This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa File: a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa (raw, json) Hash identifier: f8OxOvgDgCDb4qEhBIvED8jIjZE92hmMw3VlO1QCNpI= Subject key identifier: 68:C4:98:06:AC:77:56:F8:21:CA:0B:96:4F:07:E3:BF:DE:0C:9E:5A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7D632C00BF05ECC22BB201BDE553D19A15C2F780 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa Signing time: Wed 10 Dec 2025 06:10:43 +0000 ROA not before: Wed 10 Dec 2025 06:10:43 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d010:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:63:2c:00:bf:05:ec:c2:2b:b2:01:bd:e5:53:d1:9a:15:c2:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:10:43 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=8b8f6b065d0dc754d0988a063472644ff5000a859253f50f33807777f723c68a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:a0:f0:fc:3e:51:0d:98:54:20:29:53:1b: 37:a7:29:c4:15:a3:c4:e6:4f:cd:cd:d0:81:76:f9: cb:d8:90:0c:36:bf:0a:2f:f5:13:32:f7:ad:43:15: 15:8e:52:67:cf:2c:f5:7f:1b:ba:46:3f:dc:4c:14: b0:9d:22:1b:b2:dc:ff:b2:2e:a1:5f:e7:51:c2:14: 1e:10:4b:df:44:26:da:92:20:25:f7:94:99:d2:ba: a8:e0:40:2a:55:7a:9d:a2:e8:fb:21:ab:f9:d8:05: 4f:84:62:ae:1b:ee:2a:c2:1a:b1:ac:83:f4:cc:70: fe:85:d2:42:43:65:71:cd:26:0b:f8:30:3d:b3:f6: 7a:ce:fa:fb:30:41:12:88:4a:55:08:3e:a7:14:03: 1a:07:d3:fd:e3:83:a8:32:7e:19:f7:99:e1:17:b1: 8b:c6:d9:ae:20:93:89:f8:2f:6a:e7:cd:cc:31:25: 84:62:62:5f:ec:08:90:73:97:06:ab:5c:50:4a:0d: 60:96:f2:84:49:a4:5f:a9:52:02:8d:e0:d6:4e:2c: e7:08:05:e9:b1:e1:a7:7e:44:40:05:57:06:c3:48: 30:4c:58:7f:95:a8:c9:ab:87:28:86:74:04:e6:43: 70:5e:7d:7b:1a:60:f7:a3:4d:34:4f:7e:58:06:b7: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C4:98:06:AC:77:56:F8:21:CA:0B:96:4F:07:E3:BF:DE:0C:9E:5A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d010:8c00::/38 Signature Algorithm: sha256WithRSAEncryption a9:c0:98:ee:88:db:bb:21:9d:70:5a:bb:d4:37:ff:65:91:7f: e3:bb:6e:d5:8a:49:b9:c1:5d:24:eb:8b:1d:4d:0d:6a:f6:56: ce:9a:e3:f5:de:a8:70:2a:5a:ab:5c:62:4d:d8:d0:19:d6:90: 23:a0:f7:73:67:88:51:32:dc:f0:ac:91:da:34:4c:6e:43:1c: a7:a8:47:cf:da:a6:f2:fb:10:4d:b1:d6:2b:fe:65:2e:bf:ae: a0:71:32:fc:60:f9:b3:ff:48:d5:13:4a:9e:6c:79:9e:6e:31: e6:d3:45:bf:72:94:19:22:6b:29:8e:0c:3d:54:db:16:2c:b0: 32:73:a1:4c:b2:74:c9:3e:2e:00:3a:97:68:4c:c3:71:db:63: bc:fb:1e:f0:c6:2a:32:fa:11:5f:d5:e7:33:3c:4f:75:f5:a3: e3:4c:69:5a:1a:b7:d6:c5:b0:a2:b1:21:88:58:8f:fa:cd:20: a6:a0:92:99:f4:9c:fe:42:50:a6:80:74:40:ab:0e:11:54:8e: 34:7c:6f:21:41:94:46:c0:d0:eb:f7:68:75:e0:58:44:da:ad: 2f:3c:71:88:b8:4d:26:b7:df:83:35:0f:40:99:83:9c:f4:24: a5:72:e9:42:82:c5:a7:2a:a0:32:97:48:48:ba:ec:9c:93:09: 0d:06:50:e5 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUfWMsAL8F7MIrsgG95VPRmhXC94AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjEwNDNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDhiOGY2YjA2NWQwZGM3NTRkMDk4OGEwNjM0NzI2NDRmZjUwMDBhODU5MjUz ZjUwZjMzODA3Nzc3ZjcyM2M2OGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALm2oPD8PlENmFQgKVMbN6cpxBWjxOZPzc3QgXb5y9iQDDa/Ci/1EzL3rUMV FY5SZ88s9X8bukY/3EwUsJ0iG7Lc/7IuoV/nUcIUHhBL30Qm2pIgJfeUmdK6qOBA KlV6naLo+yGr+dgFT4RirhvuKsIasayD9Mxw/oXSQkNlcc0mC/gwPbP2es76+zBB EohKVQg+pxQDGgfT/eODqDJ+GfeZ4Rexi8bZriCTifgvaufNzDElhGJiX+wIkHOX BqtcUEoNYJbyhEmkX6lSAo3g1k4s5wgF6bHhp35EQAVXBsNIMExYf5WoyauHKIZ0 BOZDcF59expg96NNNE9+WAa3fzUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRoxJgG rHdW+CHKC5ZPB+O/3gyeWjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTlhNGYzY2QtNjAzYS00ZmRjLWJkNjUtOGQ5NDg4ZDRmZDA5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BCM MA0GCSqGSIb3DQEBCwUAA4IBAQCpwJjuiNu7IZ1wWrvUN/9lkX/ju27Vikm5wV0k 64sdTQ1q9lbOmuP13qhwKlqrXGJN2NAZ1pAjoPdzZ4hRMtzwrJHaNExuQxynqEfP 2qby+xBNsdYr/mUuv66gcTL8YPmz/0jVE0qebHmebjHm00W/cpQZImspjgw9VNsW LLAyc6FMsnTJPi4AOpdoTMNx22O8+x7wxioy+hFf1eczPE919aPjTGlaGrfWxbCi sSGIWI/6zSCmoJKZ9Jz+QlCmgHRAqw4RVI40fG8hQZRGwNDr92h14FhE2q0vPHGI uE0mt9+DNQ9AmYOc9CSlculCgsWnKqAyl0hIuuyckwkNBlDl -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:41 2026 by rpki-client