This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa File: 6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa (raw, json) Hash identifier: /JLX9wkSRrHSnYXowKW63vL50ZBsKy1AW7/ARopErkU= Subject key identifier: 26:CD:D6:C3:DF:EF:25:20:E8:56:81:B9:8F:C8:DF:6E:49:40:C7:1F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3939209A1F4EA14AB31E50BB7E3A469C27521DB5 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa Signing time: Wed 10 Dec 2025 05:30:58 +0000 ROA not before: Wed 10 Dec 2025 05:30:58 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d058:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:39:20:9a:1f:4e:a1:4a:b3:1e:50:bb:7e:3a:46:9c:27:52:1d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:30:58 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2072c00829b81ba50247ca2455fd2d65e56912a87548d390eba8a858d2fed99a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:51:70:3e:65:a2:9b:b1:70:58:1f:87:26: 66:ac:2e:d6:49:f9:04:5c:86:ca:45:c3:3c:5a:30: 71:d4:a8:8d:8c:78:1b:37:df:a2:a6:60:4e:0b:04: ff:87:e5:c5:a0:c5:33:12:bd:f4:c8:a0:0d:bc:87: bd:3b:73:dd:a6:ce:3d:32:0a:3a:7e:24:47:29:07: aa:5b:d6:86:20:9b:d7:1a:6b:6d:da:99:10:ae:fd: 71:02:e6:eb:fb:49:a9:88:bc:7e:67:9c:61:bf:07: 7c:d1:7d:a9:03:f0:02:d7:1d:d3:ad:39:18:95:2a: f7:a1:41:b1:0a:ca:14:1e:c2:b1:42:9b:b3:6a:ef: cd:7b:a7:08:66:fe:f2:71:e6:e5:4e:60:fa:a4:e1: 5d:87:f0:77:7c:31:db:23:c6:ab:21:c3:7c:1f:54: ff:7e:86:2a:76:31:03:a7:a0:5a:b2:5d:96:0b:d3: 0f:4e:b7:8a:7b:c0:88:16:b2:64:c8:cf:14:7d:0d: e6:e0:8e:33:7f:3e:7e:08:3e:bb:dd:7c:ff:6b:5a: 64:c5:ac:d0:fe:a6:2e:42:39:8a:ae:91:b5:bb:41: 4f:a1:06:34:1a:f9:10:95:49:b3:3d:92:e3:bb:6e: 8d:c1:79:d1:26:99:09:92:df:b6:35:f4:28:d5:64: 97:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CD:D6:C3:DF:EF:25:20:E8:56:81:B9:8F:C8:DF:6E:49:40:C7:1F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d058:c000::/40 Signature Algorithm: sha256WithRSAEncryption 55:5f:1f:84:fa:16:9e:41:98:e0:d9:af:05:c7:0e:5a:40:b2: a4:f4:6f:46:ec:c8:d3:82:b7:0f:0c:52:ac:9b:73:1f:4b:3c: a2:fa:73:c1:7e:8d:67:c2:8a:ed:89:bc:b9:29:1b:75:d0:3f: 8b:48:03:5a:46:79:16:ef:09:36:bc:0a:0e:b2:b7:69:7e:ac: 32:5c:be:48:d1:4f:7d:5a:44:2b:7a:dc:16:db:5e:22:e5:da: d4:07:56:4b:f6:ae:40:a8:7b:29:f8:22:7e:9e:70:d7:c3:ab: c0:e4:f9:cd:35:fe:a2:ee:be:f9:ea:c3:e7:a5:19:3a:15:5c: 40:78:08:30:0a:c3:0a:f5:3d:e6:90:af:e3:98:9d:ae:0e:48: e2:44:cd:b6:8e:a7:74:0d:ff:a2:55:7f:fd:a0:f4:1a:79:e3: 8d:05:e9:a3:a5:ef:b1:06:37:f1:b1:e7:50:f5:21:9e:a3:0c: b9:54:82:28:23:f9:7f:78:37:38:2f:05:40:85:bc:f0:07:1f: 1c:43:65:62:fc:c4:1e:16:3b:71:6a:3a:52:6d:8f:95:d7:93: a6:89:89:7b:11:4b:9a:43:51:3c:28:4a:5b:d2:7f:42:dd:83: 62:bf:ec:9d:65:f8:3d:0a:80:06:79:54:67:85:55:73:4a:88: 69:20:cb:d7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUOTkgmh9OoUqzHlC7fjpGnCdSHbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMwNThaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDIwNzJjMDA4MjliODFiYTUwMjQ3Y2EyNDU1ZmQyZDY1ZTU2OTEyYTg3NTQ4 ZDM5MGViYThhODU4ZDJmZWQ5OWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbCUXA+ZaKbsXBYH4cmZqwu1kn5BFyGykXDPFowcdSojYx4GzffoqZgTgsE /4flxaDFMxK99MigDbyHvTtz3abOPTIKOn4kRykHqlvWhiCb1xprbdqZEK79cQLm 6/tJqYi8fmecYb8HfNF9qQPwAtcd0605GJUq96FBsQrKFB7CsUKbs2rvzXunCGb+ 8nHm5U5g+qThXYfwd3wx2yPGqyHDfB9U/36GKnYxA6egWrJdlgvTD063invAiBay ZMjPFH0N5uCOM38+fgg+u918/2taZMWs0P6mLkI5iq6RtbtBT6EGNBr5EJVJsz2S 47tujcF50SaZCZLftjX0KNVklykCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQmzdbD 3+8lIOhWgbmPyN9uSUDHHzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NmVlNDI0ZDYtYTA2Ny00ZmI5LWE4MmUtMDU4OTBjZjhhODhmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FjA MA0GCSqGSIb3DQEBCwUAA4IBAQBVXx+E+haeQZjg2a8Fxw5aQLKk9G9G7MjTgrcP DFKsm3MfSzyi+nPBfo1nwortiby5KRt10D+LSANaRnkW7wk2vAoOsrdpfqwyXL5I 0U99WkQretwW214i5drUB1ZL9q5AqHsp+CJ+nnDXw6vA5PnNNf6i7r756sPnpRk6 FVxAeAgwCsMK9T3mkK/jmJ2uDkjiRM22jqd0Df+iVX/9oPQaeeONBemjpe+xBjfx sedQ9SGeowy5VIIoI/l/eDc4LwVAhbzwBx8cQ2Vi/MQeFjtxajpSbY+V15OmiYl7 EUuaQ1E8KEpb0n9C3YNiv+ydZfg9CoAGeVRnhVVzSohpIMvX -----END CERTIFICATE-----Generated at Mon Dec 15 19:47:18 2025 by rpki-client