This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa File: c575b6fa-c023-458f-85c8-9694aa053e43.roa (raw, json) Hash identifier: RCdlySHjwxx0I98qfpfxH5QTybCn9P1ye+Y0qmldq8M= Subject key identifier: 08:7C:54:1A:51:F5:6B:28:4D:3D:68:61:AB:91:13:84:C7:A0:0E:3F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4453532776BBDEDF80C5BB0EAC5AC5986EBAACA6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa Signing time: Wed 10 Dec 2025 05:51:15 +0000 ROA not before: Wed 10 Dec 2025 05:51:15 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:53:53:27:76:bb:de:df:80:c5:bb:0e:ac:5a:c5:98:6e:ba:ac:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:51:15 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=1a21dbec4560a9700281364c79e75a471e715fe9612e977e99ee0bd44af63eea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:4e:3f:cf:ee:b9:51:f0:1d:6e:66:07:d0: e5:d2:2d:9e:50:f4:6f:15:69:a8:96:01:1c:1a:ea: 39:3f:79:a5:b5:b3:28:58:21:4e:88:7d:ba:f1:97: 8c:40:2d:60:aa:cd:4d:75:6b:9f:8c:ff:cb:94:1c: 30:4d:22:fd:d3:cf:e6:fb:13:33:bd:a0:54:a6:3a: 94:6d:80:4a:40:0e:e6:c9:66:a6:21:9a:77:cf:fb: 1c:1a:70:08:28:4f:85:d6:6d:a0:11:38:bd:44:7a: b9:d3:90:f6:bd:cd:9d:d6:dd:88:b7:6e:6e:79:5f: f9:af:da:9c:4e:5e:fc:a5:72:08:a4:2f:79:f0:4b: 36:45:97:e4:cc:ab:41:93:e1:5a:36:9a:74:6d:f9: 27:f1:66:fb:2a:9c:97:87:06:dc:c3:a5:ea:e3:26: 81:2e:55:be:24:bd:3c:80:35:3d:3a:83:26:6a:35: 62:d8:39:26:e2:bf:77:a8:fd:35:d7:1d:fb:ac:93: c7:cd:5f:c1:4d:0a:d2:49:e3:9a:ff:70:51:7a:90: 19:53:cd:be:8e:b8:fb:63:8c:63:01:07:16:50:36: 4f:43:a5:9d:4d:b2:ee:2c:a1:2f:69:34:11:37:16: 54:85:d6:f4:af:5e:04:42:94:d9:3a:40:d3:ab:02: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7C:54:1A:51:F5:6B:28:4D:3D:68:61:AB:91:13:84:C7:A0:0E:3F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:4080::/48 Signature Algorithm: sha256WithRSAEncryption a6:a6:c6:88:55:35:87:67:9f:9b:aa:4d:39:3b:ce:88:74:23: 35:9a:f5:0d:86:ba:50:35:26:c1:c9:6a:ef:5d:ed:de:1a:92: 33:cc:12:d9:0b:ad:ce:c0:4c:41:04:17:13:b4:7c:38:15:e9: a7:f2:cd:8e:05:2f:bc:5e:bf:b0:0b:4d:07:d9:9e:2b:bd:8a: 01:40:92:6f:ca:fb:3a:e6:b5:a4:1d:25:1f:89:f7:9c:25:79: 74:c5:72:b4:dd:55:4a:cc:5f:7d:26:b5:a9:53:2b:9f:53:12: 11:bf:39:67:28:2d:06:73:b8:51:2a:e3:72:a6:45:02:52:4f: ba:54:5b:bb:db:e3:e4:c3:cd:3c:69:8c:ea:5f:56:82:28:a7: 9e:d7:40:30:6a:55:c8:da:bf:ee:94:4c:0e:14:65:4a:58:93: a1:21:4e:4f:49:cc:d7:ee:98:29:3b:be:ae:55:ab:d9:39:fc: c6:b1:d9:b5:04:85:1c:fb:ff:79:85:b8:81:d5:01:9f:21:37: 56:17:14:8e:5a:f6:13:8a:41:39:05:53:f6:71:54:0d:4f:6a: 82:09:d3:18:4c:2d:01:42:d5:3b:6d:bc:3c:7f:1b:88:1f:19: 64:a3:5c:3c:0b:58:a4:58:d2:02:04:d8:8e:1c:7a:ad:6c:0d: df:c5:b8:1a -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIURFNTJ3a73t+AxbsOrFrFmG66rKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUxMTVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDFhMjFkYmVjNDU2MGE5NzAwMjgxMzY0Yzc5ZTc1YTQ3MWU3MTVmZTk2MTJl OTc3ZTk5ZWUwYmQ0NGFmNjNlZWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHVTj/P7rlR8B1uZgfQ5dItnlD0bxVpqJYBHBrqOT95pbWzKFghToh9uvGX jEAtYKrNTXVrn4z/y5QcME0i/dPP5vsTM72gVKY6lG2ASkAO5slmpiGad8/7HBpw CChPhdZtoBE4vUR6udOQ9r3NndbdiLdubnlf+a/anE5e/KVyCKQvefBLNkWX5Myr QZPhWjaadG35J/Fm+yqcl4cG3MOl6uMmgS5VviS9PIA1PTqDJmo1Ytg5JuK/d6j9 Ndcd+6yTx81fwU0K0knjmv9wUXqQGVPNvo64+2OMYwEHFlA2T0OlnU2y7iyhL2k0 ETcWVIXW9K9eBEKU2TpA06sCWesCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQIfFQa UfVrKE09aGGrkROEx6AOPzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzU3NWI2ZmEtYzAyMy00NThmLTg1YzgtOTY5NGFhMDUzZTQzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFA gDANBgkqhkiG9w0BAQsFAAOCAQEApqbGiFU1h2efm6pNOTvOiHQjNZr1DYa6UDUm wclq713t3hqSM8wS2QutzsBMQQQXE7R8OBXpp/LNjgUvvF6/sAtNB9meK72KAUCS b8r7Oua1pB0lH4n3nCV5dMVytN1VSsxffSa1qVMrn1MSEb85ZygtBnO4USrjcqZF AlJPulRbu9vj5MPNPGmM6l9WgiinntdAMGpVyNq/7pRMDhRlSliToSFOT0nM1+6Y KTu+rlWr2Tn8xrHZtQSFHPv/eYW4gdUBnyE3VhcUjlr2E4pBOQVT9nFUDU9qggnT GEwtAULVO228PH8biB8ZZKNcPAtYpFjSAgTYjhx6rWwN38W4Gg== -----END CERTIFICATE-----Generated at Fri Jan 2 10:57:07 2026 by rpki-client