This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa File: 44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json) Hash identifier: BdKhTAMtN+du71QBwRacNnISX0DBSCnmkaOlNVmlOQw= Subject key identifier: 75:4B:BD:0F:21:D8:2E:75:38:95:5A:9A:87:81:BD:8F:21:3C:33:EB Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3D22E259B2C281F08540317132963C7B1FFCA603 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa Signing time: Wed 10 Dec 2025 05:31:03 +0000 ROA not before: Wed 10 Dec 2025 05:31:03 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:22:e2:59:b2:c2:81:f0:85:40:31:71:32:96:3c:7b:1f:fc:a6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:03 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=f91d3f79b02d2f0c2fc4083829fcd8c8f05b12c0594611fa7b994a86564c8f3c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:52:16:01:58:10:f8:ea:5d:c3:c7:fe:59: 11:86:cd:16:0a:80:58:89:0d:1a:24:78:ad:e0:df: 7c:74:36:d6:00:6c:ba:f3:8d:af:70:8b:ae:a7:55: 5f:2e:d4:d8:6e:18:61:c1:01:e5:f1:03:58:d1:01: 76:86:9d:d1:cf:b3:5e:76:e7:06:32:be:ad:3e:57: 36:9d:c9:4c:29:42:d9:4c:e9:38:08:90:89:05:cb: 8d:d7:ac:88:7b:18:4b:6b:0f:fc:67:8f:45:59:0f: cc:06:76:d7:2b:a2:b3:00:37:24:b3:b1:38:15:bb: 4b:72:a1:31:fe:ff:06:49:19:1c:52:55:33:64:6d: a9:9a:ff:cf:62:22:67:d4:1b:4b:be:ee:08:1c:58: bf:69:bb:49:cd:ba:9c:9a:33:ce:77:c3:b1:17:05: 8a:0f:63:b8:c3:96:57:90:95:4b:d2:dd:fc:e5:65: 5e:21:ed:04:a3:c2:d0:d8:42:1a:ee:38:6b:3c:4a: 45:78:47:ed:80:2c:1e:0d:70:6f:56:90:26:53:fd: 99:c7:8b:d1:79:52:1a:0d:c3:cb:41:73:dd:7c:03: e8:fe:59:83:95:ba:b3:3c:38:9b:22:81:7f:83:a1: 2b:8a:0d:86:43:45:17:69:ac:54:0e:70:9f:30:7c: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:BD:0F:21:D8:2E:75:38:95:5A:9A:87:81:BD:8F:21:3C:33:EB X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:5040::/48 Signature Algorithm: sha256WithRSAEncryption 9e:b8:12:ec:31:50:8b:c0:e8:38:9b:3e:32:35:ca:4c:fd:04: 5e:64:4b:54:63:54:96:22:05:c7:d4:54:bc:38:48:f9:60:bc: e0:b9:1e:cf:a2:63:26:3a:e5:a3:88:5d:38:1a:9f:2b:4d:72: 55:03:2f:0f:d1:fa:df:95:54:55:97:e9:e6:14:f2:f2:f2:61: 0a:e8:3b:cf:69:be:5b:f5:53:35:32:78:69:a1:13:37:55:89: c6:48:82:c9:3e:9e:47:8e:74:1a:1f:a9:35:a4:9c:76:40:1d: 21:c9:ed:ce:0f:78:e2:08:d1:e6:ab:c9:d7:10:ba:7f:50:0a: 46:34:36:7c:a0:84:ff:7c:78:c5:95:dc:ac:c1:9b:84:f0:88: a7:3c:61:ab:11:97:f9:36:cd:24:96:98:3f:9b:4e:f6:5d:bd: a0:a4:1c:3d:aa:3a:cf:7b:57:4e:35:bc:20:35:69:a9:2d:34: 54:aa:4c:4f:1a:13:2f:27:7b:1e:cf:b8:9b:cf:a9:84:74:39: 0a:6b:1b:11:9f:26:85:f3:41:05:5b:9d:98:e5:46:c0:03:fa: 4e:0b:41:66:e2:d5:a2:e4:79:9c:d9:ca:e7:d3:5f:c2:ad:97: 2c:bf:f8:bb:59:2c:ed:a5:c2:63:7b:3c:df:1a:ca:d7:96:be: 89:f3:a1:f0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUPSLiWbLCgfCFQDFxMpY8ex/8pgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMDNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGY5MWQzZjc5YjAyZDJmMGMyZmM0MDgzODI5ZmNkOGM4ZjA1YjEyYzA1OTQ2 MTFmYTdiOTk0YTg2NTY0YzhmM2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbKUhYBWBD46l3Dx/5ZEYbNFgqAWIkNGiR4reDffHQ21gBsuvONr3CLrqdV Xy7U2G4YYcEB5fEDWNEBdoad0c+zXnbnBjK+rT5XNp3JTClC2UzpOAiQiQXLjdes iHsYS2sP/GePRVkPzAZ21yuiswA3JLOxOBW7S3KhMf7/BkkZHFJVM2RtqZr/z2Ii Z9QbS77uCBxYv2m7Sc26nJozznfDsRcFig9juMOWV5CVS9Ld/OVlXiHtBKPC0NhC Gu44azxKRXhH7YAsHg1wb1aQJlP9mceL0XlSGg3Dy0Fz3XwD6P5Zg5W6szw4myKB f4OhK4oNhkNFF2msVA5wnzB8G1MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR1S70P IdgudTiVWpqHgb2PITwz6zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDRiYjJmNzYtN2MxZS00MTFhLTg1ZjYtYjljZDFjNzdkNjBjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABQ QDANBgkqhkiG9w0BAQsFAAOCAQEAnrgS7DFQi8DoOJs+MjXKTP0EXmRLVGNUliIF x9RUvDhI+WC84Lkez6JjJjrlo4hdOBqfK01yVQMvD9H635VUVZfp5hTy8vJhCug7 z2m+W/VTNTJ4aaETN1WJxkiCyT6eR450Gh+pNaScdkAdIcntzg944gjR5qvJ1xC6 f1AKRjQ2fKCE/3x4xZXcrMGbhPCIpzxhqxGX+TbNJJaYP5tO9l29oKQcPao6z3tX TjW8IDVpqS00VKpMTxoTLyd7Hs+4m8+phHQ5CmsbEZ8mhfNBBVudmOVGwAP6TgtB ZuLVouR5nNnK59Nfwq2XLL/4u1ks7aXCY3s83xrK15a+ifOh8A== -----END CERTIFICATE-----Generated at Mon Dec 15 19:49:13 2025 by rpki-client