This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa File: b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa (raw, json) Hash identifier: ow9d0uC6A4Siu9THXgQRXmEgmUicF6jcwr1wovCKX7I= Subject key identifier: 5B:38:02:3D:9B:87:38:CC:0D:9C:BA:4A:30:01:28:BD:CD:E7:D3:C6 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7A68BB5F467E30D9D458DDE4311A0876B631F123 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa Signing time: Wed 10 Dec 2025 06:10:41 +0000 ROA not before: Wed 10 Dec 2025 06:10:41 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:68:bb:5f:46:7e:30:d9:d4:58:dd:e4:31:1a:08:76:b6:31:f1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:10:41 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=84d27aa8c8064c8b30b1f7499b92a8c942e3ecdb8fe1b07d20a13386fa33bab6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:a8:36:e6:a3:e8:43:06:ce:9e:5d:24:42: 0f:75:12:e9:cf:8f:35:1d:da:96:e6:58:a5:24:9f: 93:f3:8a:fe:a5:8a:4b:55:27:ab:16:43:bd:bb:6a: 67:c5:b0:a1:6b:a7:45:85:20:19:4b:b0:4e:a4:f8: e3:44:69:ee:e5:89:1b:9b:0b:e1:ef:7c:5f:18:9c: cc:5c:4a:bc:b4:88:74:4a:7b:d7:57:01:aa:7c:6e: 57:66:86:0e:f4:b0:5f:29:35:62:e1:c1:f0:57:78: 7b:62:59:f4:e0:06:59:c0:ba:e2:95:d0:d3:e0:33: 84:7f:08:17:e2:ab:d2:c9:09:b3:f6:27:43:c8:92: 3d:ba:fa:e3:0e:c5:38:fd:63:5d:e4:fe:19:06:de: f1:ae:75:d0:8b:fe:d2:3e:ad:52:d7:e3:58:b3:db: 8e:cf:ec:52:eb:f5:6a:f6:74:fd:43:f3:b4:08:c9: 54:d1:c2:cd:7f:db:a7:c4:da:b8:00:bf:0a:84:49: c9:c2:91:51:42:aa:3a:c7:ca:14:6f:fd:3f:8d:b3: 02:4f:4f:b3:36:bd:b6:07:e7:56:5b:89:4b:16:ab: 86:2d:9f:9e:89:34:1b:f7:12:c2:3a:fb:e6:31:38: ce:1a:ba:95:fc:71:98:9e:27:2e:d8:ec:ee:ca:1f: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:02:3D:9B:87:38:CC:0D:9C:BA:4A:30:01:28:BD:CD:E7:D3:C6 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:c080::/48 Signature Algorithm: sha256WithRSAEncryption 8d:57:d1:2f:06:5b:f0:0a:c5:e7:c3:00:db:fa:68:a6:f7:c2: 87:cb:0e:2f:fd:8c:31:bf:4f:66:17:5b:33:80:93:f8:47:b5: 7c:08:eb:1c:57:2c:ae:09:0f:2d:cf:73:b0:30:c8:b1:1a:27: 8b:57:5e:70:bb:ef:be:e3:ec:72:02:89:41:56:b2:61:e6:28: e5:92:fc:30:d6:d4:8b:c3:47:68:42:50:0b:42:ac:ab:58:91: 73:d9:91:44:ac:7d:20:e3:68:79:19:90:a1:00:84:d7:0e:1f: 5a:85:06:7b:38:67:49:3f:7a:e1:0a:4b:ec:7b:be:8e:48:da: 34:44:e8:fa:15:9e:99:7c:50:39:d9:08:6d:11:7f:96:13:a9: c5:26:f6:47:33:a7:9f:54:80:c3:9a:3a:fe:7d:49:98:3b:14: b2:cd:4d:28:0b:da:36:23:b7:d0:8c:be:57:0f:22:b5:5a:ac: c2:f7:7e:d1:6a:fc:bb:40:49:d6:e1:f9:1a:78:8b:45:26:f1: 1d:61:31:9d:04:14:42:65:14:12:1e:63:45:46:09:dc:5b:c2: f3:d6:2f:6c:30:05:51:e9:f1:7e:0c:8a:a5:5f:44:f3:13:b6: aa:81:2c:7a:02:8e:3b:c3:e0:ea:a9:16:7c:25:45:d6:55:34: 42:ea:3e:1a -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUemi7X0Z+MNnUWN3kMRoIdrYx8SMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjEwNDFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDg0ZDI3YWE4YzgwNjRjOGIzMGIxZjc0OTliOTJhOGM5NDJlM2VjZGI4ZmUx YjA3ZDIwYTEzMzg2ZmEzM2JhYjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIu+qDbmo+hDBs6eXSRCD3US6c+PNR3aluZYpSSfk/OK/qWKS1UnqxZDvbtq Z8WwoWunRYUgGUuwTqT440Rp7uWJG5sL4e98XxiczFxKvLSIdEp711cBqnxuV2aG DvSwXyk1YuHB8Fd4e2JZ9OAGWcC64pXQ0+AzhH8IF+Kr0skJs/YnQ8iSPbr64w7F OP1jXeT+GQbe8a510Iv+0j6tUtfjWLPbjs/sUuv1avZ0/UPztAjJVNHCzX/bp8Ta uAC/CoRJycKRUUKqOsfKFG/9P42zAk9Psza9tgfnVluJSxarhi2fnok0G/cSwjr7 5jE4zhq6lfxxmJ4nLtjs7sof0RECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRbOAI9 m4c4zA2cukowASi9zefTxjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YjllYTYyZDYtZGNlMy00Yzc0LWI5MzEtMGNjYTg3Y2NhZGVhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DHA gDANBgkqhkiG9w0BAQsFAAOCAQEAjVfRLwZb8ArF58MA2/popvfCh8sOL/2MMb9P ZhdbM4CT+Ee1fAjrHFcsrgkPLc9zsDDIsRoni1decLvvvuPscgKJQVayYeYo5ZL8 MNbUi8NHaEJQC0Ksq1iRc9mRRKx9IONoeRmQoQCE1w4fWoUGezhnST964QpL7Hu+ jkjaNETo+hWemXxQOdkIbRF/lhOpxSb2RzOnn1SAw5o6/n1JmDsUss1NKAvaNiO3 0Iy+Vw8itVqswvd+0Wr8u0BJ1uH5GniLRSbxHWExnQQUQmUUEh5jRUYJ3FvC89Yv bDAFUenxfgyKpV9E8xO2qoEsegKOO8Pg6qkWfCVF1lU0Quo+Gg== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:57 2026 by rpki-client