This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa File: a1796bea-01c9-41b7-b13d-6932c4f36a42.roa (raw, json) Hash identifier: i/MribDB94RHG2Kq0J9Hn3DKDkbivdiyhKA86iTzSDU= Subject key identifier: 09:97:3A:08:48:8F:2B:65:4F:07:C9:01:B9:B5:A9:85:EF:C8:AD:F9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0681B7DDCCF3ECA2FF4817DF249446B35C779232 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa Signing time: Wed 10 Dec 2025 05:40:47 +0000 ROA not before: Wed 10 Dec 2025 05:40:47 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:81:b7:dd:cc:f3:ec:a2:ff:48:17:df:24:94:46:b3:5c:77:92:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:40:47 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=82e41e3bce4cd58e399c28a66f332daceacd8465941105accaf0810659b717f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:93:76:4c:b3:e0:28:b6:6c:bb:65:e0:19:7c: 01:92:77:30:66:ea:54:be:fe:f2:8e:b5:8b:80:3e: 60:07:ab:f0:bd:96:a0:b9:b9:fc:a6:ee:32:63:0e: 82:6b:45:a0:c7:57:02:b4:68:26:b2:d7:40:c1:62: ad:5f:22:1b:ce:da:a8:76:7b:6f:83:74:04:e4:eb: 92:ca:05:69:73:22:af:d3:78:b6:0a:a2:30:8f:f7: 58:94:d9:04:d8:6e:ac:a8:dd:c4:49:b0:f3:0d:57: e8:1b:d6:e4:2b:db:2b:d4:91:cd:8b:0b:04:f9:4f: 36:d7:43:2a:63:ed:af:66:e6:1e:c4:7c:8c:a1:0a: bf:87:9e:75:ea:e9:11:55:c6:f1:08:8c:4d:b2:18: 45:c0:85:c1:e8:90:ed:79:9b:f6:30:47:7b:be:87: df:15:d3:4c:6f:de:d8:1b:1e:8d:8b:b2:0e:f5:ab: 5d:78:75:df:d4:c4:b1:5c:67:16:97:66:22:e4:5b: b2:ae:e5:9d:10:62:46:f0:68:1d:ff:a3:a0:c9:5d: 1d:76:93:b6:9b:c8:c7:57:3a:fa:7c:d2:24:54:b6: 3b:76:c3:09:b1:70:cc:ac:65:04:41:29:41:98:ef: a0:43:50:27:dc:97:21:c4:69:04:e0:1d:a8:1c:35: 8d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:3A:08:48:8F:2B:65:4F:07:C9:01:B9:B5:A9:85:EF:C8:AD:F9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1796bea-01c9-41b7-b13d-6932c4f36a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:a000::/40 Signature Algorithm: sha256WithRSAEncryption 43:68:d6:91:28:27:de:74:c0:6a:57:c4:26:3c:9f:ac:01:b9: 44:19:06:d0:cb:5b:0f:90:2b:be:af:dd:3d:52:ec:fd:1f:a8: e1:b7:57:92:79:bb:0d:0c:d9:8d:04:51:10:05:bc:82:d6:23: f0:60:89:f5:55:ef:e6:7b:eb:51:21:ec:d4:7b:9b:46:84:24: 11:0b:a0:70:14:5c:17:0c:6d:9a:7b:62:b6:c3:e7:49:d0:cd: 6a:b5:a9:84:72:07:43:51:6b:28:c0:b7:12:85:da:7f:c6:df: a2:62:b4:b9:7b:00:54:e7:63:f2:36:49:69:76:5d:36:30:5a: f9:1b:d7:71:2d:60:28:2f:a8:24:77:0f:ba:3e:10:47:44:5a: 44:ac:76:83:ca:22:f6:60:7f:b7:0c:0b:63:c9:69:50:d1:9d: b6:d5:6e:65:b8:e3:07:2c:3d:c7:c8:2e:8f:0b:5b:81:91:36: c8:71:f8:e2:13:ab:50:cf:f6:8c:0a:5a:4e:2c:9a:db:0d:5e: 59:ae:3c:59:88:56:9d:ca:63:77:49:66:ef:4a:86:7a:03:c2: 83:5d:1c:74:8a:bd:5d:46:f3:e7:a7:21:29:c5:46:f0:70:d2: 55:14:97:1e:e5:0e:c0:66:a2:a1:1a:30:d1:0c:a0:f8:d4:17: 61:ec:d7:f0 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUBoG33czz7KL/SBffJJRGs1x3kjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQwNDdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDgyZTQxZTNiY2U0Y2Q1OGUzOTljMjhhNjZmMzMyZGFjZWFjZDg0NjU5NDEx MDVhY2NhZjA4MTA2NTliNzE3ZjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO6Tdkyz4Ci2bLtl4Bl8AZJ3MGbqVL7+8o61i4A+YAer8L2WoLm5/KbuMmMO gmtFoMdXArRoJrLXQMFirV8iG87aqHZ7b4N0BOTrksoFaXMir9N4tgqiMI/3WJTZ BNhurKjdxEmw8w1X6BvW5CvbK9SRzYsLBPlPNtdDKmPtr2bmHsR8jKEKv4eederp EVXG8QiMTbIYRcCFweiQ7Xmb9jBHe76H3xXTTG/e2BsejYuyDvWrXXh139TEsVxn FpdmIuRbsq7lnRBiRvBoHf+joMldHXaTtpvIx1c6+nzSJFS2O3bDCbFwzKxlBEEp QZjvoENQJ9yXIcRpBOAdqBw1jXcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQJlzoI SI8rZU8HyQG5tamF78it+TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTE3OTZiZWEtMDFjOS00MWI3LWIxM2QtNjkzMmM0ZjM2YTQyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DGg MA0GCSqGSIb3DQEBCwUAA4IBAQBDaNaRKCfedMBqV8QmPJ+sAblEGQbQy1sPkCu+ r909Uuz9H6jht1eSebsNDNmNBFEQBbyC1iPwYIn1Ve/me+tRIezUe5tGhCQRC6Bw FFwXDG2ae2K2w+dJ0M1qtamEcgdDUWsowLcShdp/xt+iYrS5ewBU52PyNklpdl02 MFr5G9dxLWAoL6gkdw+6PhBHRFpErHaDyiL2YH+3DAtjyWlQ0Z221W5luOMHLD3H yC6PC1uBkTbIcfjiE6tQz/aMClpOLJrbDV5ZrjxZiFadymN3SWbvSoZ6A8KDXRx0 ir1dRvPnpyEpxUbwcNJVFJce5Q7AZqKhGjDRDKD41Bdh7Nfw -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:12 2026 by rpki-client