This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa File: c153f994-19fd-4682-b6f7-f4e92e6144ea.roa (raw, json) Hash identifier: df/IS2jHzPCn2GzCSmlZD2laWkxhh0ClKfWHOF6Jcr4= Subject key identifier: C0:61:AF:5F:8B:B3:11:BE:DB:3A:C5:C8:7C:47:F6:BF:26:F9:87:88 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1D9F13BF36C0D5330D09F2CA24CA3F240C762A9F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa Signing time: Wed 10 Dec 2025 05:20:06 +0000 ROA not before: Wed 10 Dec 2025 05:20:06 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d01c:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9f:13:bf:36:c0:d5:33:0d:09:f2:ca:24:ca:3f:24:0c:76:2a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:20:06 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=ee1315e58f29ee1da8e49bcdf7e6bfaf06aba3d9f69a8c41b6b48c3563d4abaa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:59:48:a1:8d:0c:2c:4b:9c:c3:e1:c4:64: 52:26:ae:31:e9:39:bd:ad:eb:db:16:9e:a6:67:af: dd:db:65:81:7f:9f:df:ae:a9:bf:20:e7:92:01:96: 65:9a:a3:b5:a8:30:af:64:ad:e8:1f:8f:9a:29:fb: 18:e7:ed:ec:59:58:f0:f2:d7:41:45:74:61:7f:ec: 98:ef:d9:0e:72:69:6a:cc:a4:c6:a5:50:fd:3d:73: 9c:08:9a:c1:22:f6:eb:59:32:91:be:0c:47:13:8a: c1:0a:97:f5:66:49:c8:9c:bc:e7:e6:79:55:64:7f: ea:59:f4:e2:32:2d:8f:54:9f:fa:91:0c:66:fa:46: 3c:f3:5c:36:77:75:52:f2:c7:b7:70:19:e4:d7:94: 29:a4:5d:30:ea:44:e7:42:02:38:71:cc:6e:2c:0e: ae:b5:7b:64:e5:d5:69:41:de:01:5c:01:85:8f:17: d1:08:d6:59:c3:11:21:ae:9b:23:b0:a9:df:58:bb: ab:6f:00:b4:f0:84:d0:00:6a:26:cc:70:54:35:ac: 74:d0:22:82:cb:0e:28:81:07:27:b6:6c:9d:df:66: 42:23:d0:e7:14:0c:f8:a6:01:cf:70:84:15:5f:fd: f5:61:cd:05:ea:68:9b:6f:22:fd:88:eb:f6:4f:a0: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:61:AF:5F:8B:B3:11:BE:DB:3A:C5:C8:7C:47:F6:BF:26:F9:87:88 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d01c:c00::/38 Signature Algorithm: sha256WithRSAEncryption 06:62:a1:6c:ea:71:1d:34:58:fc:77:30:2e:ca:44:32:c9:02: 70:bf:29:58:b5:60:aa:3d:45:ea:ee:30:d0:92:63:dc:15:10: 13:1c:76:53:6c:f9:2a:7c:bf:5a:62:fe:39:e6:60:24:ae:a9: c5:9b:ea:e5:a6:1a:c2:6f:86:4d:44:a6:7d:3c:0d:6d:ca:b0: fb:ad:20:40:e3:5d:25:1b:97:e0:d2:99:4c:0a:9a:e9:b6:29: 31:8a:1f:9f:50:0c:8a:1e:dd:66:c9:03:0c:97:27:e2:84:6f: 72:b5:e1:ef:dc:b9:ab:b6:7b:26:56:9a:e2:f0:db:79:b8:d9: 97:1b:c4:f4:04:b8:5d:84:c2:03:40:66:87:a6:25:82:ec:7e: 6a:3a:ed:6d:cb:68:f2:fc:5b:84:17:d1:d6:34:c9:c4:8c:f2: 3a:3b:e5:66:ab:48:41:e4:c5:d2:6b:ff:d6:49:8b:67:60:eb: 7f:12:6b:8f:25:16:83:89:89:c4:fc:c7:e7:3e:5e:e8:9e:ae: 2d:0f:fc:62:33:22:c0:8b:bb:69:cb:5e:9c:b3:8a:0b:4d:d2: 32:1e:fe:6d:ff:f4:3f:00:60:4e:93:49:71:f3:fa:e5:2f:f4: 97:32:51:42:e5:ef:b5:4a:b4:48:dc:54:6f:5d:10:ea:e9:98: da:32:88:2e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUHZ8TvzbA1TMNCfLKJMo/JAx2Kp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTIwMDZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGVlMTMxNWU1OGYyOWVlMWRhOGU0OWJjZGY3ZTZiZmFmMDZhYmEzZDlmNjlh OGM0MWI2YjQ4YzM1NjNkNGFiYWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJTWUihjQwsS5zD4cRkUiauMek5va3r2xaepmev3dtlgX+f366pvyDnkgGW ZZqjtagwr2St6B+Pmin7GOft7FlY8PLXQUV0YX/smO/ZDnJpasykxqVQ/T1znAia wSL261kykb4MRxOKwQqX9WZJyJy85+Z5VWR/6ln04jItj1Sf+pEMZvpGPPNcNnd1 UvLHt3AZ5NeUKaRdMOpE50ICOHHMbiwOrrV7ZOXVaUHeAVwBhY8X0QjWWcMRIa6b I7Cp31i7q28AtPCE0ABqJsxwVDWsdNAigssOKIEHJ7Zsnd9mQiPQ5xQM+KYBz3CE FV/99WHNBepom28i/Yjr9k+g3UUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTAYa9f i7MRvts6xch8R/a/JvmHiDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzE1M2Y5OTQtMTlmZC00NjgyLWI2ZjctZjRlOTJlNjE0NGVhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BwM MA0GCSqGSIb3DQEBCwUAA4IBAQAGYqFs6nEdNFj8dzAuykQyyQJwvylYtWCqPUXq 7jDQkmPcFRATHHZTbPkqfL9aYv455mAkrqnFm+rlphrCb4ZNRKZ9PA1tyrD7rSBA 410lG5fg0plMCprptikxih+fUAyKHt1myQMMlyfihG9yteHv3LmrtnsmVpri8Nt5 uNmXG8T0BLhdhMIDQGaHpiWC7H5qOu1ty2jy/FuEF9HWNMnEjPI6O+Vmq0hB5MXS a//WSYtnYOt/EmuPJRaDiYnE/MfnPl7onq4tD/xiMyLAi7tpy16cs4oLTdIyHv5t //Q/AGBOk0lx8/rlL/SXMlFC5e+1SrRI3FRvXRDq6ZjaMogu -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:26 2026 by rpki-client