This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa File: d7b89972-677a-470e-88ff-f95e3c9a9443.roa (raw, json) Hash identifier: Z5ZmlinaFtrruMp770EKBFqjqk3MA/3JqxX1qPfKXC8= Subject key identifier: B7:67:48:63:E9:9F:6C:19:6C:35:A6:DE:AC:EB:64:34:74:50:39:13 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 06DFEEA24A3C6B218588EDCC1778BDCD70859022 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa Signing time: Wed 10 Dec 2025 06:00:46 +0000 ROA not before: Wed 10 Dec 2025 06:00:46 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06d:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:df:ee:a2:4a:3c:6b:21:85:88:ed:cc:17:78:bd:cd:70:85:90:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:00:46 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=353cb5a7598a88e0be87392e98dc63c85cc377cbd94e9b4006857a63481790d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:f1:c0:f2:97:96:0f:0d:75:d3:a4:b6:9d: f8:a4:4a:66:b0:4b:4f:47:5a:30:0f:a2:5b:f2:8b: 37:0a:99:88:e8:0f:18:32:17:e9:3a:25:25:ce:d7: 62:5c:2c:44:f7:a9:44:9a:c6:c3:ed:42:0c:16:58: 48:3e:a5:e7:d3:a1:24:40:76:58:66:d0:b1:59:8e: 4b:91:6d:e6:2b:80:37:31:dc:80:1b:59:0c:c9:1c: f5:05:be:5f:69:77:08:5d:9f:3d:eb:ae:27:31:0f: c3:9f:f9:bd:3f:38:3f:b3:52:6e:68:22:28:19:1c: 0e:f0:63:a9:fc:bd:fc:79:90:02:e5:9f:1f:7e:0f: 21:40:01:25:0e:59:e0:89:8a:d8:5b:37:c3:9b:d1: fb:9a:6b:f0:1c:a1:61:43:d4:94:c4:6f:87:ba:5d: c0:8c:84:06:ed:8b:c5:96:d7:11:8c:c0:a3:3e:2c: cf:e0:ba:d8:5d:7f:61:e3:82:18:4f:6c:a6:da:77: cf:b7:16:60:b7:9a:90:cb:04:be:e4:32:58:0f:4e: a7:a7:cf:7b:ec:da:fa:92:1a:c4:03:e1:70:23:83: d3:e0:d8:3a:29:90:9f:a8:e4:0b:a2:c1:cd:83:37: a1:a5:48:a5:d0:25:6a:37:d5:fd:d5:04:df:f1:60: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:67:48:63:E9:9F:6C:19:6C:35:A6:DE:AC:EB:64:34:74:50:39:13 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06d:800::/40 Signature Algorithm: sha256WithRSAEncryption b3:81:3b:66:dc:14:cc:0b:e2:3a:17:dd:fe:88:63:8f:e7:8e: 6b:42:31:7d:d4:91:0c:15:1f:2c:bc:58:ad:2f:a6:58:67:2d: b3:a5:c9:cb:14:2a:05:d5:ec:b7:51:0c:3f:8b:40:af:51:ef: 9f:c1:7d:2e:0e:c6:44:74:20:2d:60:01:90:eb:48:63:b6:a3: e5:fa:2b:f0:45:e4:75:9b:0b:bc:17:b5:9f:c8:bc:7f:65:25: 98:e5:9b:1a:bd:b9:06:e1:38:51:aa:b9:a5:27:c6:ef:bd:be: 9f:7a:67:37:f9:9a:c7:8c:97:e8:9d:85:6e:ec:ad:1a:56:3e: 7f:83:3e:9f:7b:71:d5:bd:d3:1f:6e:da:f0:35:7c:e6:05:74: e0:51:25:03:95:cd:5b:2c:22:9a:76:39:2d:a4:fa:ad:77:3f: 39:51:17:71:c2:c3:65:91:a5:02:62:51:c1:87:89:18:ee:10: c1:8f:e3:fd:34:75:0d:22:b1:79:98:ee:c0:ce:6a:fd:34:f8: e0:db:da:f3:7c:c5:cd:ff:f7:4a:f0:64:50:d5:25:44:ad:da: 71:b9:91:50:64:e7:19:d1:ad:09:fd:13:23:39:2a:e1:5b:b6: a6:30:a2:35:6c:b7:42:9f:e2:9c:ea:03:6f:c2:17:e3:ab:17: 84:b5:45:ac -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUBt/uoko8ayGFiO3MF3i9zXCFkCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAwNDZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDM1M2NiNWE3NTk4YTg4ZTBiZTg3MzkyZTk4ZGM2M2M4NWNjMzc3Y2JkOTRl OWI0MDA2ODU3YTYzNDgxNzkwZDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSl8cDyl5YPDXXTpLad+KRKZrBLT0daMA+iW/KLNwqZiOgPGDIX6TolJc7X YlwsRPepRJrGw+1CDBZYSD6l59OhJEB2WGbQsVmOS5Ft5iuANzHcgBtZDMkc9QW+ X2l3CF2fPeuuJzEPw5/5vT84P7NSbmgiKBkcDvBjqfy9/HmQAuWfH34PIUABJQ5Z 4ImK2Fs3w5vR+5pr8ByhYUPUlMRvh7pdwIyEBu2LxZbXEYzAoz4sz+C62F1/YeOC GE9sptp3z7cWYLeakMsEvuQyWA9Op6fPe+za+pIaxAPhcCOD0+DYOimQn6jkC6LB zYM3oaVIpdAlajfV/dUE3/FgnzsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS3Z0hj 6Z9sGWw1pt6s62Q0dFA5EzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDdiODk5NzItNjc3YS00NzBlLTg4ZmYtZjk1ZTNjOWE5NDQzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G0I MA0GCSqGSIb3DQEBCwUAA4IBAQCzgTtm3BTMC+I6F93+iGOP545rQjF91JEMFR8s vFitL6ZYZy2zpcnLFCoF1ey3UQw/i0CvUe+fwX0uDsZEdCAtYAGQ60hjtqPl+ivw ReR1mwu8F7WfyLx/ZSWY5ZsavbkG4ThRqrmlJ8bvvb6femc3+ZrHjJfonYVu7K0a Vj5/gz6fe3HVvdMfbtrwNXzmBXTgUSUDlc1bLCKadjktpPqtdz85URdxwsNlkaUC YlHBh4kY7hDBj+P9NHUNIrF5mO7Azmr9NPjg29rzfMXN//dK8GRQ1SVErdpxuZFQ ZOcZ0a0J/RMjOSrhW7amMKI1bLdCn+Kc6gNvwhfjqxeEtUWs -----END CERTIFICATE-----Generated at Fri Jan 2 10:59:54 2026 by rpki-client