This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa File: decd4459-2e9b-442e-a3bd-6633fdd0250b.roa (raw, json) Hash identifier: OnTAlo7ZSy6vk5XaZyTt/B08KuAFUlrNSyPp94tbDtA= Subject key identifier: EB:C4:F8:F5:BF:88:44:52:29:69:E0:4F:FF:C2:76:FA:73:05:59:0F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 37A00A214C13A8D81631DB6D6BBC7688B48F86AF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa Signing time: Wed 10 Dec 2025 05:50:41 +0000 ROA not before: Wed 10 Dec 2025 05:50:41 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a0:0a:21:4c:13:a8:d8:16:31:db:6d:6b:bc:76:88:b4:8f:86:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:41 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a864f00c7e8530d9e08f85dd829511596252a9dba6b805970bb8bddefdfc2b34, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:3f:59:57:aa:7e:5c:50:6b:13:0e:53:f7: 5a:bc:f8:82:ff:ed:5c:ce:e9:b9:f0:4c:d0:2f:90: dc:5c:aa:df:a9:04:f1:eb:10:f6:71:1d:6c:fd:d5: e6:7c:a4:f3:ea:da:0c:69:24:2f:79:9d:1f:fb:ac: 59:8e:1a:7e:06:87:c3:d5:31:a4:3a:6f:eb:e8:cc: 81:59:24:06:5c:7d:1b:5f:27:40:a1:aa:51:c9:49: 8d:0d:f8:25:81:8e:c3:88:b8:d4:fa:82:65:61:a2: d2:c0:30:72:e0:2e:e7:24:67:99:c4:40:bd:27:69: 7e:2e:55:b1:2f:d6:41:7b:8c:c7:89:49:e9:ae:31: 04:5e:42:9c:17:29:7a:0d:be:86:9b:99:8d:19:8f: 83:28:85:9b:b9:0c:75:12:be:3b:b7:3b:1b:ea:df: bc:8f:f6:10:c4:dd:69:6b:02:1f:06:7d:52:09:c4: 05:f3:74:68:5c:85:98:75:fb:ca:c1:b7:35:89:01: 49:78:bb:4c:ee:15:87:75:a9:7f:10:b1:f5:a1:83: 82:15:14:7a:6c:16:91:05:75:8b:b4:23:c3:54:79: a6:2c:8b:39:ce:00:71:e1:16:83:95:61:05:0a:a3: 00:75:8a:eb:e5:1f:3e:02:ed:4f:b8:ac:f3:f2:a4: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C4:F8:F5:BF:88:44:52:29:69:E0:4F:FF:C2:76:FA:73:05:59:0F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:a000::/40 Signature Algorithm: sha256WithRSAEncryption bd:5b:1b:8b:67:ab:00:31:7b:03:4f:10:52:ed:1e:66:f5:62: 63:38:1f:07:47:4e:67:a5:78:13:f3:51:f8:e6:cf:05:73:21: c5:bd:04:7e:ee:19:fa:93:4d:78:de:2b:e7:44:38:49:6d:08: 33:22:06:40:ee:4d:4b:5b:57:ac:bd:3f:09:13:80:ee:44:ef: 36:93:62:91:1e:ad:f0:9f:13:80:3c:11:3c:0f:9e:62:54:93: 46:06:b7:0d:8c:a3:b7:56:b1:b1:c2:eb:66:03:f1:58:9b:76: b7:60:44:a2:56:55:af:a0:63:64:3c:61:1a:fc:1a:f1:2a:f1: 0f:bf:66:e3:a7:59:88:c8:fb:cd:b8:db:ed:e5:2d:65:21:28: 1e:22:21:cb:44:5a:a3:08:25:57:66:76:1b:70:a8:c8:f6:f5: af:83:65:61:ec:b7:8f:74:82:38:d7:ce:8e:47:11:70:b1:38: df:22:ba:54:fe:f0:e4:73:8f:bc:24:26:b1:1e:d7:29:72:38: 76:2c:d8:83:33:bc:5e:49:82:8f:7d:4e:9c:88:63:6b:ed:0c: 5c:63:ee:ce:3b:0c:f1:c9:f4:d6:3a:7d:62:b6:f6:0e:88:2b: fe:30:69:5c:e8:01:f8:68:6d:73:b7:e2:28:88:51:3b:1e:b6: c0:b0:08:03 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUN6AKIUwTqNgWMdtta7x2iLSPhq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwNDFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGE4NjRmMDBjN2U4NTMwZDllMDhmODVkZDgyOTUxMTU5NjI1MmE5ZGJhNmI4 MDU5NzBiYjhiZGRlZmRmYzJiMzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1jP1lXqn5cUGsTDlP3Wrz4gv/tXM7pufBM0C+Q3Fyq36kE8esQ9nEdbP3V 5nyk8+raDGkkL3mdH/usWY4afgaHw9UxpDpv6+jMgVkkBlx9G18nQKGqUclJjQ34 JYGOw4i41PqCZWGi0sAwcuAu5yRnmcRAvSdpfi5VsS/WQXuMx4lJ6a4xBF5CnBcp eg2+hpuZjRmPgyiFm7kMdRK+O7c7G+rfvI/2EMTdaWsCHwZ9UgnEBfN0aFyFmHX7 ysG3NYkBSXi7TO4Vh3WpfxCx9aGDghUUemwWkQV1i7Qjw1R5piyLOc4AceEWg5Vh BQqjAHWK6+UfPgLtT7is8/KkBL8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTrxPj1 v4hEUilp4E//wnb6cwVZDzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGVjZDQ0NTktMmU5Yi00NDJlLWEzYmQtNjYzM2ZkZDAyNTBiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HKg MA0GCSqGSIb3DQEBCwUAA4IBAQC9WxuLZ6sAMXsDTxBS7R5m9WJjOB8HR05npXgT 81H45s8FcyHFvQR+7hn6k0143ivnRDhJbQgzIgZA7k1LW1esvT8JE4DuRO82k2KR Hq3wnxOAPBE8D55iVJNGBrcNjKO3VrGxwutmA/FYm3a3YESiVlWvoGNkPGEa/Brx KvEPv2bjp1mIyPvNuNvt5S1lISgeIiHLRFqjCCVXZnYbcKjI9vWvg2Vh7LePdII4 186ORxFwsTjfIrpU/vDkc4+8JCaxHtcpcjh2LNiDM7xeSYKPfU6ciGNr7QxcY+7O OwzxyfTWOn1itvYOiCv+MGlc6AH4aG1zt+IoiFE7HrbAsAgD -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:34 2026 by rpki-client