This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa File: c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa (raw, json) Hash identifier: qZJNndeIcciELP0wnrVCeTE+FTXb+G1BKlwG8wCEKfg= Subject key identifier: A7:60:3E:C1:C0:B7:52:40:B2:B8:5D:9D:84:69:1F:C4:A2:E4:10:AD Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4E0C89A6807E0D6799A9269FA71657876F35AA95 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa Signing time: Wed 10 Dec 2025 05:51:01 +0000 ROA not before: Wed 10 Dec 2025 05:51:01 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0c:89:a6:80:7e:0d:67:99:a9:26:9f:a7:16:57:87:6f:35:aa:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:51:01 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=31662135c0f73d698b707d6c578266a71ed78c3774a286dc7c2bd298210a17f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:34:a5:72:d4:aa:f4:e8:49:d1:dc:d0:ed: 26:fb:1f:f7:31:95:f9:72:0b:0d:7f:ef:39:15:3f: be:61:c7:33:61:f8:2e:3c:6f:3d:04:bd:65:c4:d5: 33:f6:f8:80:82:28:50:6d:79:88:33:97:06:ee:94: e0:7a:d1:66:c8:7e:bc:91:f5:f2:1f:89:a8:c0:00: 1a:03:71:df:cd:d1:18:94:3b:af:42:0a:a5:02:a1: 4f:43:99:f2:62:aa:2c:09:5a:5a:ec:33:59:ca:14: c2:34:69:01:39:1f:aa:53:39:68:9f:6a:17:80:61: ac:3e:49:47:17:a1:24:ed:94:60:2c:27:79:ff:42: e3:ec:26:15:fa:74:47:3f:04:7b:1d:41:4d:e4:48: 8e:79:ee:8c:4a:9b:ad:5c:33:bb:ae:18:3b:f8:ec: 5e:d8:83:4b:8f:f9:7d:a4:35:23:a6:77:91:b4:f5: 8d:d1:75:b8:83:dd:8b:05:fd:56:f2:f3:66:37:93: ee:99:93:64:76:8c:1b:43:76:b3:98:50:3b:5f:33: 1f:d7:81:8a:39:2d:25:2a:55:18:1c:aa:b7:e0:62: a4:93:74:0f:48:48:e9:83:1b:85:7c:50:56:6f:f2: 93:64:17:fd:22:63:0f:aa:90:aa:b8:94:65:d5:e2: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:3E:C1:C0:B7:52:40:B2:B8:5D:9D:84:69:1F:C4:A2:E4:10:AD X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9256536-0e9a-4175-8ac7-a0fb991ebff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:c000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:60:a4:c9:9a:4d:26:59:e7:0f:66:65:6b:82:74:5e:63:82: 08:14:ba:50:1d:5f:d7:55:de:ac:fe:34:9c:8f:27:4d:31:c8: 74:b4:fe:5b:8b:c5:71:62:1c:7d:1a:b4:e4:f0:fb:10:c0:a2: 10:72:13:50:7d:7f:21:b5:3e:95:d7:c9:cc:08:be:bc:86:b9: 8f:e2:c7:ff:c5:d9:55:3f:8b:27:73:c5:91:51:66:07:2a:4a: 65:3e:51:68:49:01:72:69:94:77:26:38:4f:62:52:8b:fb:d0: 92:57:e3:fe:79:33:9e:1b:93:79:5c:5b:4c:cc:70:24:27:ab: a4:fa:cf:32:0c:46:fc:fd:c0:bc:47:c6:05:e8:1b:91:e6:e5: db:f2:ae:9e:9c:8e:d4:60:d8:6e:c3:39:62:f6:3a:dd:24:ba: 5a:74:cc:73:d1:ca:b7:19:3c:0b:00:a8:e9:e5:5b:7c:e3:31: e7:1c:fe:36:40:bb:eb:bb:8e:23:f5:56:00:23:54:e0:9d:92: 34:25:2d:c5:bd:27:d7:9d:2c:02:dd:4b:f2:18:9b:ca:6f:e7: 58:88:b2:f6:fa:33:e9:78:fc:fe:fd:7e:e7:41:cf:5a:3e:41: 37:e9:f1:2d:20:db:56:d7:03:a8:c5:2e:f7:b6:93:3d:6d:ea: 26:7e:20:bb -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUTgyJpoB+DWeZqSafpxZXh281qpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUxMDFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDMxNjYyMTM1YzBmNzNkNjk4YjcwN2Q2YzU3ODI2NmE3MWVkNzhjMzc3NGEy ODZkYzdjMmJkMjk4MjEwYTE3ZjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALH7NKVy1Kr06EnR3NDtJvsf9zGV+XILDX/vORU/vmHHM2H4LjxvPQS9ZcTV M/b4gIIoUG15iDOXBu6U4HrRZsh+vJH18h+JqMAAGgNx383RGJQ7r0IKpQKhT0OZ 8mKqLAlaWuwzWcoUwjRpATkfqlM5aJ9qF4BhrD5JRxehJO2UYCwnef9C4+wmFfp0 Rz8Eex1BTeRIjnnujEqbrVwzu64YO/jsXtiDS4/5faQ1I6Z3kbT1jdF1uIPdiwX9 VvLzZjeT7pmTZHaMG0N2s5hQO18zH9eBijktJSpVGByqt+BipJN0D0hI6YMbhXxQ Vm/yk2QX/SJjD6qQqriUZdXim4kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSnYD7B wLdSQLK4XZ2EaR/EouQQrTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzkyNTY1MzYtMGU5YS00MTc1LThhYzctYTBmYjk5MWViZmY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HbA MA0GCSqGSIb3DQEBCwUAA4IBAQAbYKTJmk0mWecPZmVrgnReY4IIFLpQHV/XVd6s /jScjydNMch0tP5bi8VxYhx9GrTk8PsQwKIQchNQfX8htT6V18nMCL68hrmP4sf/ xdlVP4snc8WRUWYHKkplPlFoSQFyaZR3JjhPYlKL+9CSV+P+eTOeG5N5XFtMzHAk J6uk+s8yDEb8/cC8R8YF6BuR5uXb8q6enI7UYNhuwzli9jrdJLpadMxz0cq3GTwL AKjp5Vt84zHnHP42QLvru44j9VYAI1TgnZI0JS3FvSfXnSwC3UvyGJvKb+dYiLL2 +jPpePz+/X7nQc9aPkE36fEtINtW1wOoxS73tpM9beomfiC7 -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:04 2026 by rpki-client