This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa File: ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa (raw, json) Hash identifier: LVbmZ54VV35faeRInlZ/8pQeU3dbOIF3nFBtH0o77Fw= Subject key identifier: CB:67:8D:82:52:91:65:68:F2:CD:C2:12:F6:B9:30:69:B8:9F:7B:91 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0111FCD3910A7A56EEA81A6531640610E2E3F872 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa Signing time: Wed 10 Dec 2025 05:30:10 +0000 ROA not before: Wed 10 Dec 2025 05:30:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d06f:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:11:fc:d3:91:0a:7a:56:ee:a8:1a:65:31:64:06:10:e2:e3:f8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:30:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=31873cb7167021df5b2ce62fd3cc068f917e02a717a41c405fd7b48d865d0f87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:83:2d:59:7f:c1:4d:9e:1c:1c:f1:01:be: c5:ff:ec:21:dc:58:5a:b1:a5:93:3f:e7:12:25:4b: e1:7f:ad:07:d1:0d:4a:37:af:ea:a1:c3:c9:71:a2: 2d:ac:f7:ec:7c:89:4c:bd:38:d6:e6:0e:a3:5d:67: 8c:4b:1e:05:21:91:6e:3c:19:7e:71:16:07:9a:f8: b4:fe:96:6a:1c:07:b2:a0:7f:df:f7:53:6e:3c:f9: e5:71:69:48:df:a3:0d:eb:67:f7:09:7e:44:67:e2: 6b:ad:ce:d8:94:ba:bf:be:b0:72:76:7d:cb:c0:92: f9:4c:dd:0d:fc:0c:c0:e1:d8:6c:1b:07:10:44:43: ad:6f:7a:c6:e3:d5:3f:2b:f5:4e:a2:64:eb:98:06: 45:35:cf:27:ea:2d:04:78:3b:ab:30:53:61:d3:44: 14:d4:1b:e4:2a:f5:4e:42:a0:d0:82:85:0f:46:57: 6b:eb:38:cb:7f:98:1c:24:4d:fd:40:b8:20:81:92: f9:57:bd:51:b1:1e:c3:11:31:e2:25:b5:d1:e3:11: 54:03:f3:97:1a:be:3e:8c:53:64:30:4d:2f:87:26: 41:6a:7c:26:52:2b:81:3b:2b:e4:6e:8a:d7:e6:47: 65:10:ae:f4:7c:3a:1c:1b:c6:8a:38:3c:75:16:88: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:8D:82:52:91:65:68:F2:CD:C2:12:F6:B9:30:69:B8:9F:7B:91 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:1000::/40 Signature Algorithm: sha256WithRSAEncryption 42:b0:eb:07:c3:2e:a2:b4:98:96:52:e0:85:0a:61:a4:d5:da: ea:93:62:c0:c5:e1:91:e0:36:cb:e6:f4:1d:41:f7:ca:b3:cb: 59:b7:e8:ad:f8:46:a5:23:0f:a0:b8:29:8d:3b:f6:da:b2:93: c7:9f:9b:be:61:be:23:d1:3e:ff:a7:56:49:01:b3:b2:5b:1f: 97:b1:f1:2d:9c:fb:7d:c8:bf:bb:a6:33:1c:78:e0:b9:fe:c6: 11:5b:b8:f5:7c:75:fd:8f:05:e9:88:d8:ce:a4:c7:f1:c4:55: 8e:80:ed:d0:7f:5c:fd:f4:11:57:29:ae:d2:24:ff:ff:59:22: 6d:96:55:b2:dd:50:bc:a6:e3:99:19:b3:41:78:2c:b2:49:9d: f9:d8:ff:58:39:e6:c1:08:45:ab:0b:76:1b:b3:b7:c2:85:fe: 0a:c4:b3:ca:d6:85:db:47:10:a3:da:54:79:9d:4d:66:32:5e: 5d:d1:5f:b7:06:dd:9b:3c:7c:d7:3d:13:9c:5d:fb:2b:af:e3: 21:92:3f:19:5a:d1:93:f7:b6:c8:0e:64:65:23:02:33:0a:42: b1:54:58:9d:65:8f:84:90:59:d5:fd:42:93:b7:17:88:7b:1c: a0:ca:d4:9f:82:55:06:4b:12:d1:2d:c1:dc:2c:9a:d6:dc:63: 9c:24:86:15 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUARH805EKelbuqBplMWQGEOLj+HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMwMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDMxODczY2I3MTY3MDIxZGY1YjJjZTYyZmQzY2MwNjhmOTE3ZTAyYTcxN2E0 MWM0MDVmZDdiNDhkODY1ZDBmODcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKklgy1Zf8FNnhwc8QG+xf/sIdxYWrGlkz/nEiVL4X+tB9ENSjev6qHDyXGi Laz37HyJTL041uYOo11njEseBSGRbjwZfnEWB5r4tP6WahwHsqB/3/dTbjz55XFp SN+jDetn9wl+RGfia63O2JS6v76wcnZ9y8CS+UzdDfwMwOHYbBsHEERDrW96xuPV Pyv1TqJk65gGRTXPJ+otBHg7qzBTYdNEFNQb5Cr1TkKg0IKFD0ZXa+s4y3+YHCRN /UC4IIGS+Ve9UbEewxEx4iW10eMRVAPzlxq+PoxTZDBNL4cmQWp8JlIrgTsr5G6K 1+ZHZRCu9Hw6HBvGijg8dRaITr8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTLZ42C UpFlaPLNwhL2uTBpuJ97kTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmEyZDVhMDEtZmExNy00ZmIzLTk3ZTctYzIxYzZlODlmOWZiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G8Q MA0GCSqGSIb3DQEBCwUAA4IBAQBCsOsHwy6itJiWUuCFCmGk1drqk2LAxeGR4DbL 5vQdQffKs8tZt+it+EalIw+guCmNO/baspPHn5u+Yb4j0T7/p1ZJAbOyWx+XsfEt nPt9yL+7pjMceOC5/sYRW7j1fHX9jwXpiNjOpMfxxFWOgO3Qf1z99BFXKa7SJP// WSJtllWy3VC8puOZGbNBeCyySZ352P9YOebBCEWrC3Ybs7fChf4KxLPK1oXbRxCj 2lR5nU1mMl5d0V+3Bt2bPHzXPROcXfsrr+Mhkj8ZWtGT97bIDmRlIwIzCkKxVFid ZY+EkFnV/UKTtxeIexygytSfglUGSxLRLcHcLJrW3GOcJIYV -----END CERTIFICATE-----Generated at Tue Dec 16 04:57:23 2025 by rpki-client