This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa File: 98ae6903-6674-49ca-b677-ce1e731619a3.roa (raw, json) Hash identifier: k5gYaVoSHGo57jTxPUnAJn/MK7VzlY7lSpulTgcQQ6c= Subject key identifier: CA:EC:10:22:8B:1C:0B:A3:0B:7C:BB:96:D4:AA:52:FB:18:60:2A:A3 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5972658F508208673D606FCCD641BC7D19477EEC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa Signing time: Thu 11 Dec 2025 00:00:09 +0000 ROA not before: Thu 11 Dec 2025 00:00:09 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d014:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:72:65:8f:50:82:08:67:3d:60:6f:cc:d6:41:bc:7d:19:47:7e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 11 00:00:09 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=6798f0ce66632b60d410b3f882caaacd9081cd1cb1a4906b05c4671335c90c9f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:be:16:0d:c9:3b:cc:e6:a5:40:25:d2:66: 4f:22:94:2b:6e:1a:96:73:e4:25:05:61:5f:51:f6: 8a:65:ae:c3:af:c6:c0:90:3c:73:16:60:5c:ff:fc: 94:17:8c:6c:78:d5:8c:64:9b:34:4a:c2:96:a7:46: 82:62:18:0c:8e:e8:9f:d8:ba:24:b3:ff:3b:a3:38: b8:43:a7:89:a5:83:29:23:63:a3:62:0f:e7:98:35: 6b:e2:8a:1d:16:af:ca:df:0f:31:2c:26:38:58:47: e7:ee:03:16:69:57:4e:56:b7:8e:47:66:63:aa:e0: 70:fb:9a:7b:b5:da:87:5c:5a:b4:cc:96:ce:79:ba: 37:7f:f4:cf:f0:38:5a:32:b0:3d:c9:e7:5d:67:18: 66:5f:b0:81:c5:d0:79:ec:38:03:c6:af:6f:08:55: b4:06:eb:49:c8:50:b0:65:26:57:32:f6:3f:38:b3: ad:f2:0a:a8:7d:28:53:50:eb:df:ed:eb:a8:fd:1c: f2:3c:1d:28:c9:df:ba:d4:0d:3f:86:a6:20:3f:2d: ce:92:82:e0:1c:74:c0:d9:a5:17:98:a3:77:62:79: db:dd:93:9c:69:98:2f:73:ec:9a:09:20:7c:d9:90: a2:77:b3:d3:7e:fc:49:77:d9:aa:ad:54:37:58:4d: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:10:22:8B:1C:0B:A3:0B:7C:BB:96:D4:AA:52:FB:18:60:2A:A3 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d014:1c00::/38 Signature Algorithm: sha256WithRSAEncryption 4a:36:21:9e:eb:0f:e2:da:6f:98:08:09:65:a0:dd:30:98:13: 2f:ea:30:9a:85:64:2c:1a:51:fc:be:fb:c5:af:79:e6:85:dc: 5f:ed:80:8e:d7:6d:41:4a:0b:86:b5:4c:d9:5c:20:87:36:47: 7c:e8:bd:e5:b1:7f:d8:e9:43:72:2f:ae:24:20:13:4e:c7:cf: 90:bb:b9:65:28:ca:e1:cc:67:c4:87:19:20:20:89:dc:0e:df: 79:33:62:aa:bf:e7:5e:37:bc:d3:5e:32:78:bd:c1:bb:49:82: 8e:fa:4d:55:c2:f8:dc:67:e1:d9:db:8a:03:ed:9d:17:69:45: d7:73:6c:b3:82:62:e0:c6:58:6e:a4:83:83:42:68:fa:fe:d7: a1:1a:2e:34:e5:4b:1b:41:fd:e4:0a:e5:7a:b5:c8:79:d8:02: 4e:af:97:56:15:ea:8f:fb:d5:6e:30:9a:ec:c8:4d:70:25:90: 1b:36:c5:69:e7:f0:73:db:fa:22:c4:58:6e:cf:31:fb:9c:fc: 68:dd:3f:0f:91:6b:01:16:be:09:a5:82:a4:44:a3:4f:09:f9: d6:40:28:09:aa:0c:45:14:46:6b:a3:ca:09:1e:42:de:19:ed: 66:58:5e:8d:a2:d7:a5:e7:4c:03:57:b1:15:13:9b:42:6f:fb: 40:19:ca:8a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUWXJlj1CCCGc9YG/M1kG8fRlHfuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTEwMDAwMDlaFw0yNjAzMTEyMzU5NTlaMHoxSTBHBgNV BAUTQDY3OThmMGNlNjY2MzJiNjBkNDEwYjNmODgyY2FhYWNkOTA4MWNkMWNiMWE0 OTA2YjA1YzQ2NzEzMzVjOTBjOWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQRvhYNyTvM5qVAJdJmTyKUK24alnPkJQVhX1H2imWuw6/GwJA8cxZgXP/8 lBeMbHjVjGSbNErClqdGgmIYDI7on9i6JLP/O6M4uEOniaWDKSNjo2IP55g1a+KK HRavyt8PMSwmOFhH5+4DFmlXTla3jkdmY6rgcPuae7Xah1xatMyWznm6N3/0z/A4 WjKwPcnnXWcYZl+wgcXQeew4A8avbwhVtAbrSchQsGUmVzL2PzizrfIKqH0oU1Dr 3+3rqP0c8jwdKMnfutQNP4amID8tzpKC4Bx0wNmlF5ijd2J5292TnGmYL3Psmgkg fNmQonez0378SXfZqq1UN1hNyV8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTK7BAi ixwLowt8u5bUqlL7GGAqozAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OThhZTY5MDMtNjY3NC00OWNhLWI2NzctY2UxZTczMTYxOWEzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BQc MA0GCSqGSIb3DQEBCwUAA4IBAQBKNiGe6w/i2m+YCAlloN0wmBMv6jCahWQsGlH8 vvvFr3nmhdxf7YCO121BSguGtUzZXCCHNkd86L3lsX/Y6UNyL64kIBNOx8+Qu7ll KMrhzGfEhxkgIIncDt95M2Kqv+deN7zTXjJ4vcG7SYKO+k1VwvjcZ+HZ24oD7Z0X aUXXc2yzgmLgxlhupIODQmj6/tehGi405UsbQf3kCuV6tch52AJOr5dWFeqP+9Vu MJrsyE1wJZAbNsVp5/Bz2/oixFhuzzH7nPxo3T8PkWsBFr4JpYKkRKNPCfnWQCgJ qgxFFEZro8oJHkLeGe1mWF6Notel50wDV7EVE5tCb/tAGcqK -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:26 2026 by rpki-client