This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa File: e875eadd-6478-4ac0-8792-06722aa80dd0.roa (raw, json) Hash identifier: oqZoVHo5pRFAE3zesn8QkGYTteL7cwuHYQShGLz93sA= Subject key identifier: 21:9A:89:20:24:19:AF:B6:F3:A3:96:96:55:54:43:39:59:12:71:D8 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 31BF86C63BF0C7D31170F8AB1FAE55BCBA5B1A5C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa Signing time: Wed 10 Dec 2025 05:41:05 +0000 ROA not before: Wed 10 Dec 2025 05:41:05 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bf:86:c6:3b:f0:c7:d3:11:70:f8:ab:1f:ae:55:bc:ba:5b:1a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:41:05 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=83bb1e2022b09e760a2bce7be8d712e5c2e09db9ea1a7d7e7fc46ba7f7b90a5e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:dd:e0:e8:8c:27:a5:0f:72:3e:c7:92:df: 80:72:6e:75:be:bf:83:3c:ef:ea:d5:67:59:bb:42: 64:0f:70:e0:1a:86:49:af:0c:72:06:90:7b:c1:9a: a9:ed:c9:5a:66:16:d1:b6:be:d5:3b:34:b2:48:19: 6b:9f:05:a7:58:21:22:94:20:f5:9b:d3:04:9b:fd: dd:96:1f:8e:77:aa:5b:00:01:bc:19:77:96:11:a9: f3:96:ae:0f:67:e9:5c:33:2f:b6:00:01:b7:b5:2a: 62:3d:29:8e:6f:1b:32:8c:1b:df:a0:e7:f4:84:dd: c2:a9:ee:f0:42:09:96:67:9b:14:14:2d:2d:0a:51: 14:55:7d:47:54:81:99:41:da:b1:9a:2e:ea:67:0b: ae:c2:ef:8e:8c:e3:d0:bc:66:6d:9b:52:83:38:9a: 5c:2d:d6:84:fc:e7:36:30:d2:40:17:aa:46:60:4b: 4e:39:db:2f:31:52:b5:47:72:12:5a:37:cb:27:1f: 77:24:4d:2d:2b:14:be:11:57:7c:6c:9e:06:24:b4: a7:aa:a4:98:01:bc:42:97:72:d0:77:3c:db:09:ce: 9c:c3:97:6f:65:b7:b4:80:3e:8e:cb:0e:89:5b:01: 68:2b:20:96:6a:60:a9:5f:0a:d5:3c:10:3c:46:98: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9A:89:20:24:19:AF:B6:F3:A3:96:96:55:54:43:39:59:12:71:D8 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:20c0::/48 Signature Algorithm: sha256WithRSAEncryption c8:46:47:69:fa:05:02:23:62:51:64:a7:b9:65:7f:e4:3b:cb: ce:f7:16:ff:b2:21:d1:62:6c:61:44:be:ec:4c:9b:07:df:12: e9:db:97:6f:f4:ea:61:0f:29:c2:97:0f:e1:44:5a:1c:da:ef: a4:8e:1b:bd:10:c1:8c:92:40:e2:30:fb:b2:82:88:fe:06:74: cc:3c:ab:51:86:ed:49:a3:ff:4f:67:a5:b3:3c:da:68:57:d9: 43:a7:51:f2:a6:bc:33:bf:fd:af:de:d8:ad:32:b0:b3:63:09: f0:e6:ee:d5:0f:da:d2:b1:9e:5b:31:ef:99:e1:ec:14:4e:95: 59:33:29:8b:e3:dd:a7:61:e8:ff:73:67:48:5e:73:8f:65:9d: 74:ed:c5:48:0d:34:47:da:47:d9:a0:9b:28:76:94:c6:72:19: d3:a4:de:1c:72:de:a7:42:7e:ae:ab:26:ed:ad:4d:26:93:dc: 20:ee:4b:60:22:d7:70:73:2f:99:c9:c3:45:67:12:f1:b0:b8: 6e:34:63:75:95:c2:db:fd:b6:6f:06:83:3d:b2:a3:00:df:c0: d2:21:e8:a9:a5:73:21:08:d0:e5:84:72:58:99:0d:94:84:44: 5e:c2:ee:a8:c1:0d:be:65:34:66:2e:20:ba:da:23:e9:4a:86: f9:7f:bf:7a -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUMb+Gxjvwx9MRcPirH65VvLpbGlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQxMDVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDgzYmIxZTIwMjJiMDllNzYwYTJiY2U3YmU4ZDcxMmU1YzJlMDlkYjllYTFh N2Q3ZTdmYzQ2YmE3ZjdiOTBhNWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANv33eDojCelD3I+x5LfgHJudb6/gzzv6tVnWbtCZA9w4BqGSa8McgaQe8Ga qe3JWmYW0ba+1Ts0skgZa58Fp1ghIpQg9ZvTBJv93ZYfjneqWwABvBl3lhGp85au D2fpXDMvtgABt7UqYj0pjm8bMowb36Dn9ITdwqnu8EIJlmebFBQtLQpRFFV9R1SB mUHasZou6mcLrsLvjozj0LxmbZtSgziaXC3WhPznNjDSQBeqRmBLTjnbLzFStUdy Elo3yycfdyRNLSsUvhFXfGyeBiS0p6qkmAG8Qpdy0Hc82wnOnMOXb2W3tIA+jssO iVsBaCsglmpgqV8K1TwQPEaYbccCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQhmokg JBmvtvOjlpZVVEM5WRJx2DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTg3NWVhZGQtNjQ3OC00YWMwLTg3OTItMDY3MjJhYTgwZGQwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIg wDANBgkqhkiG9w0BAQsFAAOCAQEAyEZHafoFAiNiUWSnuWV/5DvLzvcW/7Ih0WJs YUS+7EybB98S6duXb/TqYQ8pwpcP4URaHNrvpI4bvRDBjJJA4jD7soKI/gZ0zDyr UYbtSaP/T2elszzaaFfZQ6dR8qa8M7/9r97YrTKws2MJ8Obu1Q/a0rGeWzHvmeHs FE6VWTMpi+Pdp2Ho/3NnSF5zj2WddO3FSA00R9pH2aCbKHaUxnIZ06TeHHLep0J+ rqsm7a1NJpPcIO5LYCLXcHMvmcnDRWcS8bC4bjRjdZXC2/22bwaDPbKjAN/A0iHo qaVzIQjQ5YRyWJkNlIREXsLuqMENvmU0Zi4gutoj6UqG+X+/eg== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:34 2026 by rpki-client