This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa File: 9843a73f-18f2-433e-b871-f493b0645337.roa (raw, json) Hash identifier: u6inQKC5ZXBHZHhBqIWePg5OmwQBIW75THP+6jSaqXU= Subject key identifier: AC:5D:40:84:52:6D:6C:26:2D:6A:F7:22:0C:4F:83:54:C1:6E:9A:83 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 36B2E3A8DD24E3260F042794079BC073EEC2EAA3 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa Signing time: Mon 08 Dec 2025 02:10:14 +0000 ROA not before: Mon 08 Dec 2025 02:10:14 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d03a:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b2:e3:a8:dd:24:e3:26:0f:04:27:94:07:9b:c0:73:ee:c2:ea:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:14 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=5987868cad29928988ade86fadf71272cf5282b27ff86430616ec24e749a470f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:c1:b4:cb:03:5c:88:f0:81:53:76:32:0c: d3:fb:dd:e8:9c:7e:40:18:c1:af:45:b6:07:ae:9e: f2:f2:f9:a6:b1:a3:af:f2:ce:27:43:f2:65:10:b7: d8:ed:26:b5:ad:60:45:ed:52:45:8e:68:fa:b3:95: 26:2e:b9:8a:bb:a0:7a:67:e9:56:78:e0:c8:fc:d5: a5:99:f7:80:f7:0f:63:7f:ee:09:c5:91:f1:6f:fe: f9:15:71:60:ae:b3:e9:43:d3:e1:61:87:85:5e:df: ea:3f:cc:82:24:af:df:52:e9:c2:db:07:80:54:45: 92:70:50:53:7e:ef:a1:ca:ab:a9:79:e0:0e:7f:5b: ab:a8:79:15:38:5f:e2:04:be:77:41:0d:71:ff:3e: ce:7a:6c:8e:ad:76:cb:93:20:6d:9c:0e:58:95:aa: c9:01:60:1f:a1:3a:8e:73:26:e4:b2:0d:88:6a:01: 31:65:5f:64:19:50:c4:61:c5:f9:7f:58:c6:4c:a0: 4c:97:62:b7:8f:04:fe:70:0d:2c:9a:94:7c:2c:9c: ab:cb:e2:27:cc:bb:93:05:a3:19:e9:96:7e:77:d9: 21:3e:ca:24:0f:6f:4f:db:74:ee:83:3c:f9:b0:dc: 19:4b:a8:26:bb:d5:8b:33:90:0f:68:ca:42:0d:ca: 3b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5D:40:84:52:6D:6C:26:2D:6A:F7:22:0C:4F:83:54:C1:6E:9A:83 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d03a:800::/40 Signature Algorithm: sha256WithRSAEncryption 53:0a:73:a9:3a:88:d3:8b:78:6f:e8:11:68:37:15:50:2b:29: 73:73:04:eb:c3:e0:e9:e1:7c:17:af:f1:3f:60:ba:72:ad:4f: 0b:95:50:8d:dc:16:7f:28:7e:32:e1:1f:65:cc:a2:ca:51:4a: f1:e8:78:85:0b:0b:31:91:ab:1c:5c:f3:b9:58:f5:de:6b:89: 7d:14:3d:f1:66:8a:80:5e:24:b0:8c:c3:d8:53:a8:b2:c0:4d: 00:e6:8b:4d:c6:e7:c4:b8:de:8b:bb:ee:f5:6b:86:a6:13:25: e9:74:cf:65:40:ad:53:ea:1b:59:aa:5e:d6:30:8a:20:6d:72: c1:1e:1d:d4:65:a1:2c:8f:58:07:fa:59:2a:ca:dd:6d:7c:e4: a4:44:f6:f2:d1:ea:ad:0e:e4:52:a0:61:51:85:4a:1c:e4:8d: 43:c0:d5:42:fc:b3:42:71:0a:ab:f0:0d:c2:32:27:6e:d8:9e: 23:ec:e4:d7:90:01:ea:a1:0c:e8:5f:e3:86:60:1b:ae:9b:e8: 2d:61:96:4d:83:ac:6f:b6:0b:15:4a:39:cc:52:13:44:d8:29: c1:87:2e:e5:e1:75:1f:78:ad:ba:a5:75:e3:9c:40:69:5d:3d: 38:8a:f9:55:d0:89:be:01:f7:f2:cc:e9:f6:bc:4b:64:9d:0c: 00:b9:82:56 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUNrLjqN0k4yYPBCeUB5vAc+7C6qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMTRaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDU5ODc4NjhjYWQyOTkyODk4OGFkZTg2ZmFkZjcxMjcyY2Y1MjgyYjI3ZmY4 NjQzMDYxNmVjMjRlNzQ5YTQ3MGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANaJwbTLA1yI8IFTdjIM0/vd6Jx+QBjBr0W2B66e8vL5prGjr/LOJ0PyZRC3 2O0mta1gRe1SRY5o+rOVJi65irugemfpVnjgyPzVpZn3gPcPY3/uCcWR8W/++RVx YK6z6UPT4WGHhV7f6j/MgiSv31LpwtsHgFRFknBQU37vocqrqXngDn9bq6h5FThf 4gS+d0ENcf8+znpsjq12y5MgbZwOWJWqyQFgH6E6jnMm5LINiGoBMWVfZBlQxGHF +X9YxkygTJdit48E/nANLJqUfCycq8viJ8y7kwWjGemWfnfZIT7KJA9vT9t07oM8 +bDcGUuoJrvVizOQD2jKQg3KO/sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSsXUCE Um1sJi1q9yIMT4NUwW6agzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTg0M2E3M2YtMThmMi00MzNlLWI4NzEtZjQ5M2IwNjQ1MzM3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DoI MA0GCSqGSIb3DQEBCwUAA4IBAQBTCnOpOojTi3hv6BFoNxVQKylzcwTrw+Dp4XwX r/E/YLpyrU8LlVCN3BZ/KH4y4R9lzKLKUUrx6HiFCwsxkascXPO5WPXea4l9FD3x ZoqAXiSwjMPYU6iywE0A5otNxufEuN6Lu+71a4amEyXpdM9lQK1T6htZql7WMIog bXLBHh3UZaEsj1gH+lkqyt1tfOSkRPby0eqtDuRSoGFRhUoc5I1DwNVC/LNCcQqr 8A3CMidu2J4j7OTXkAHqoQzoX+OGYBuum+gtYZZNg6xvtgsVSjnMUhNE2CnBhy7l 4XUfeK26pXXjnEBpXT04ivlV0Im+AffyzOn2vEtknQwAuYJW -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:45 2025 by rpki-client