This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa File: af189eff-34de-4652-a029-d682c90d1fc5.roa (raw, json) Hash identifier: 5HYe8S1EPuz6qObUgbI2mHwmeZB/Yj7L53lSM3onI14= Subject key identifier: 12:BF:DE:AC:4B:9F:9C:83:C1:2C:50:16:91:DF:1B:E6:9F:BA:5F:01 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: CE419DD54BE3477A1C1615CFE47808373BC197 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa Signing time: Wed 10 Dec 2025 06:31:10 +0000 ROA not before: Wed 10 Dec 2025 06:31:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ce:41:9d:d5:4b:e3:47:7a:1c:16:15:cf:e4:78:08:37:3b:c1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:31:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2f1b0b4a3bd557f1690497eef20f70d47c0c6d7603e9aa5ff4dbd03c91be34de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:3b:ac:05:54:1a:d7:75:7a:8c:12:3e:03: e2:f6:21:e8:27:11:b0:24:b6:15:f1:28:c1:92:f2: b4:77:66:74:6a:a9:2c:29:94:22:1e:37:04:78:f5: 97:47:6e:55:70:59:d3:02:e9:5c:99:4e:6d:0f:53: 8b:00:17:e5:b0:01:90:f6:f2:8a:e7:c2:ec:72:ff: 1b:9a:c6:c7:aa:33:39:21:b4:54:ed:98:bc:37:f1: 27:24:9e:fa:ec:d6:c8:f3:a6:a6:fc:90:1a:dc:91: 80:15:62:c2:c3:f5:ad:d3:2b:b4:a9:49:a6:54:4d: 1c:8c:79:a1:70:27:d5:5d:e6:a5:4e:e6:6f:c8:b7: 9d:4d:de:18:a6:69:9f:b0:35:e2:4c:f1:7f:96:80: 81:01:eb:80:07:59:f8:de:61:9c:63:77:31:21:09: 98:6b:0f:6c:97:b0:91:b8:17:83:64:4d:45:24:42: 84:fb:58:99:a0:d1:bc:42:a2:bd:4d:76:45:cb:17: 32:d0:b8:55:7f:75:04:89:cc:7d:9b:63:d3:8b:41: b3:16:85:1f:46:e2:7a:eb:4e:33:38:37:a6:21:4b: 61:1c:bc:8b:35:8d:3e:7f:d8:95:5f:87:12:86:fb: c2:12:9b:aa:d8:b4:7d:d6:2d:18:22:a4:bc:00:42: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BF:DE:AC:4B:9F:9C:83:C1:2C:50:16:91:DF:1B:E6:9F:BA:5F:01 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af189eff-34de-4652-a029-d682c90d1fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:15:2c:65:67:c7:df:64:26:d5:c3:e5:a1:85:d1:44:20:9e: 83:a1:f2:84:79:f3:22:31:d7:66:0a:80:b3:2a:9c:32:3a:13: ec:b1:d4:76:6e:17:39:45:bb:e9:0b:9f:42:de:ba:24:45:88: 55:85:90:e1:07:0d:7b:b9:b3:ce:dc:70:d9:8b:3f:a7:2c:b6: e6:fc:c3:e9:9b:3d:90:76:7f:89:49:fa:c0:4e:b0:b6:35:82: a7:9b:a7:32:63:61:05:f5:ad:3b:6f:60:c3:96:0b:44:30:3f: 26:04:88:65:5c:06:2e:34:44:38:17:43:29:d0:6b:68:74:d3: 1f:95:68:64:e9:55:d1:0d:2d:05:05:ca:f2:25:2b:b8:00:09: 7c:c2:c7:e2:c8:ba:e2:69:82:98:0a:22:df:79:80:6f:b8:12: 2b:fd:0c:56:92:9c:a6:4f:58:bc:ff:bf:da:40:2a:c8:27:ec: 81:86:01:40:88:38:00:2f:46:5c:75:54:dd:1e:7c:89:ee:9a: 3e:1a:67:0e:32:c0:82:c5:57:5a:09:d4:52:86:c2:f1:61:85: 7d:f7:46:34:db:f8:82:f7:28:65:6c:12:c6:34:98:a5:4b:9f: 3c:6b:e6:5d:cf:31:e4:45:55:c1:b6:89:de:91:a8:a2:d2:6b: 46:ab:ac:9e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAM5BndVL40d6HBYVz+R4CDc7wZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMxMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDJmMWIwYjRhM2JkNTU3ZjE2OTA0OTdlZWYyMGY3MGQ0N2MwYzZkNzYwM2U5 YWE1ZmY0ZGJkMDNjOTFiZTM0ZGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK13O6wFVBrXdXqMEj4D4vYh6CcRsCS2FfEowZLytHdmdGqpLCmUIh43BHj1 l0duVXBZ0wLpXJlObQ9TiwAX5bABkPbyiufC7HL/G5rGx6ozOSG0VO2YvDfxJySe +uzWyPOmpvyQGtyRgBViwsP1rdMrtKlJplRNHIx5oXAn1V3mpU7mb8i3nU3eGKZp n7A14kzxf5aAgQHrgAdZ+N5hnGN3MSEJmGsPbJewkbgXg2RNRSRChPtYmaDRvEKi vU12RcsXMtC4VX91BInMfZtj04tBsxaFH0bieutOMzg3piFLYRy8izWNPn/YlV+H Eob7whKbqti0fdYtGCKkvABCZrcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQSv96s S5+cg8EsUBaR3xvmn7pfATAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YWYxODllZmYtMzRkZS00NjUyLWEwMjktZDY4MmM5MGQxZmM1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A wDANBgkqhkiG9w0BAQsFAAOCAQEAXxUsZWfH32Qm1cPloYXRRCCeg6HyhHnzIjHX ZgqAsyqcMjoT7LHUdm4XOUW76QufQt66JEWIVYWQ4QcNe7mzztxw2Ys/pyy25vzD 6Zs9kHZ/iUn6wE6wtjWCp5unMmNhBfWtO29gw5YLRDA/JgSIZVwGLjREOBdDKdBr aHTTH5VoZOlV0Q0tBQXK8iUruAAJfMLH4si64mmCmAoi33mAb7gSK/0MVpKcpk9Y vP+/2kAqyCfsgYYBQIg4AC9GXHVU3R58ie6aPhpnDjLAgsVXWgnUUobC8WGFffdG NNv4gvcoZWwSxjSYpUufPGvmXc8x5EVVwbaJ3pGootJrRqusng== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:27 2026 by rpki-client