This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa File: f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa (raw, json) Hash identifier: jYzBz6pyL0mZZF2tX1lccGjxjTo6aktXoim47gYBZ5A= Subject key identifier: DA:E0:B5:44:EC:9A:77:D9:06:7F:A7:D8:AF:26:41:4D:D0:94:40:70 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4B62B9A17F26985BF4E0A89473DB9FE2A13C5420 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa Signing time: Wed 10 Dec 2025 05:51:12 +0000 ROA not before: Wed 10 Dec 2025 05:51:12 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:62:b9:a1:7f:26:98:5b:f4:e0:a8:94:73:db:9f:e2:a1:3c:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:51:12 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=8d9ae79f90d2abcb5a9f2f306770f7b84f3e39489dec8fcca124e418111cfc6e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:5a:ed:45:8a:aa:81:8f:20:59:35:8a:05: 03:ae:cb:64:e2:08:a1:c2:00:8b:df:ef:6e:d3:03: 80:f7:e1:da:cf:71:0f:f6:2e:95:33:93:ac:e7:f1: 1a:b8:e8:06:a8:c6:f7:15:07:62:ed:26:9f:81:ef: 91:38:8d:83:fc:39:ab:b4:75:88:4d:a2:1f:59:43: c5:f6:af:1e:c3:de:4b:1e:47:f2:90:c3:97:e3:fe: 12:42:f0:71:7b:31:28:06:bc:41:16:6b:db:1a:56: d6:da:14:3b:6a:db:b7:ff:aa:fd:58:c8:64:8a:d9: cc:1d:b4:39:43:00:fc:6b:e4:9f:5b:81:dd:12:d6: 06:a5:f6:2e:39:13:f2:d3:25:52:80:02:11:dd:76: ea:01:c0:4b:0d:33:77:9f:3b:04:64:4d:ed:fc:9f: d0:20:fd:eb:59:0c:52:66:31:84:8f:09:57:71:aa: 40:6c:70:bc:30:65:14:65:cc:d4:f3:a6:46:24:f1: 88:8e:50:78:ba:bc:9d:b7:5c:a8:4e:e8:24:6c:38: 97:e3:eb:52:80:ba:b0:54:97:39:21:e8:07:24:bd: ef:52:24:c5:02:3a:52:68:a5:0e:1f:cd:4f:ac:47: 8a:9d:2b:7d:d5:c8:0f:fa:41:6b:68:b4:c1:02:24: 55:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E0:B5:44:EC:9A:77:D9:06:7F:A7:D8:AF:26:41:4D:D0:94:40:70 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:9000::/40 Signature Algorithm: sha256WithRSAEncryption 93:e6:fb:84:60:a7:17:07:11:fb:7f:9a:63:e0:00:48:70:32: 2d:f4:f3:e0:83:68:cd:5c:ed:2f:c0:8e:50:fc:a4:d9:29:f2: 13:80:4e:3c:36:33:88:8b:db:7c:91:e6:fa:e8:45:81:9b:c3: 7f:0d:61:51:89:e5:d0:1d:47:67:20:b7:98:fa:f8:78:2e:d2: 0a:88:86:6f:65:79:16:e1:2f:27:51:59:72:5d:f3:9c:81:1f: c9:f6:a7:59:0c:71:b4:e5:6a:4d:a2:0f:dd:85:9e:c1:f4:a6: df:92:e0:87:09:af:9f:0f:08:fa:47:30:5c:33:6a:b4:49:be: bf:cb:bf:6e:50:e0:8d:f3:f9:53:09:a5:14:65:d7:e8:5b:10: a9:1a:ec:86:83:7f:4c:f5:10:9a:91:00:ea:17:6b:d7:32:07: dc:2d:7c:10:4b:1e:a4:ae:7e:a8:67:aa:03:26:5f:40:86:53: c7:9c:25:58:92:28:fc:79:b8:d3:07:de:8c:53:07:6e:4c:9b: 21:1f:47:6d:a8:80:be:c6:b8:4c:e6:6b:64:42:de:de:06:21: 5e:21:79:51:95:dd:de:28:71:a0:39:b3:df:26:a5:3b:3d:93: 63:b8:aa:a4:30:ea:fa:97:01:eb:20:12:50:d2:5c:94:0a:59: a5:37:9c:0e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUS2K5oX8mmFv04KiUc9uf4qE8VCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUxMTJaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDhkOWFlNzlmOTBkMmFiY2I1YTlmMmYzMDY3NzBmN2I4NGYzZTM5NDg5ZGVj OGZjY2ExMjRlNDE4MTExY2ZjNmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUdWu1FiqqBjyBZNYoFA67LZOIIocIAi9/vbtMDgPfh2s9xD/YulTOTrOfx GrjoBqjG9xUHYu0mn4HvkTiNg/w5q7R1iE2iH1lDxfavHsPeSx5H8pDDl+P+EkLw cXsxKAa8QRZr2xpW1toUO2rbt/+q/VjIZIrZzB20OUMA/Gvkn1uB3RLWBqX2LjkT 8tMlUoACEd126gHASw0zd587BGRN7fyf0CD961kMUmYxhI8JV3GqQGxwvDBlFGXM 1POmRiTxiI5QeLq8nbdcqE7oJGw4l+PrUoC6sFSXOSHoByS971IkxQI6UmilDh/N T6xHip0rfdXID/pBa2i0wQIkVesCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTa4LVE 7Jp32QZ/p9ivJkFN0JRAcDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZjE5YTFjZTMtMzcyNi00ZDhkLThkM2EtYjJlYzA1MDljYzc2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0ACQ MA0GCSqGSIb3DQEBCwUAA4IBAQCT5vuEYKcXBxH7f5pj4ABIcDIt9PPgg2jNXO0v wI5Q/KTZKfITgE48NjOIi9t8keb66EWBm8N/DWFRieXQHUdnILeY+vh4LtIKiIZv ZXkW4S8nUVlyXfOcgR/J9qdZDHG05WpNog/dhZ7B9KbfkuCHCa+fDwj6RzBcM2q0 Sb6/y79uUOCN8/lTCaUUZdfoWxCpGuyGg39M9RCakQDqF2vXMgfcLXwQSx6krn6o Z6oDJl9AhlPHnCVYkij8ebjTB96MUwduTJshH0dtqIC+xrhM5mtkQt7eBiFeIXlR ld3eKHGgObPfJqU7PZNjuKqkMOr6lwHrIBJQ0lyUClmlN5wO -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:34 2026 by rpki-client