This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa File: c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa (raw, json) Hash identifier: 4oKbwsxSNZJYDXTkbiC4cTE28SxT74uZjIYyTMS7jzc= Subject key identifier: 80:06:D0:0E:7D:36:F9:65:35:70:62:42:CF:57:8A:B3:04:42:3B:B5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 78AF07D021B06255FFEA9F7F936F1892740172F4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa Signing time: Wed 10 Dec 2025 05:41:03 +0000 ROA not before: Wed 10 Dec 2025 05:41:03 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:40e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:af:07:d0:21:b0:62:55:ff:ea:9f:7f:93:6f:18:92:74:01:72:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:41:03 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=8e7743a02caec1c57a72790f060f0f2729f665d8139fc3bcc796ef6a27e7410a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:7e:4b:13:e8:58:1f:01:cb:a8:1c:7f:de: 57:da:00:0a:91:92:bd:0b:48:02:99:f7:72:0b:58: f7:ef:6e:f4:8e:93:0a:9e:44:15:6a:d1:1c:b7:19: a1:43:e1:0a:6e:60:6e:5f:34:28:90:a5:cb:8a:86: 8d:6b:c8:9b:61:96:c0:64:01:f9:91:0b:50:a9:6e: af:64:5e:a5:3d:ee:b0:89:78:ce:20:b6:96:ea:28: 4a:ad:b5:bb:77:a2:1c:8e:6f:e2:cf:09:07:72:c0: c4:f2:b1:b4:00:0d:9d:9c:26:88:06:dd:de:f5:86: 85:c3:1f:42:9b:06:70:9f:3c:0a:89:e2:b9:ef:5c: bc:31:44:1d:44:7d:a3:c9:78:f7:b8:71:68:a4:65: 4c:09:68:57:66:56:f4:fc:a8:03:79:fd:51:c4:a8: c0:8a:92:4f:2d:db:5d:d8:d6:36:f3:10:33:62:1a: ec:7b:25:a7:64:4b:e1:a8:d9:6a:68:37:2a:60:98: 85:20:33:96:53:0f:5d:65:c1:bc:f2:58:1f:c1:22: 13:b3:a2:38:2f:bc:ab:2a:12:a5:3e:c5:17:34:16: 18:ba:84:f6:d4:dc:09:09:e9:c3:e9:91:14:f2:f5: 6a:14:9b:92:e0:1c:1e:02:77:2f:c6:55:be:ff:76: 9d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:06:D0:0E:7D:36:F9:65:35:70:62:42:CF:57:8A:B3:04:42:3B:B5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:40e0::/48 Signature Algorithm: sha256WithRSAEncryption a1:45:12:00:d2:2b:64:1c:5d:76:b8:93:d7:f3:e5:60:ed:83: c4:4d:18:a3:a9:78:c6:05:a6:40:a3:ab:49:82:cf:19:e2:2d: 79:36:6f:04:b6:36:bc:76:69:9c:c0:22:6a:b9:c8:3f:15:e3: 24:61:e1:b4:f8:94:f7:82:07:7a:74:c8:86:f5:09:7b:ed:74: 7b:ef:89:69:21:ef:c4:ac:bf:bd:cb:1a:04:04:8b:2b:d0:f1: 0f:11:9c:36:5f:9e:79:a2:63:4b:c2:b9:36:3c:eb:ff:28:55: 2b:60:32:4a:a5:b5:9a:15:2c:42:f0:5b:1e:72:07:bc:82:2f: cf:3f:83:1a:16:6c:9a:c7:a8:3a:37:94:8b:cb:54:4b:af:7a: 18:09:f8:de:6b:ae:d5:24:f0:b5:81:df:56:1e:84:6e:7d:21: c6:90:fc:0f:d4:b1:9c:93:6d:0c:c8:7c:07:41:70:6a:bf:cd: bc:84:44:e3:e3:95:44:4e:ba:61:fd:da:ac:68:40:95:73:eb: 97:20:08:3e:25:f1:a8:72:2e:de:5c:9c:14:92:0b:35:1c:fd: 87:f6:85:db:43:9c:68:7a:5a:86:71:38:cb:91:9f:34:93:0c: 90:b9:a0:54:90:32:c3:cb:6c:41:02:93:32:79:78:b7:d4:cc: 6e:d7:4b:9e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUeK8H0CGwYlX/6p9/k28YknQBcvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQxMDNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDhlNzc0M2EwMmNhZWMxYzU3YTcyNzkwZjA2MGYwZjI3MjlmNjY1ZDgxMzlm YzNiY2M3OTZlZjZhMjdlNzQxMGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbZfksT6FgfAcuoHH/eV9oACpGSvQtIApn3cgtY9+9u9I6TCp5EFWrRHLcZ oUPhCm5gbl80KJCly4qGjWvIm2GWwGQB+ZELUKlur2RepT3usIl4ziC2luooSq21 u3eiHI5v4s8JB3LAxPKxtAANnZwmiAbd3vWGhcMfQpsGcJ88Coniue9cvDFEHUR9 o8l497hxaKRlTAloV2ZW9PyoA3n9UcSowIqSTy3bXdjWNvMQM2Ia7Hslp2RL4ajZ amg3KmCYhSAzllMPXWXBvPJYH8EiE7OiOC+8qyoSpT7FFzQWGLqE9tTcCQnpw+mR FPL1ahSbkuAcHgJ3L8ZVvv92nZcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSABtAO fTb5ZTVwYkLPV4qzBEI7tTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzRhY2Y0YmEtMDVjNS00ZTBhLTlkZmQtNzBjZjMyMjE4YmI0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA 4DANBgkqhkiG9w0BAQsFAAOCAQEAoUUSANIrZBxddriT1/PlYO2DxE0Yo6l4xgWm QKOrSYLPGeIteTZvBLY2vHZpnMAiarnIPxXjJGHhtPiU94IHenTIhvUJe+10e++J aSHvxKy/vcsaBASLK9DxDxGcNl+eeaJjS8K5Njzr/yhVK2AySqW1mhUsQvBbHnIH vIIvzz+DGhZsmseoOjeUi8tUS696GAn43muu1STwtYHfVh6Ebn0hxpD8D9SxnJNt DMh8B0Fwar/NvIRE4+OVRE66Yf3arGhAlXPrlyAIPiXxqHIu3lycFJILNRz9h/aF 20OcaHpahnE4y5GfNJMMkLmgVJAyw8tsQQKTMnl4t9TMbtdLng== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:43 2025 by rpki-client