This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa File: b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa (raw, json) Hash identifier: TfmPwVPHj+Bp5MKnI2W6+1nGLB4kD5Lg/miOkZLjaEA= Subject key identifier: 6E:11:8E:0F:FD:BE:9A:9F:4B:5E:77:22:62:F0:DE:92:BE:F4:B7:5A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6EE383AD2E10964F8B077E4E1F2AD410AB2ADD48 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa Signing time: Wed 10 Dec 2025 05:41:16 +0000 ROA not before: Wed 10 Dec 2025 05:41:16 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d012:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e3:83:ad:2e:10:96:4f:8b:07:7e:4e:1f:2a:d4:10:ab:2a:dd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:41:16 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2d11819fee336f08443ab551c7394620435f8313594affaaf35e75298311df03, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:4b:a4:69:a0:12:87:04:8a:6f:ee:a7:d7: a4:5f:1e:35:3b:3a:a6:ca:21:b1:05:5a:29:8c:c4: 56:e1:2b:37:ca:a1:77:65:9e:13:8d:3b:51:9d:ee: c7:f1:c8:55:34:26:03:51:10:2b:15:88:34:5a:bc: 8e:77:ca:e1:b5:12:06:ce:23:bd:9a:55:55:aa:67: 5c:a1:c5:b2:6c:65:ab:7a:bb:46:db:c9:e4:86:c1: 3c:08:11:49:d3:dd:c1:f0:e1:c6:3f:e7:4a:74:37: 42:11:4f:be:37:c5:65:9c:e6:57:14:2f:b6:91:83: 89:59:c1:a5:62:10:5f:97:ab:eb:d1:50:45:82:c6: 45:c0:e0:2e:fe:75:0c:1e:2e:c0:c7:86:56:ad:f6: af:8d:3f:cc:be:6f:b6:54:95:3a:bf:18:60:b3:c6: fa:78:48:b9:33:ec:25:9e:ca:a8:21:04:10:05:a2: cb:47:82:f0:8e:72:5f:91:7b:b3:c6:f9:eb:05:98: b7:0b:76:cc:77:ea:2d:44:e6:b8:9b:4b:fb:ef:78: b3:71:e4:7f:da:44:1b:c5:5b:8a:72:38:33:b8:81: ba:97:23:0c:d5:b9:41:ee:df:5b:c7:3a:4b:0f:03: 91:50:76:28:1a:7f:c1:2d:0f:08:68:e2:74:a3:e7: 70:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:11:8E:0F:FD:BE:9A:9F:4B:5E:77:22:62:F0:DE:92:BE:F4:B7:5A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d012:400::/38 Signature Algorithm: sha256WithRSAEncryption 8a:ca:69:20:90:25:bb:da:a9:8e:98:01:44:90:99:f2:1c:88: e0:16:71:3c:32:92:23:d4:31:16:55:63:f1:8d:7a:ff:f5:f9: 80:9b:bd:0e:bd:32:98:fb:a3:9e:31:fd:e3:0f:2b:67:04:4d: 73:28:7f:88:c0:75:0d:fe:60:88:af:71:b7:08:13:16:ee:44: 1f:62:4b:b1:79:da:f7:c7:ce:84:43:ea:32:be:f3:eb:5a:0c: 1e:b1:e7:4f:6e:cd:0d:6e:a6:86:3e:8b:1a:06:a0:f6:76:81: 2f:d8:e2:94:a8:53:0a:14:12:fa:cc:07:68:cb:38:21:22:16: 7c:5c:5e:ce:64:c2:cb:af:c5:79:d9:47:39:26:46:58:88:fb: 8d:00:4d:95:41:aa:8b:c5:10:fb:40:64:aa:7d:42:99:19:12: 92:7a:96:89:49:25:00:1e:60:92:02:a1:32:90:0e:88:ee:de: 63:29:2c:38:ed:3b:f6:c2:ff:6c:ab:fe:55:ad:23:2e:82:c3: cc:02:6a:28:ed:8b:ae:76:b7:20:e6:d3:c3:be:82:67:00:f8: 1d:bf:5c:36:e5:e5:43:55:fe:c5:f7:77:25:17:0a:7c:7d:94: fe:42:f2:4f:d8:51:1b:b3:c8:b9:a8:08:c2:c7:bd:c5:c4:78: ed:7a:32:54 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbuODrS4Qlk+LB35OHyrUEKsq3UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQxMTZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDJkMTE4MTlmZWUzMzZmMDg0NDNhYjU1MWM3Mzk0NjIwNDM1ZjgzMTM1OTRh ZmZhYWYzNWU3NTI5ODMxMWRmMDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7vS6RpoBKHBIpv7qfXpF8eNTs6psohsQVaKYzEVuErN8qhd2WeE407UZ3u x/HIVTQmA1EQKxWINFq8jnfK4bUSBs4jvZpVVapnXKHFsmxlq3q7RtvJ5IbBPAgR SdPdwfDhxj/nSnQ3QhFPvjfFZZzmVxQvtpGDiVnBpWIQX5er69FQRYLGRcDgLv51 DB4uwMeGVq32r40/zL5vtlSVOr8YYLPG+nhIuTPsJZ7KqCEEEAWiy0eC8I5yX5F7 s8b56wWYtwt2zHfqLUTmuJtL++94s3Hkf9pEG8VbinI4M7iBupcjDNW5Qe7fW8c6 Sw8DkVB2KBp/wS0PCGjidKPncPECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRuEY4P /b6an0tedyJi8N6SvvS3WjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YjcyYTk1NDAtNTFlZi00ZGNjLWE1ZTItMjQxNzI0OWExYWYzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BIE MA0GCSqGSIb3DQEBCwUAA4IBAQCKymkgkCW72qmOmAFEkJnyHIjgFnE8MpIj1DEW VWPxjXr/9fmAm70OvTKY+6OeMf3jDytnBE1zKH+IwHUN/mCIr3G3CBMW7kQfYkux edr3x86EQ+oyvvPrWgwesedPbs0NbqaGPosaBqD2doEv2OKUqFMKFBL6zAdoyzgh IhZ8XF7OZMLLr8V52Uc5JkZYiPuNAE2VQaqLxRD7QGSqfUKZGRKSepaJSSUAHmCS AqEykA6I7t5jKSw47Tv2wv9sq/5VrSMugsPMAmoo7Yuudrcg5tPDvoJnAPgdv1w2 5eVDVf7F93clFwp8fZT+QvJP2FEbs8i5qAjCx73FxHjtejJU -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:45 2026 by rpki-client