This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e20afb98-f3fb-45c2-9398-65129b8874f0.roa File: e20afb98-f3fb-45c2-9398-65129b8874f0.roa (raw, json) Hash identifier: GAbTh8d2x8ELIxv5u5xK93zaikGF9bf1lVTP8S9iVo8= Subject key identifier: 0F:EC:2B:99:23:A0:D8:20:00:7E:8C:7A:D8:CC:49:BE:C9:38:61:62 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 35828EBBF1335BB39321E1853F9266E579377BBC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e20afb98-f3fb-45c2-9398-65129b8874f0.roa Signing time: Wed 10 Dec 2025 05:40:10 +0000 ROA not before: Wed 10 Dec 2025 05:40:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:82:8e:bb:f1:33:5b:b3:93:21:e1:85:3f:92:66:e5:79:37:7b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:40:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=234b43380b2914e541bb569697293e816a53459bc9104146ab45a48d56fcd361, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d1:28:77:a0:64:28:d9:f1:a1:04:6f:b8:c0: e6:29:46:36:98:aa:a6:78:aa:b4:c2:dd:d7:46:e4: 49:42:79:62:54:1b:05:01:c7:0c:f2:bf:b1:5a:04: 85:18:19:3f:1f:6e:19:91:ba:3b:77:91:8f:81:36: c8:03:21:94:71:55:49:c0:ea:d8:09:e1:5d:c0:94: 7c:d8:a9:f4:1b:f0:ab:1c:c4:e3:da:58:7f:c3:65: 48:2d:13:13:df:c4:95:d5:f9:18:33:44:7c:1e:ae: 4e:6d:41:e8:34:e3:eb:1f:59:c3:38:12:28:04:58: 23:8a:2e:df:c7:0b:3a:7b:eb:d8:d9:ae:e2:95:9f: 5d:11:3b:9a:09:05:30:02:31:e3:84:40:56:91:69: 4c:43:0c:d0:3f:7f:3c:b5:1e:38:bc:48:46:0a:83: 6a:fd:c6:29:a8:49:d4:36:e5:3b:71:00:b1:93:61: 90:03:85:e0:49:a5:5e:ab:67:d7:1d:2f:c6:b1:18: ff:ab:a1:74:71:cc:48:c3:be:ca:8a:53:07:12:b4: b2:6a:65:74:45:6a:09:a1:69:b0:85:b0:9d:36:41: b5:c7:66:65:c9:ba:03:55:76:11:60:fa:be:86:c1: d5:3c:57:9d:e1:dd:21:47:91:b4:74:46:b5:7c:2b: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EC:2B:99:23:A0:D8:20:00:7E:8C:7A:D8:CC:49:BE:C9:38:61:62 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e20afb98-f3fb-45c2-9398-65129b8874f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption c1:95:fb:16:ca:95:46:54:39:ac:3f:bd:77:20:90:1a:21:c7: 77:ac:97:e0:a0:17:18:fb:15:93:c6:7d:8c:1f:8d:a5:49:8c: 5a:db:77:d3:4a:15:5c:f8:32:a0:76:a5:2c:50:2b:29:75:26: 52:89:e9:82:11:21:76:0f:18:61:89:6e:fe:b8:be:65:fa:fe: ba:46:e8:c0:86:a8:9e:f2:ed:db:f2:97:2c:70:50:3f:02:bc: 3e:27:f0:c3:57:da:af:0d:ee:63:45:5f:88:2c:3b:a2:d6:0e: eb:b9:0c:40:12:46:98:52:99:c7:55:d0:20:b4:39:c4:6f:10: 54:fa:d4:0d:a2:43:9e:43:5c:a6:cf:bd:c3:89:c4:22:20:1a: af:ff:05:b8:73:86:f6:e5:f1:03:e7:e8:4a:1e:c8:a2:56:49: c8:a2:15:6c:bd:fe:50:a5:1d:ee:67:5b:86:49:12:19:8a:d2: 3c:65:ac:00:32:ed:e4:af:1c:41:ae:75:b4:6a:1f:f0:d3:de: 32:d9:e4:91:c2:4b:cc:15:ef:81:c2:8a:3f:c9:77:1e:b4:73: 8e:3f:86:29:61:95:df:b3:0a:8d:3c:87:66:7b:32:76:11:c9: 9e:c4:82:19:96:01:db:ff:80:31:b5:c6:3c:10:bf:aa:31:33: 15:01:b4:eb -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUNYKOu/EzW7OTIeGFP5Jm5Xk3e7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQwMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDIzNGI0MzM4MGIyOTE0ZTU0MWJiNTY5Njk3MjkzZTgxNmE1MzQ1OWJjOTEw NDE0NmFiNDVhNDhkNTZmY2QzNjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODRKHegZCjZ8aEEb7jA5ilGNpiqpniqtMLd10bkSUJ5YlQbBQHHDPK/sVoE hRgZPx9uGZG6O3eRj4E2yAMhlHFVScDq2AnhXcCUfNip9BvwqxzE49pYf8NlSC0T E9/EldX5GDNEfB6uTm1B6DTj6x9ZwzgSKARYI4ou38cLOnvr2Nmu4pWfXRE7mgkF MAIx44RAVpFpTEMM0D9/PLUeOLxIRgqDav3GKahJ1DblO3EAsZNhkAOF4EmlXqtn 1x0vxrEY/6uhdHHMSMO+yopTBxK0smpldEVqCaFpsIWwnTZBtcdmZcm6A1V2EWD6 vobB1TxXneHdIUeRtHRGtXwrkwcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQP7CuZ I6DYIAB+jHrYzEm+yThhYjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTIwYWZiOTgtZjNmYi00NWMyLTkzOTgtNjUxMjliODg3NGYwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DHg wDANBgkqhkiG9w0BAQsFAAOCAQEAwZX7FsqVRlQ5rD+9dyCQGiHHd6yX4KAXGPsV k8Z9jB+NpUmMWtt300oVXPgyoHalLFArKXUmUonpghEhdg8YYYlu/ri+Zfr+ukbo wIaonvLt2/KXLHBQPwK8Pifww1farw3uY0VfiCw7otYO67kMQBJGmFKZx1XQILQ5 xG8QVPrUDaJDnkNcps+9w4nEIiAar/8FuHOG9uXxA+foSh7IolZJyKIVbL3+UKUd 7mdbhkkSGYrSPGWsADLt5K8cQa51tGof8NPeMtnkkcJLzBXvgcKKP8l3HrRzjj+G KWGV37MKjTyHZnsydhHJnsSCGZYB2/+AMbXGPBC/qjEzFQG06w== -----END CERTIFICATE-----Generated at Fri Jan 2 10:58:38 2026 by rpki-client