This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa File: e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa (raw, json) Hash identifier: 9r0hrclKwoeFGIk5R3a77e9LmpQ6DgdglBuJyD6J9M0= Subject key identifier: 29:FF:61:3B:D8:2F:96:A7:2A:D6:88:BA:CA:A3:9C:47:68:9E:64:1A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 44ACCD7126695E970E420BC4E3C5EC153C8876C4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa Signing time: Wed 10 Dec 2025 05:50:41 +0000 ROA not before: Wed 10 Dec 2025 05:50:41 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d03a:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ac:cd:71:26:69:5e:97:0e:42:0b:c4:e3:c5:ec:15:3c:88:76:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:41 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=d198f11c043e48b14bf9f96cce082c35c96f1a81bc897b83d3323ccdb303ba31, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:50:00:e2:e5:9f:19:3b:60:1a:e8:b7:29: 64:0e:77:6c:07:d2:ff:fb:f9:6d:74:07:cd:4e:40: 54:a9:ea:73:f7:81:ca:28:8d:04:13:83:1c:f0:c3: c7:02:82:19:63:27:e9:76:e3:2e:9a:03:b6:6a:14: df:d1:86:0e:e7:48:6d:01:70:bf:f8:f8:5f:68:7d: 2c:d6:dd:8e:56:de:5f:f9:36:11:ca:b4:16:4a:61: 9d:dd:04:3d:6e:52:53:52:f0:da:ec:7d:49:05:f5: ee:34:a2:4f:c6:a5:a7:d5:19:dd:7c:19:89:32:3b: c3:ba:b6:9e:24:21:14:06:28:0d:e1:fe:f3:fe:7a: 27:59:f9:ab:51:6a:06:d5:25:8d:25:74:36:a2:a1: c3:42:4c:f2:4c:66:b9:a9:1e:02:e9:74:d8:23:1d: 08:0c:95:82:d4:28:a0:3c:28:2d:d2:2e:d9:6f:d9: 1f:ed:87:01:bf:9f:68:6c:84:28:cb:42:48:45:18: 0c:80:93:91:97:66:ef:d0:62:d1:b9:de:a1:98:34: c9:ba:b9:d7:a6:9c:e8:bb:34:75:d3:8b:b1:f9:bf: 97:22:bf:f6:88:72:7a:7f:e6:3c:9c:94:da:ef:3c: 31:eb:8d:b7:73:93:8f:2e:ee:0b:da:8b:26:3b:d8: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FF:61:3B:D8:2F:96:A7:2A:D6:88:BA:CA:A3:9C:47:68:9E:64:1A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d03a:8000::/40 Signature Algorithm: sha256WithRSAEncryption 33:0b:4a:a1:d5:f8:f4:f8:d3:89:a2:d4:66:b3:d6:85:7a:5c: d6:57:1c:86:03:7c:d2:dc:87:6a:55:aa:6e:95:30:df:2b:b1: d5:d6:02:c1:31:3a:e9:5f:53:bf:13:3b:fd:b0:86:a9:1e:cc: eb:61:6b:3c:18:30:b9:c0:37:9e:c0:86:3c:b0:30:15:0b:b7: b5:02:5a:81:8c:8f:ea:c3:93:04:55:cf:64:11:5e:1a:01:59: 87:9d:ec:1f:4f:f6:d3:0b:b1:6d:af:68:11:4b:e8:b0:51:9a: ee:70:a5:82:05:83:90:b8:2f:a6:1d:5a:f6:c5:df:bf:13:78: cd:9e:fa:64:8d:a9:82:cc:57:4f:d8:95:ec:59:19:fe:38:1c: ba:78:ad:61:11:e2:a7:5d:38:8a:a3:61:67:44:c6:62:45:f6: 32:22:13:75:82:dd:cf:1b:c1:25:8a:ff:f3:37:a1:a3:1d:ca: 3b:9c:28:b1:3f:71:ef:ad:6e:b0:b1:8e:fc:91:87:31:8d:48: 16:8c:71:5d:e4:44:04:d9:8a:12:d1:01:c6:be:ae:14:2e:87: a6:9d:5b:c1:8b:3b:76:df:74:e1:cc:36:08:de:c7:65:7a:f5: aa:93:ac:dd:45:4f:da:d3:9d:37:39:14:9d:7a:99:a7:0e:c0: 67:e0:a5:23 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIURKzNcSZpXpcOQgvE48XsFTyIdsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwNDFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGQxOThmMTFjMDQzZTQ4YjE0YmY5Zjk2Y2NlMDgyYzM1Yzk2ZjFhODFiYzg5 N2I4M2QzMzIzY2NkYjMwM2JhMzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3bUADi5Z8ZO2Aa6LcpZA53bAfS//v5bXQHzU5AVKnqc/eByiiNBBODHPDD xwKCGWMn6XbjLpoDtmoU39GGDudIbQFwv/j4X2h9LNbdjlbeX/k2Ecq0Fkphnd0E PW5SU1Lw2ux9SQX17jSiT8alp9UZ3XwZiTI7w7q2niQhFAYoDeH+8/56J1n5q1Fq BtUljSV0NqKhw0JM8kxmuakeAul02CMdCAyVgtQooDwoLdIu2W/ZH+2HAb+faGyE KMtCSEUYDICTkZdm79Bi0bneoZg0ybq516ac6Ls0ddOLsfm/lyK/9ohyen/mPJyU 2u88MeuNt3OTjy7uC9qLJjvY9rsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQp/2E7 2C+WpyrWiLrKo5xHaJ5kGjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTdlZmQ4NjEtOGRjNi00MGM1LTg3MTMtMGJjZmRiZWQ3YzJlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DqA MA0GCSqGSIb3DQEBCwUAA4IBAQAzC0qh1fj0+NOJotRms9aFelzWVxyGA3zS3Idq VapulTDfK7HV1gLBMTrpX1O/Ezv9sIapHszrYWs8GDC5wDeewIY8sDAVC7e1AlqB jI/qw5MEVc9kEV4aAVmHnewfT/bTC7Ftr2gRS+iwUZrucKWCBYOQuC+mHVr2xd+/ E3jNnvpkjamCzFdP2JXsWRn+OBy6eK1hEeKnXTiKo2FnRMZiRfYyIhN1gt3PG8El iv/zN6GjHco7nCixP3HvrW6wsY78kYcxjUgWjHFd5EQE2YoS0QHGvq4ULoemnVvB izt233ThzDYI3sdlevWqk6zdRU/a0503ORSdepmnDsBn4KUj -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:45 2025 by rpki-client