This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa File: 91473fe5-f129-48d9-8d23-63d62cec663a.roa (raw, json) Hash identifier: reI4O+d1L/3+6htbxkJLmF4ypu3txR9m7toXd0aqqNI= Subject key identifier: 17:D3:04:47:01:61:7B:A7:C7:8E:41:73:FA:C0:29:05:3E:E3:99:F6 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 43E6DA33596F3B150FCA052D4B17464DEDFCAAC1 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa Signing time: Mon 08 Dec 2025 02:10:15 +0000 ROA not before: Mon 08 Dec 2025 02:10:15 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d038:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e6:da:33:59:6f:3b:15:0f:ca:05:2d:4b:17:46:4d:ed:fc:aa:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:15 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=eb82277a14872991fa5881311deb1fead7ae37534cb54f9c878c87d436132bd7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:e2:d8:e1:6b:31:3e:75:18:b8:99:bb:54: f4:77:e9:16:3d:cc:dc:a1:69:be:58:45:35:4b:6b: bc:0e:ef:6e:e0:07:a6:90:f5:dd:c6:14:07:79:76: 33:9b:29:22:cf:ec:45:ec:58:5f:eb:6c:26:6e:aa: 7d:4a:d0:69:4a:bb:00:b6:89:b8:a7:aa:a1:3b:45: 6a:e5:14:8d:9d:29:32:b3:a8:d5:68:45:e9:30:7c: be:4c:8b:ea:7e:5e:99:cc:3a:88:89:d0:15:3d:44: dc:7c:55:10:1f:3e:8d:49:0a:26:cf:96:7b:5e:14: d6:34:3b:08:46:57:3c:c9:20:69:48:02:33:fe:84: c7:3a:ff:fb:4e:e8:7b:a4:cc:7b:68:0a:95:ec:0f: 1e:10:aa:5b:1a:8c:b5:43:63:79:f2:1a:73:19:d0: 14:15:6b:53:c4:f2:54:a3:7b:82:0d:71:30:2e:06: 6c:4b:0a:9c:32:99:5a:22:31:dd:f1:32:11:af:b6: 21:d4:c1:f3:f6:0f:f7:98:25:da:99:b6:e3:02:fb: e4:c3:84:d6:77:56:b9:34:a5:a4:ed:3f:67:ba:ae: 55:a2:eb:e6:f0:cc:aa:61:11:eb:74:ac:c5:14:43: cc:34:2f:a4:6a:dd:40:f1:c6:87:83:cc:84:bd:9d: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D3:04:47:01:61:7B:A7:C7:8E:41:73:FA:C0:29:05:3E:E3:99:F6 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d038:840::/48 Signature Algorithm: sha256WithRSAEncryption 73:43:28:f4:06:6c:51:80:8a:a0:50:e2:d2:ec:9d:76:f0:25: b1:ab:81:b1:02:dd:aa:dc:fd:4b:34:d6:83:1a:43:08:1e:c1: ed:8b:f0:6c:3c:29:81:5d:71:fb:b3:55:8d:40:0a:c6:79:2d: 61:d2:8a:b2:af:b2:6a:95:0a:f5:61:7f:8a:43:35:a3:8f:b2: d3:fe:ce:55:c9:f8:34:3f:2f:b0:1c:ff:a1:fd:18:e8:24:08: 1f:12:2e:f6:0d:b9:4c:ed:1a:b4:ee:88:b6:e6:44:04:ca:45: fe:1d:44:35:0e:4b:bb:3f:83:e1:30:f2:15:bb:84:16:9b:46: 72:e1:11:0a:6f:90:52:92:ec:75:2f:7f:e9:5c:31:eb:57:61: e1:f9:8a:9c:ff:7f:52:be:2d:6a:ab:ee:87:19:43:46:3b:6d: 5d:39:34:12:6f:5e:cb:32:55:f1:36:e5:eb:31:a6:68:e9:28: 9f:10:b2:e0:eb:f8:66:d4:63:e5:7a:1e:28:5d:9f:fa:25:08: b0:e5:15:d1:9f:1f:76:35:f3:14:6e:ea:c0:78:40:7a:0e:5a: ad:45:81:2a:ec:6e:72:65:84:54:92:1c:87:56:e9:cc:e2:a2: 93:56:a6:d5:64:f1:69:2a:32:ff:81:62:c7:ed:06:26:01:72: 7a:51:8e:c2 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUQ+baM1lvOxUPygUtSxdGTe38qsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMTVaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQGViODIyNzdhMTQ4NzI5OTFmYTU4ODEzMTFkZWIxZmVhZDdhZTM3NTM0Y2I1 NGY5Yzg3OGM4N2Q0MzYxMzJiZDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4U4tjhazE+dRi4mbtU9HfpFj3M3KFpvlhFNUtrvA7vbuAHppD13cYUB3l2 M5spIs/sRexYX+tsJm6qfUrQaUq7ALaJuKeqoTtFauUUjZ0pMrOo1WhF6TB8vkyL 6n5emcw6iInQFT1E3HxVEB8+jUkKJs+We14U1jQ7CEZXPMkgaUgCM/6Exzr/+07o e6TMe2gKlewPHhCqWxqMtUNjefIacxnQFBVrU8TyVKN7gg1xMC4GbEsKnDKZWiIx 3fEyEa+2IdTB8/YP95gl2pm24wL75MOE1ndWuTSlpO0/Z7quVaLr5vDMqmER63Ss xRRDzDQvpGrdQPHGh4PMhL2dIYUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQX0wRH AWF7p8eOQXP6wCkFPuOZ9jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTE0NzNmZTUtZjEyOS00OGQ5LThkMjMtNjNkNjJjZWM2NjNhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DgI QDANBgkqhkiG9w0BAQsFAAOCAQEAc0Mo9AZsUYCKoFDi0uyddvAlsauBsQLdqtz9 SzTWgxpDCB7B7YvwbDwpgV1x+7NVjUAKxnktYdKKsq+yapUK9WF/ikM1o4+y0/7O Vcn4ND8vsBz/of0Y6CQIHxIu9g25TO0atO6ItuZEBMpF/h1ENQ5Luz+D4TDyFbuE FptGcuERCm+QUpLsdS9/6Vwx61dh4fmKnP9/Ur4taqvuhxlDRjttXTk0Em9eyzJV 8Tbl6zGmaOkonxCy4Ov4ZtRj5XoeKF2f+iUIsOUV0Z8fdjXzFG7qwHhAeg5arUWB KuxucmWEVJIch1bpzOKik1am1WTxaSoy/4Fix+0GJgFyelGOwg== -----END CERTIFICATE-----Generated at Fri Jan 2 10:57:08 2026 by rpki-client