This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa File: e279c5e7-6144-440a-9f1d-2013fb96d06a.roa (raw, json) Hash identifier: LeHeOEIoP1aCVoFphpOdLlegW9jDcupAQdjYPuOJstk= Subject key identifier: 48:A4:E0:58:16:66:6B:F7:FC:CD:08:B0:0A:FF:B1:B4:E3:39:87:61 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7DAC496AE73B9B93CB939771EED0602782ECA6AF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa Signing time: Wed 10 Dec 2025 05:51:11 +0000 ROA not before: Wed 10 Dec 2025 05:51:11 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d032:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ac:49:6a:e7:3b:9b:93:cb:93:97:71:ee:d0:60:27:82:ec:a6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:51:11 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a2e87fc30ce697d0ce235e83c8a040e8230e7b8f95491f85d473dfbf8787e7a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:c0:65:e9:45:d1:c7:d6:b5:bb:c8:f6:c0: 40:e6:09:66:a9:58:1c:7e:65:e1:b7:be:83:d5:e0: 49:2f:33:1c:ae:19:33:d4:e5:9c:c4:b1:5d:cc:f5: a6:21:2d:08:57:3f:66:80:66:3a:db:66:9a:ca:86: 30:21:40:c8:b2:08:f8:db:74:ca:b7:c6:97:1d:75: 4c:0a:8e:a9:ba:99:b2:cb:b9:21:f5:ab:f5:4b:70: b4:82:80:1f:2d:01:c4:7f:42:5a:33:31:2b:a1:3a: 08:e2:71:c6:86:46:a0:b7:79:a2:b2:60:b5:02:14: 4b:32:de:0e:1c:94:db:c8:fa:55:98:ae:74:ad:ed: 74:fe:81:72:98:ba:83:bd:5c:0d:ca:74:da:44:df: 68:90:f4:9a:e5:2e:27:40:4f:e0:eb:9f:44:ec:c4: 31:f4:fd:49:6c:55:3c:dc:1c:23:a0:7b:ea:c9:68: 55:fe:d7:db:31:4d:85:3e:73:9e:4f:18:79:a2:ec: 67:a1:e4:c4:78:2f:8e:ec:06:d5:76:de:12:86:e4: e7:4b:35:9b:3c:91:b1:88:99:7f:d4:e9:d0:87:94: 08:14:c4:df:98:5e:3e:62:6d:cb:2e:61:ab:8b:ee: 82:bb:34:0e:1a:47:a1:1a:0d:cf:d8:cb:b3:55:19: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A4:E0:58:16:66:6B:F7:FC:CD:08:B0:0A:FF:B1:B4:E3:39:87:61 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d032:2000::/40 Signature Algorithm: sha256WithRSAEncryption ca:5f:30:06:33:99:96:5b:06:33:31:03:41:e0:ce:d4:02:41: 69:68:65:d4:64:c0:6d:cc:91:94:c0:70:9f:fe:fb:20:33:44: 95:f0:51:cb:94:be:eb:50:d2:1d:b0:86:3a:8c:a3:30:e6:e7: 3a:06:db:75:62:51:ea:07:f0:6e:1a:16:bd:62:e2:32:6f:e9: c7:93:c5:7a:5a:60:2f:16:e1:2f:43:e7:c8:f2:a6:35:57:2b: b5:22:bf:7f:f8:50:b0:b3:52:a0:e6:b4:fb:f8:85:17:44:1d: 2f:18:06:e2:32:cb:43:c8:b4:6b:fb:d7:bf:76:44:f5:12:e9: 54:5b:30:c8:15:dc:59:fc:b0:f1:d5:e9:e3:17:32:06:b7:11: 7f:cd:6a:a2:d0:89:9d:82:bc:75:49:fe:ca:98:7d:49:fc:6f: 6b:a2:51:ab:84:c7:39:38:0f:22:d2:57:a8:89:28:c2:e9:b1: 0a:64:93:5f:80:3a:51:5b:de:04:98:e4:f4:39:7f:a1:d3:a5: cd:8e:c6:2c:8b:1b:e3:71:1c:de:f7:0e:66:39:ae:84:c8:2e: 94:16:86:82:67:4f:0f:c1:e0:b7:90:7e:c4:d4:fa:fe:2a:09: a8:81:de:9a:4c:5e:a4:1e:a3:59:69:74:7c:79:27:64:5f:01: bb:e7:b6:be -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUfaxJauc7m5PLk5dx7tBgJ4Lspq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUxMTFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGEyZTg3ZmMzMGNlNjk3ZDBjZTIzNWU4M2M4YTA0MGU4MjMwZTdiOGY5NTQ5 MWY4NWQ0NzNkZmJmODc4N2U3YTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIvBwGXpRdHH1rW7yPbAQOYJZqlYHH5l4be+g9XgSS8zHK4ZM9TlnMSxXcz1 piEtCFc/ZoBmOttmmsqGMCFAyLII+Nt0yrfGlx11TAqOqbqZssu5IfWr9UtwtIKA Hy0BxH9CWjMxK6E6COJxxoZGoLd5orJgtQIUSzLeDhyU28j6VZiudK3tdP6Bcpi6 g71cDcp02kTfaJD0muUuJ0BP4OufROzEMfT9SWxVPNwcI6B76sloVf7X2zFNhT5z nk8YeaLsZ6HkxHgvjuwG1XbeEobk50s1mzyRsYiZf9Tp0IeUCBTE35hePmJtyy5h q4vugrs0DhpHoRoNz9jLs1UZnBsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRIpOBY FmZr9/zNCLAK/7G04zmHYTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTI3OWM1ZTctNjE0NC00NDBhLTlmMWQtMjAxM2ZiOTZkMDZhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DIg MA0GCSqGSIb3DQEBCwUAA4IBAQDKXzAGM5mWWwYzMQNB4M7UAkFpaGXUZMBtzJGU wHCf/vsgM0SV8FHLlL7rUNIdsIY6jKMw5uc6Btt1YlHqB/BuGha9YuIyb+nHk8V6 WmAvFuEvQ+fI8qY1Vyu1Ir9/+FCws1Kg5rT7+IUXRB0vGAbiMstDyLRr+9e/dkT1 EulUWzDIFdxZ/LDx1enjFzIGtxF/zWqi0Imdgrx1Sf7KmH1J/G9rolGrhMc5OA8i 0leoiSjC6bEKZJNfgDpRW94EmOT0OX+h06XNjsYsixvjcRze9w5mOa6EyC6UFoaC Z08PweC3kH7E1Pr+Kgmogd6aTF6kHqNZaXR8eSdkXwG757a+ -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:32 2026 by rpki-client