This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa File: 1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa (raw, json) Hash identifier: eJA/wUbcJEfUhJkN7IGXB37Ok0fv5CNLQDfuW43XNxc= Subject key identifier: AC:2C:E4:9C:D4:A8:46:03:65:A1:12:FA:3C:3E:9C:B7:56:F8:4F:0D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7841D39B66F3C12D3C0B921CB6CA660ADFADFC39 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa Signing time: Wed 10 Dec 2025 05:40:49 +0000 ROA not before: Wed 10 Dec 2025 05:40:49 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:41:d3:9b:66:f3:c1:2d:3c:0b:92:1c:b6:ca:66:0a:df:ad:fc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:40:49 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=ba618d88cfc7ef00637d9853693eb6ecec3e9bcf9af5f509ccbdb9289f663952, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:8a:ac:b3:a0:7f:60:38:35:1d:a2:36:6e: b3:45:1e:94:18:81:24:2c:48:45:9e:d5:a7:46:44: 39:1e:df:ec:83:7a:33:4e:75:a5:28:58:17:84:21: 5d:d7:39:af:ca:c5:ee:d3:56:5e:b1:1e:7c:be:03: 81:71:01:aa:ea:d8:48:4f:0c:f5:38:30:3b:ac:a4: cb:60:8a:d1:e4:bd:a2:d7:d2:87:f3:78:28:78:7e: 2d:24:07:5c:7d:c2:f5:dd:67:2d:be:0b:cb:8d:76: 34:67:ce:80:8b:01:20:60:0e:33:c6:f5:be:ce:1f: a9:a8:10:f3:a7:fe:b6:e9:ff:61:04:d1:78:17:3e: 57:ef:e0:8d:52:00:bb:ea:b2:5f:e5:50:ea:4b:21: 15:06:fa:3a:9e:0d:c7:1c:14:74:f8:7c:42:8b:65: 8e:ce:70:ac:2e:ff:59:53:71:8a:6c:1e:95:da:c6: ec:62:e5:76:d1:0c:8b:32:87:dd:cc:25:99:fa:af: 19:0e:93:f2:de:aa:2c:4d:15:0e:5d:4a:88:36:26: f0:0d:55:6b:a9:8f:c2:83:05:0f:12:a5:3a:39:ef: bf:ca:20:c4:d3:65:eb:ad:68:c8:e6:d5:6a:c5:47: 1a:57:c9:95:6d:c1:e3:81:5d:40:2b:a8:bb:14:24: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:E4:9C:D4:A8:46:03:65:A1:12:FA:3C:3E:9C:B7:56:F8:4F:0D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:e000::/40 Signature Algorithm: sha256WithRSAEncryption 25:eb:0e:ab:90:1d:b2:ba:4a:c6:b4:c9:04:4b:4b:be:59:f7: ed:57:5c:de:e1:2d:7c:b5:44:bb:3d:c8:90:c6:b6:fc:6a:63: 45:57:9f:40:4f:e4:2b:c2:f8:8c:ad:c1:04:e0:f0:be:0e:ac: c6:16:90:e9:4d:93:55:0d:f7:4a:94:dd:a2:c0:41:1f:de:98: 68:d1:9d:95:86:42:3d:a3:7e:24:65:a2:a5:2e:97:e7:5e:e3: b9:73:f2:e2:61:41:15:5e:62:8d:80:80:84:0e:7c:a7:e7:8d: 90:a9:89:8d:77:73:91:1d:53:d8:c6:0e:c6:cd:6d:05:57:12: a6:42:36:5c:53:30:2b:de:06:96:8d:ea:fd:e4:16:f3:c3:6c: 25:f5:86:41:33:86:a1:a8:23:fd:85:f6:94:75:0d:d1:21:91: 01:99:3b:86:f3:58:5a:93:f8:f5:8e:94:57:c9:90:97:0b:d9: 8e:7b:72:88:25:71:dd:62:ab:ab:bd:75:d1:3c:fa:8f:25:71: 7f:6a:71:95:9f:dd:e3:4c:28:6e:77:cc:7e:dc:03:8a:30:09: 2e:78:7e:0f:e0:1e:1b:f8:8e:8c:30:4d:a3:21:da:4b:6b:99: 7b:b6:89:e5:03:ed:7e:e1:ff:72:b4:5b:6f:bf:f7:41:bc:06: b8:ba:f9:c3 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUeEHTm2bzwS08C5IctspmCt+t/DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQwNDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGJhNjE4ZDg4Y2ZjN2VmMDA2MzdkOTg1MzY5M2ViNmVjZWMzZTliY2Y5YWY1 ZjUwOWNjYmRiOTI4OWY2NjM5NTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcHiqyzoH9gODUdojZus0UelBiBJCxIRZ7Vp0ZEOR7f7IN6M051pShYF4Qh Xdc5r8rF7tNWXrEefL4DgXEBqurYSE8M9TgwO6yky2CK0eS9otfSh/N4KHh+LSQH XH3C9d1nLb4Ly412NGfOgIsBIGAOM8b1vs4fqagQ86f+tun/YQTReBc+V+/gjVIA u+qyX+VQ6kshFQb6Op4NxxwUdPh8Qotljs5wrC7/WVNximweldrG7GLldtEMizKH 3cwlmfqvGQ6T8t6qLE0VDl1KiDYm8A1Va6mPwoMFDxKlOjnvv8ogxNNl661oyObV asVHGlfJlW3B44FdQCuouxQkd18CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSsLOSc 1KhGA2WhEvo8Ppy3VvhPDTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWE4NzU3YTMtNWIwZS00NDczLTlhM2ItODc2Y2MxMzRlMmJkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0ADg MA0GCSqGSIb3DQEBCwUAA4IBAQAl6w6rkB2yukrGtMkES0u+WfftV1ze4S18tUS7 PciQxrb8amNFV59AT+QrwviMrcEE4PC+DqzGFpDpTZNVDfdKlN2iwEEf3pho0Z2V hkI9o34kZaKlLpfnXuO5c/LiYUEVXmKNgICEDnyn542QqYmNd3ORHVPYxg7GzW0F VxKmQjZcUzAr3gaWjer95Bbzw2wl9YZBM4ahqCP9hfaUdQ3RIZEBmTuG81hak/j1 jpRXyZCXC9mOe3KIJXHdYqurvXXRPPqPJXF/anGVn93jTChud8x+3AOKMAkueH4P 4B4b+I6MME2jIdpLa5l7tonlA+1+4f9ytFtvv/dBvAa4uvnD -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:37 2025 by rpki-client