This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa File: fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa (raw, json) Hash identifier: +OH8425SoNaWo2xt1T905qVB8JBLNWBvSINT+B2hIBw= Subject key identifier: 30:17:3A:E0:33:30:92:C2:A4:92:67:A5:41:9E:2C:CB:34:02:48:1C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4C9D012489C16F96C80E188F46FDB6A2BB17A83B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa Signing time: Wed 10 Dec 2025 06:00:10 +0000 ROA not before: Wed 10 Dec 2025 06:00:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9d:01:24:89:c1:6f:96:c8:0e:18:8f:46:fd:b6:a2:bb:17:a8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:00:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=4a46ecdf7cb461afb70706b7cb1862bf794f63c114002edd3b97e28e81d36542, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c4:7e:e0:84:3a:a3:8b:66:49:63:1d:21:fa: e6:eb:3a:27:0d:be:d4:a6:dd:37:f7:59:58:4a:74: 14:25:d9:39:73:0a:c2:f8:4e:5d:69:4c:05:54:dc: b8:df:20:0a:55:6e:53:5b:7e:d2:08:13:28:f3:62: 93:03:b8:a1:98:67:50:49:2a:4c:ad:24:84:76:c7: 12:c3:88:af:82:a2:dc:2f:3f:3a:6a:f1:1b:1e:ef: 6b:d5:da:25:b3:31:c8:15:4b:71:ee:ac:ac:15:e2: 24:47:a4:87:68:c3:f1:62:10:76:63:53:b7:d4:38: 4e:91:23:6e:3b:8c:3a:00:3f:32:1b:ae:80:20:68: ed:6c:91:eb:7d:94:9a:e3:ab:b7:9d:93:6c:3e:41: b7:98:ae:f3:e9:fe:9e:2c:2c:d4:b7:51:6a:d4:9a: ca:64:0d:fc:07:32:97:e0:07:2a:b6:aa:45:f2:e4: c1:8f:2d:b8:f8:37:f7:48:ae:35:3c:45:f3:22:8d: bf:4c:7f:8a:3c:48:b9:81:e9:6b:ee:64:ce:88:4b: 60:52:02:53:f3:0b:b4:23:16:62:ae:e5:41:79:32: 79:a6:34:96:ac:10:25:fe:ee:ac:49:ed:ab:16:5a: 2b:7d:d6:b1:a2:ad:21:9b:5b:a4:3e:47:62:ea:9a: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:17:3A:E0:33:30:92:C2:A4:92:67:A5:41:9E:2C:CB:34:02:48:1C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:2080::/48 Signature Algorithm: sha256WithRSAEncryption 5b:7d:bd:c6:6c:89:2c:8c:76:d9:a9:50:a7:03:85:73:55:d3: 96:71:1b:86:4f:44:fc:37:86:7e:87:ed:cc:f3:9b:21:42:d9: f3:0b:bc:9c:ec:cb:a7:f8:6b:3d:11:08:86:80:18:5d:e8:31: 52:e8:46:05:2d:18:40:bf:f8:17:5c:1a:56:a9:0a:e7:92:6b: 5e:57:dd:08:92:e0:c7:e9:a2:0b:45:a9:00:19:b3:bb:4a:3d: 09:cc:c4:bd:7d:e5:d0:10:aa:93:b7:f2:8d:3f:38:df:8d:ac: a3:8d:5a:50:34:fb:bb:d7:5f:73:7c:f2:72:e3:73:5b:04:44: eb:10:d9:82:49:94:7a:6b:a5:6e:22:ba:80:89:42:cb:9a:40: 83:c2:2e:ab:41:a7:bc:ce:e7:6f:0a:37:93:16:99:49:5f:66: ee:c4:0b:f1:5e:9a:5b:eb:dc:dd:e5:0b:dd:2c:35:2c:78:d6: cb:48:26:80:bb:97:26:73:ae:7b:1c:a7:8a:f7:49:f5:dc:fc: 5d:5c:7e:ab:21:58:5a:20:07:3d:08:cc:5b:65:8b:5f:b2:c0: 39:aa:1d:bc:a7:fe:78:c4:ec:0c:23:b5:17:af:04:9a:29:74: fb:3d:24:78:29:04:d8:ef:38:dc:ab:20:dd:48:fb:2b:91:b8: 5f:80:dd:63 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUTJ0BJInBb5bIDhiPRv22orsXqDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAwMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDRhNDZlY2RmN2NiNDYxYWZiNzA3MDZiN2NiMTg2MmJmNzk0ZjYzYzExNDAw MmVkZDNiOTdlMjhlODFkMzY1NDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOXEfuCEOqOLZkljHSH65us6Jw2+1KbdN/dZWEp0FCXZOXMKwvhOXWlMBVTc uN8gClVuU1t+0ggTKPNikwO4oZhnUEkqTK0khHbHEsOIr4Ki3C8/OmrxGx7va9Xa JbMxyBVLce6srBXiJEekh2jD8WIQdmNTt9Q4TpEjbjuMOgA/MhuugCBo7WyR632U muOrt52TbD5Bt5iu8+n+niws1LdRatSaymQN/Acyl+AHKraqRfLkwY8tuPg390iu NTxF8yKNv0x/ijxIuYHpa+5kzohLYFICU/MLtCMWYq7lQXkyeaY0lqwQJf7urEnt qxZaK33WsaKtIZtbpD5HYuqayDUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQwFzrg MzCSwqSSZ6VBnizLNAJIHDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmI5ZDQ3MTYtYmYwZi00MGU1LWJlYjEtNGVhNWVmMDFiZDFjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEg gDANBgkqhkiG9w0BAQsFAAOCAQEAW329xmyJLIx22alQpwOFc1XTlnEbhk9E/DeG foftzPObIULZ8wu8nOzLp/hrPREIhoAYXegxUuhGBS0YQL/4F1waVqkK55JrXlfd CJLgx+miC0WpABmzu0o9CczEvX3l0BCqk7fyjT84342so41aUDT7u9dfc3zycuNz WwRE6xDZgkmUemulbiK6gIlCy5pAg8Iuq0GnvM7nbwo3kxaZSV9m7sQL8V6aW+vc 3eUL3Sw1LHjWy0gmgLuXJnOuexynivdJ9dz8XVx+qyFYWiAHPQjMW2WLX7LAOaod vKf+eMTsDCO1F68Emil0+z0keCkE2O843Ksg3Uj7K5G4X4DdYw== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:40 2026 by rpki-client