This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa File: de6578a7-816f-468a-acf9-83781a3b3769.roa (raw, json) Hash identifier: npKIcEmEX0Ntda+bAiJ/BUpLKrOHT1xHW2gieV3QHnQ= Subject key identifier: FC:8F:DC:48:E4:BC:5A:BD:65:49:76:C5:EC:50:0D:EB:CD:AB:65:5F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6474FAE27FB3932C519908C119F1D83CD71C4BB7 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa Signing time: Wed 10 Dec 2025 06:31:07 +0000 ROA not before: Wed 10 Dec 2025 06:31:07 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:74:fa:e2:7f:b3:93:2c:51:99:08:c1:19:f1:d8:3c:d7:1c:4b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:31:07 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=ad65405fe22b3517117fb042426ab7bb9c49236cc6e69f2b54a912b2cdef05f5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:6c:32:c9:7c:c0:b1:ee:df:71:00:5a:6d: 6e:3b:62:1c:36:15:68:6b:86:b2:16:09:f0:c8:8f: 64:eb:47:1e:59:e2:5c:15:3c:35:a3:9f:fc:f8:83: af:c3:f6:4f:e3:67:c0:f7:6c:89:03:f6:55:aa:24: 7d:e6:e1:3a:cc:f7:92:b4:91:b0:bc:4c:b4:6c:66: 69:7d:e6:8b:55:df:c7:31:c3:f9:36:40:4a:1d:bc: af:36:6c:1a:59:11:c3:36:98:81:92:e8:70:cf:f9: d8:b3:3e:33:7b:af:41:12:e4:48:a6:66:30:6e:6a: da:66:d3:36:fc:95:18:fc:1a:3e:b0:7c:b3:03:d0: a2:31:67:d1:39:9a:50:91:77:c8:a5:82:57:4a:d0: b6:c8:f0:62:27:e9:9b:96:cc:c2:12:99:0b:d2:43: c2:0e:3a:81:a2:7d:43:84:bc:af:31:95:c1:e8:48: bf:0c:92:5e:5e:2c:0c:d5:b8:c3:45:61:ad:4b:c7: 78:f0:a4:4e:0e:fc:3e:1f:63:e9:e8:53:33:d7:0b: 1c:1b:9c:65:fe:c9:ef:f4:5a:4e:76:d0:20:aa:5e: 6f:6f:db:a5:d0:df:85:ca:d0:06:41:35:5c:e6:4c: 42:6a:93:72:0f:68:eb:fe:07:cd:e9:ee:8d:db:13: 75:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:DC:48:E4:BC:5A:BD:65:49:76:C5:EC:50:0D:EB:CD:AB:65:5F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:8000::/40 Signature Algorithm: sha256WithRSAEncryption bc:30:28:48:ef:97:a3:d8:71:05:b1:f4:ca:f6:07:f4:35:22: 11:9f:46:55:6d:b2:1f:b1:6e:e7:e8:47:81:30:af:a2:f1:24: 7a:d7:cf:8e:a3:e3:59:ea:90:5d:12:4e:71:60:f5:9e:bd:78: 71:8e:23:14:65:93:d1:09:78:ac:ea:0a:84:b1:0e:1c:0b:70: a4:05:f4:d5:00:a2:cb:23:50:ef:04:52:75:8d:c9:9a:3f:5b: 49:05:76:65:7f:99:82:51:0f:15:dc:ad:50:3a:8f:1b:f8:fc: f1:a5:ca:65:90:a2:00:81:ef:8c:bf:a9:52:b0:55:b1:75:b1: 82:c7:5a:45:6c:0e:78:f0:3e:5f:18:69:a1:5b:58:47:d0:d1: 13:a7:e1:64:1c:fc:58:cd:0b:11:97:92:78:20:5a:d3:c4:9b: e8:d2:4d:44:d0:d4:23:69:2b:57:ed:43:db:39:53:1e:61:f2: 6d:a9:8b:5e:3f:8d:e6:18:d2:75:99:ad:8f:bf:0d:65:7b:6f: 20:1c:06:2a:12:d8:2e:43:e5:bb:bf:80:d5:98:a0:b7:77:27: 62:3a:98:2b:7e:04:b9:04:a4:93:84:1c:41:4f:ac:2b:07:99: b1:0d:74:9f:71:b7:50:06:39:2a:af:06:8d:9a:c7:95:94:43: a9:ff:8e:a2 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZHT64n+zkyxRmQjBGfHYPNccS7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMxMDdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGFkNjU0MDVmZTIyYjM1MTcxMTdmYjA0MjQyNmFiN2JiOWM0OTIzNmNjNmU2 OWYyYjU0YTkxMmIyY2RlZjA1ZjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZebDLJfMCx7t9xAFptbjtiHDYVaGuGshYJ8MiPZOtHHlniXBU8NaOf/PiD r8P2T+NnwPdsiQP2VaokfebhOsz3krSRsLxMtGxmaX3mi1XfxzHD+TZASh28rzZs GlkRwzaYgZLocM/52LM+M3uvQRLkSKZmMG5q2mbTNvyVGPwaPrB8swPQojFn0Tma UJF3yKWCV0rQtsjwYifpm5bMwhKZC9JDwg46gaJ9Q4S8rzGVwehIvwySXl4sDNW4 w0VhrUvHePCkTg78Ph9j6ehTM9cLHBucZf7J7/RaTnbQIKpeb2/bpdDfhcrQBkE1 XOZMQmqTcg9o6/4HzenujdsTdaMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT8j9xI 5LxavWVJdsXsUA3rzatlXzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGU2NTc4YTctODE2Zi00NjhhLWFjZjktODM3ODFhM2IzNzY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DGA MA0GCSqGSIb3DQEBCwUAA4IBAQC8MChI75ej2HEFsfTK9gf0NSIRn0ZVbbIfsW7n 6EeBMK+i8SR618+Oo+NZ6pBdEk5xYPWevXhxjiMUZZPRCXis6gqEsQ4cC3CkBfTV AKLLI1DvBFJ1jcmaP1tJBXZlf5mCUQ8V3K1QOo8b+PzxpcplkKIAge+Mv6lSsFWx dbGCx1pFbA548D5fGGmhW1hH0NETp+FkHPxYzQsRl5J4IFrTxJvo0k1E0NQjaStX 7UPbOVMeYfJtqYteP43mGNJ1ma2Pvw1le28gHAYqEtguQ+W7v4DVmKC3dydiOpgr fgS5BKSThBxBT6wrB5mxDXSfcbdQBjkqrwaNmseVlEOp/46i -----END CERTIFICATE-----Generated at Sun Dec 14 01:32:21 2025 by rpki-client