This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa File: bed4158d-91b8-4ba5-81d9-75a65b550b92.roa (raw, json) Hash identifier: MyfzYpVeFNpwqzeweI3EmvRtJV/Q2M+rJy75jUUYV+A= Subject key identifier: 61:79:8E:BB:0A:71:66:7D:AB:C0:81:73:B5:74:BB:7B:61:34:E0:14 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0BC03A4189FE6793E48C8D36DE9C0A8DD67B7032 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa Signing time: Wed 10 Dec 2025 05:10:11 +0000 ROA not before: Wed 10 Dec 2025 05:10:11 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c0:3a:41:89:fe:67:93:e4:8c:8d:36:de:9c:0a:8d:d6:7b:70:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:10:11 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=96292e78c70d34ac1614155d2d9ade0b3023ccb914f604b604cfae6f7a5465b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c6:93:3a:7a:60:84:3e:ea:ec:33:b2:0e:b4: ed:d3:c6:d0:74:d0:4e:a1:be:e8:1d:39:26:50:63: 88:7f:10:97:21:2a:a8:69:ab:c5:46:24:80:9c:d9: 7a:f5:14:7d:c6:b6:72:ea:55:39:17:e5:9c:19:79: 43:fd:47:a5:2e:88:f8:2b:70:dc:25:99:15:a3:c4: 3f:3b:44:56:eb:ef:22:9e:62:6a:e2:e8:01:be:65: 71:4b:6a:36:24:5e:13:4f:81:76:11:22:be:9b:b8: 46:a1:7f:af:6f:ce:48:ba:dd:ae:41:9c:1a:12:92: bd:75:22:9f:f6:4f:07:40:15:b8:95:64:ed:20:ac: 0a:f2:45:15:4b:a8:80:09:df:b9:a2:d0:f0:7e:c3: d2:18:9b:d8:cd:64:ff:67:ed:14:89:63:45:a3:28: 77:42:6f:50:3f:9e:90:f2:12:0f:7f:37:a9:02:c7: 55:c1:c0:6d:67:52:1b:bd:69:cb:48:b3:6c:a4:08: 5d:5d:21:ac:94:c2:25:15:c7:b1:4e:d9:77:0a:5d: c4:ad:e4:c2:17:b2:f3:ec:a4:ab:a0:14:1c:50:6a: da:cd:88:b3:2b:9c:af:97:0f:17:9b:e4:b2:4b:70: 3b:af:fd:79:d4:c2:aa:ff:ce:44:92:87:23:79:04: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:79:8E:BB:0A:71:66:7D:AB:C0:81:73:B5:74:BB:7B:61:34:E0:14 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:60c0::/48 Signature Algorithm: sha256WithRSAEncryption c9:4e:43:86:81:39:a9:fe:34:a2:ec:85:36:32:ba:1f:cc:f5: c7:43:ae:ad:17:73:df:c7:b6:c3:63:be:9c:67:1d:66:fa:db: 5f:ff:db:40:9e:34:7c:6f:45:c8:08:70:ae:50:26:a5:e3:b5: b9:bb:b8:c9:d7:37:00:b5:fe:b0:0d:ba:0e:84:52:0e:d5:43: 4b:b4:df:66:09:52:fb:0f:ee:4b:1a:32:29:82:0c:5e:59:6f: 69:a2:a7:a7:40:21:8e:16:6e:d1:fe:e1:1d:bb:6e:77:1f:af: 14:92:50:bb:9f:d2:54:ae:cb:85:30:f9:1c:a4:da:a7:ad:a0: a8:be:b5:35:cf:0d:8a:dc:a4:fa:3d:29:13:19:0b:7d:49:80: 49:06:60:95:53:d7:77:94:1b:03:fc:e5:9c:f4:db:d1:ec:53: 21:a4:f4:3e:b6:68:41:f5:7a:7d:95:01:d0:78:47:cd:9c:0e: 1c:c5:ea:1a:ae:15:82:26:b1:a2:f5:60:ab:81:e8:f4:a2:7f: 58:a1:74:82:c1:ff:96:2a:ea:1f:e4:d6:b3:19:02:3c:c2:99: b4:0d:81:17:21:f8:b1:be:d0:28:49:8e:5c:5e:c0:59:41:38: 2b:2f:b9:92:26:af:fd:dd:93:d4:fd:9a:59:1d:ab:c4:be:10: f4:00:a5:aa -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUC8A6QYn+Z5PkjI023pwKjdZ7cDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTEwMTFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDk2MjkyZTc4YzcwZDM0YWMxNjE0MTU1ZDJkOWFkZTBiMzAyM2NjYjkxNGY2 MDRiNjA0Y2ZhZTZmN2E1NDY1YjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObGkzp6YIQ+6uwzsg607dPG0HTQTqG+6B05JlBjiH8QlyEqqGmrxUYkgJzZ evUUfca2cupVORflnBl5Q/1HpS6I+Ctw3CWZFaPEPztEVuvvIp5iauLoAb5lcUtq NiReE0+BdhEivpu4RqF/r2/OSLrdrkGcGhKSvXUin/ZPB0AVuJVk7SCsCvJFFUuo gAnfuaLQ8H7D0hib2M1k/2ftFIljRaMod0JvUD+ekPISD383qQLHVcHAbWdSG71p y0izbKQIXV0hrJTCJRXHsU7ZdwpdxK3kwhey8+ykq6AUHFBq2s2Isyucr5cPF5vk sktwO6/9edTCqv/ORJKHI3kEZH8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRheY67 CnFmfavAgXO1dLt7YTTgFDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmVkNDE1OGQtOTFiOC00YmE1LTgxZDktNzVhNjViNTUwYjkyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABg wDANBgkqhkiG9w0BAQsFAAOCAQEAyU5DhoE5qf40ouyFNjK6H8z1x0OurRdz38e2 w2O+nGcdZvrbX//bQJ40fG9FyAhwrlAmpeO1ubu4ydc3ALX+sA26DoRSDtVDS7Tf ZglS+w/uSxoyKYIMXllvaaKnp0AhjhZu0f7hHbtudx+vFJJQu5/SVK7LhTD5HKTa p62gqL61Nc8Nityk+j0pExkLfUmASQZglVPXd5QbA/zlnPTb0exTIaT0PrZoQfV6 fZUB0HhHzZwOHMXqGq4VgiaxovVgq4Ho9KJ/WKF0gsH/lirqH+TWsxkCPMKZtA2B FyH4sb7QKEmOXF7AWUE4Ky+5kiav/d2T1P2aWR2rxL4Q9AClqg== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:38 2026 by rpki-client