This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa File: 915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa (raw, json) Hash identifier: o+hgoxc3G0TrYwky1UYGTu6U0ywOVjji7LunXC46LRU= Subject key identifier: 04:CF:F5:57:B7:6F:E1:5D:1A:79:22:B8:FA:71:C4:28:2B:56:C3:75 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 33B4610867F1D3AA9C7F7750E04AFABB5D2A3590 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa Signing time: Wed 10 Dec 2025 06:20:42 +0000 ROA not before: Wed 10 Dec 2025 06:20:42 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d010:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b4:61:08:67:f1:d3:aa:9c:7f:77:50:e0:4a:fa:bb:5d:2a:35:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:20:42 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=320d505ccda5b73537004292bcd2a27d8a8ae26d2121b4ae36589ac1031e4bf0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:62:7b:1e:28:50:1e:b1:a4:a5:c0:3c:ee: 63:cc:43:dd:0f:da:9d:ff:f1:c6:44:ab:80:8f:3e: 33:fb:1c:de:a0:f3:db:72:a4:02:8a:ff:f5:39:e8: 12:4b:44:34:4f:74:45:45:47:23:f4:ba:3a:b4:be: db:70:4d:21:1d:39:5d:5f:3e:69:29:11:61:b2:77: e8:a6:c4:e6:a1:31:90:82:10:6a:67:e5:73:99:4b: 0c:3a:68:c8:c7:2e:3f:44:05:2e:c0:4a:7b:53:90: 12:73:8c:17:20:b4:f0:95:87:67:f3:d9:fd:bf:6e: 4b:71:0e:79:1f:d5:e9:7f:0a:77:34:6c:e7:8e:1d: 9d:f2:1a:34:3e:3e:c8:2b:8e:3c:ed:66:d6:a1:7d: 9e:fa:65:9c:bc:00:f0:bb:8d:d0:b8:e6:0a:83:e8: 1f:48:87:d5:41:ec:09:5a:d9:1d:34:fe:4b:fc:8b: 19:01:70:ef:3f:8d:17:60:5c:b8:d8:5b:54:26:6b: bb:c4:63:fd:cf:e4:20:13:08:6c:01:63:c0:fd:17: cc:bf:41:3f:b5:37:d3:98:74:58:6b:eb:b0:d5:aa: cb:13:06:f5:50:84:0c:39:a4:04:4a:38:0f:96:71: 3a:f1:46:94:2d:dc:bd:1c:6e:4c:e4:2a:c6:1e:f7: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CF:F5:57:B7:6F:E1:5D:1A:79:22:B8:FA:71:C4:28:2B:56:C3:75 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d010:8000::/36 Signature Algorithm: sha256WithRSAEncryption 4d:07:a5:22:ee:78:58:02:8a:a3:3f:fe:7e:59:6a:c4:d2:40: 1b:59:6a:27:a7:8d:92:61:a8:80:3e:4d:24:0d:06:2c:db:2c: 71:30:b5:ee:bb:1b:b1:b5:bf:4e:c2:7f:f3:4f:c4:b3:a7:5c: 50:99:8a:fc:f8:4c:a3:a2:68:31:bb:46:09:70:7c:a6:f8:2c: 5f:77:5b:da:c9:56:35:ef:ad:27:6d:42:b3:df:2b:69:09:87: 8d:18:d6:7e:6f:77:17:5d:69:db:9b:e6:d2:84:21:42:1b:e5: 4b:a5:7c:b1:6c:af:8d:7f:a4:ab:ce:46:13:92:ab:8c:5c:e1: 3d:4a:0e:17:0a:29:bd:0a:a7:00:60:8d:b9:e4:34:e8:6d:14: 32:c5:cd:05:2a:77:e3:57:cf:f0:07:ae:6f:e6:e2:4c:ed:17: a6:60:64:a7:a3:82:83:41:89:91:82:67:47:69:78:a7:37:b3: d1:50:0c:e0:4d:4b:8f:1c:1e:43:aa:e6:ea:59:ac:f5:b9:dc: 3a:44:42:d3:f6:46:ae:fb:82:e7:3e:e1:df:3b:9d:3c:32:fb: 6e:db:52:3b:fb:28:9e:d5:9d:66:8b:0d:4f:df:1f:f4:17:d1: 13:3a:3a:ae:6c:67:c2:13:55:47:18:91:28:e7:12:fb:92:db: 61:1e:61:89 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUM7RhCGfx06qcf3dQ4Er6u10qNZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIwNDJaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDMyMGQ1MDVjY2RhNWI3MzUzNzAwNDI5MmJjZDJhMjdkOGE4YWUyNmQyMTIx YjRhZTM2NTg5YWMxMDMxZTRiZjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO0HYnseKFAesaSlwDzuY8xD3Q/anf/xxkSrgI8+M/sc3qDz23KkAor/9Tno EktENE90RUVHI/S6OrS+23BNIR05XV8+aSkRYbJ36KbE5qExkIIQamflc5lLDDpo yMcuP0QFLsBKe1OQEnOMFyC08JWHZ/PZ/b9uS3EOeR/V6X8KdzRs544dnfIaND4+ yCuOPO1m1qF9nvplnLwA8LuN0LjmCoPoH0iH1UHsCVrZHTT+S/yLGQFw7z+NF2Bc uNhbVCZru8Rj/c/kIBMIbAFjwP0XzL9BP7U305h0WGvrsNWqyxMG9VCEDDmkBEo4 D5ZxOvFGlC3cvRxuTOQqxh73338CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQEz/VX t2/hXRp5Irj6ccQoK1bDdTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTE1Y2NlZjYtYjA2Zi00ZTExLWJlOWEtOGI5YTIyOWZmNTJiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BCA MA0GCSqGSIb3DQEBCwUAA4IBAQBNB6Ui7nhYAoqjP/5+WWrE0kAbWWonp42SYaiA Pk0kDQYs2yxxMLXuuxuxtb9Own/zT8Szp1xQmYr8+Eyjomgxu0YJcHym+Cxfd1va yVY1760nbUKz3ytpCYeNGNZ+b3cXXWnbm+bShCFCG+VLpXyxbK+Nf6SrzkYTkquM XOE9Sg4XCim9CqcAYI255DTobRQyxc0FKnfjV8/wB65v5uJM7RemYGSno4KDQYmR gmdHaXinN7PRUAzgTUuPHB5DqubqWaz1udw6RELT9kau+4LnPuHfO508Mvtu21I7 +yie1Z1miw1P3x/0F9ETOjqubGfCE1VHGJEo5xL7ktthHmGJ -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:28 2026 by rpki-client