDBmOWYtNDhmZC00NDQyLWE2ZjYtN2E1MDRlMWNiM2IxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BIM MA0GCSqGSIb3DQEBCwUAA4IBAQBCD/QrKPNkuAMdWebVJCQOdjhe9ESnDI0ZlC32 uN2goh2RRBAeK1cszjPg2pgiMl+HfwKBbgjRRGeLT5ScyMFlGIG2de+DNB2Nl/yU NisGUeXLmPtWMJW83y9snhk6kaLje+tIsLBZafHMDCEfVzDoYWg3NzeWteUqCwIX DHMTiKwp0DaYTl+1yX9uLHv+3faf0moikDCOb5Jk3NYyHdGvFd8l1ymnmLYks5bS K/pS/TYCS7UF07Uf68QnivlcKaolzwJswZ21Wtid368RpFxFhtUqHANlcUyI4y8x vP575Vru6zXzqhbYi4ZAYjYczTMi8b53tjkoh10AxrobpdNN -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:33 2026 by rpki-client