This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa File: c3736673-707b-4dfc-aca4-88dcbb52a94d.roa (raw, json) Hash identifier: jyFanrG1lKcYGxDSF/eQr6M32Hb4qg28JBqFpOkPc7g= Subject key identifier: 92:43:F6:C9:93:E3:C4:31:56:96:C5:37:2C:75:EC:5A:ED:2F:99:8C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4B4F1395796B1F9D11700543DA3A4AAD3A9D3343 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa Signing time: Mon 08 Dec 2025 02:10:24 +0000 ROA not before: Mon 08 Dec 2025 02:10:24 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d078:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4f:13:95:79:6b:1f:9d:11:70:05:43:da:3a:4a:ad:3a:9d:33:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:24 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=3913bc9789dae9ceb7fe6ccc62057485735c957eecd8de6dc63e2ce9f055bf91, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:43:0b:b9:87:90:36:e5:38:fa:f0:41:8b: 7c:38:a4:26:70:e3:2c:41:37:15:87:a9:2d:a4:5d: c1:28:6f:4c:29:6a:92:db:75:f7:f1:6b:60:0e:0f: 4c:38:97:d3:d5:d7:49:a0:63:55:bc:cd:83:1f:33: 0f:07:af:f9:6c:4b:39:6e:72:c8:e7:6d:0f:48:11: d4:42:82:cc:4f:a9:8e:cf:4f:3e:0d:77:79:28:0c: 00:3e:99:8b:af:ba:e8:e9:b5:3d:7d:a4:64:0c:3e: be:1e:f9:dd:37:0b:61:f9:e2:fc:c8:20:20:eb:25: 23:ec:31:5e:c6:38:20:5b:c1:64:1c:2f:53:05:b7: 9f:7c:d0:e2:58:ee:7e:aa:4b:3f:f9:97:b1:4a:1e: 7a:14:80:75:dd:10:a5:22:12:bc:5a:fc:e2:b4:93: ce:03:fa:07:c0:2f:be:70:12:c0:82:a1:71:82:3a: 10:08:c6:e7:08:03:c1:31:f3:5a:7c:47:bc:b3:cb: 1a:2f:86:9b:be:3a:fc:83:2f:36:1d:a1:40:65:23: a9:7f:2b:00:3d:93:cd:c3:95:34:6f:d7:db:82:74: 7f:1d:13:0f:aa:68:63:14:2c:5a:68:e1:f8:02:29: 10:ed:fe:e7:33:cf:d9:3c:0d:c4:a4:b4:b6:de:ed: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:F6:C9:93:E3:C4:31:56:96:C5:37:2C:75:EC:5A:ED:2F:99:8C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d078:800::/40 Signature Algorithm: sha256WithRSAEncryption ba:42:3e:74:fa:e7:1a:5c:9b:1d:0d:0a:c0:6b:a6:f2:f2:ce: fd:7f:c2:94:4a:18:c7:35:92:7d:e7:77:19:58:e2:3d:87:96: b6:5e:11:2b:c8:20:68:d8:5d:d5:9d:b9:b7:c5:5a:94:5f:62: 8c:4a:f4:f1:86:2f:bc:98:d5:e8:64:bc:28:59:c2:87:86:85: 4b:41:9b:8c:11:f1:70:8e:8a:a1:06:09:73:2e:33:29:d1:97: 8f:25:37:3c:c2:35:c0:e9:6e:4f:9b:c8:14:cf:9b:7f:e2:3d: 7f:dc:75:4b:6b:39:6f:73:27:3b:79:ba:47:5a:d0:93:88:74: 39:56:c5:2c:25:69:a9:f5:37:56:d7:01:ac:02:6b:6a:30:da: fb:f0:a5:0a:bb:4d:00:28:9d:d8:79:f9:75:6c:6b:7c:1c:b2: 87:ad:6f:2b:69:eb:ed:2a:5a:58:7a:da:68:53:03:5d:91:5e: 1c:72:65:88:eb:6d:a2:18:d4:e4:7a:94:e0:2b:63:e1:37:d1: fa:a1:92:f8:98:08:3b:48:61:55:19:ff:bc:83:df:e0:98:f9: fb:0e:f2:c1:68:ad:90:5c:f9:83:4c:6a:e3:8a:2b:c6:ac:fe: 93:3c:a5:8b:b5:49:9a:58:c7:ff:40:a4:18:37:2b:1c:69:65: 71:2f:c5:5f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUS08TlXlrH50RcAVD2jpKrTqdM0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMjRaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDM5MTNiYzk3ODlkYWU5Y2ViN2ZlNmNjYzYyMDU3NDg1NzM1Yzk1N2VlY2Q4 ZGU2ZGM2M2UyY2U5ZjA1NWJmOTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSAQwu5h5A25Tj68EGLfDikJnDjLEE3FYepLaRdwShvTClqktt19/FrYA4P TDiX09XXSaBjVbzNgx8zDwev+WxLOW5yyOdtD0gR1EKCzE+pjs9PPg13eSgMAD6Z i6+66Om1PX2kZAw+vh753TcLYfni/MggIOslI+wxXsY4IFvBZBwvUwW3n3zQ4lju fqpLP/mXsUoeehSAdd0QpSISvFr84rSTzgP6B8AvvnASwIKhcYI6EAjG5wgDwTHz WnxHvLPLGi+Gm746/IMvNh2hQGUjqX8rAD2TzcOVNG/X24J0fx0TD6poYxQsWmjh +AIpEO3+5zPP2TwNxKS0tt7t4fMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSSQ/bJ k+PEMVaWxTcsdexa7S+ZjDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzM3MzY2NzMtNzA3Yi00ZGZjLWFjYTQtODhkY2JiNTJhOTRkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HgI MA0GCSqGSIb3DQEBCwUAA4IBAQC6Qj50+ucaXJsdDQrAa6by8s79f8KUShjHNZJ9 53cZWOI9h5a2XhEryCBo2F3Vnbm3xVqUX2KMSvTxhi+8mNXoZLwoWcKHhoVLQZuM EfFwjoqhBglzLjMp0ZePJTc8wjXA6W5Pm8gUz5t/4j1/3HVLazlvcyc7ebpHWtCT iHQ5VsUsJWmp9TdW1wGsAmtqMNr78KUKu00AKJ3Yefl1bGt8HLKHrW8raevtKlpY etpoUwNdkV4ccmWI622iGNTkepTgK2PhN9H6oZL4mAg7SGFVGf+8g9/gmPn7DvLB aK2QXPmDTGrjiivGrP6TPKWLtUmaWMf/QKQYNyscaWVxL8Vf -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:43 2026 by rpki-client