This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa File: caf40866-a0b4-4882-b28e-32602ae3e0df.roa (raw, json) Hash identifier: 2NR0JuU38O9kTEBcVf1b4KBVjxNNcO0HPR22O7H9o+k= Subject key identifier: 6C:07:CE:99:63:24:86:DA:1D:89:5E:25:D5:EA:1A:33:17:3C:87:1C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4EBF5C8293E49327378CE571C8674CC1F4308C43 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa Signing time: Wed 10 Dec 2025 05:41:16 +0000 ROA not before: Wed 10 Dec 2025 05:41:16 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d050:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bf:5c:82:93:e4:93:27:37:8c:e5:71:c8:67:4c:c1:f4:30:8c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:41:16 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=c0c766085553df8343a1272905c3b122938a690298bd56c968e68a2ca0a1a0b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:7f:13:cd:1b:da:5f:78:00:17:67:3f:48: f8:3e:0a:a8:57:91:e1:22:58:3d:5e:51:f2:37:05: a9:2e:4a:e3:e2:a1:8a:a0:e0:d2:8e:5d:94:f5:07: 5b:b2:64:7e:cd:9b:49:1b:d1:8c:f8:3e:62:3e:c3: 0c:5e:3f:31:11:91:cb:ee:2b:01:8b:ec:2c:0d:de: 76:dd:08:fa:92:6b:da:eb:82:68:03:b4:48:bc:37: 86:2b:f3:a9:cf:68:8c:be:9a:63:a0:f0:ac:53:fd: 84:5d:d4:64:2e:0e:78:ea:4a:9a:da:3b:9f:34:3b: cd:8a:45:02:ec:47:b2:ea:da:bb:34:3a:8c:1e:57: 19:6d:9e:81:ef:28:6a:18:c5:85:7c:5f:a8:9f:ad: 29:bf:f5:3d:e3:f1:0a:f5:a0:b6:10:45:34:b9:16: 34:82:6d:33:7a:9a:96:0f:a0:27:8e:8f:fe:a5:38: c4:46:9c:3a:fe:70:51:5a:6a:db:1a:6d:00:ca:26: 91:7f:c1:c6:a9:ea:ba:c1:12:83:48:3b:7c:af:64: d3:9a:56:74:7b:c4:fc:71:e9:9a:59:93:67:87:3b: 15:3b:33:31:e6:81:3b:18:cc:24:04:f5:fd:00:43: 80:45:20:ba:79:cd:1f:ac:3a:d3:bd:9d:cf:66:36: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:07:CE:99:63:24:86:DA:1D:89:5E:25:D5:EA:1A:33:17:3C:87:1C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d050:a000::/40 Signature Algorithm: sha256WithRSAEncryption 1f:86:71:e8:78:3e:be:28:60:74:17:3f:1b:18:fd:8b:fb:b9: 5c:bc:e9:19:bc:f8:8f:1d:a2:8a:24:8f:da:1f:35:78:cc:e7: 3d:e4:4f:93:ba:df:d8:7e:06:2b:84:ee:b1:f4:c3:7e:3f:48: cf:0e:ae:0c:bb:b7:6d:02:73:61:81:05:c1:56:6d:02:cd:45: c1:23:03:71:e6:56:2a:f9:52:3e:96:60:00:53:1d:9d:29:b4: 83:d7:03:13:24:23:fb:de:1c:ec:3f:41:57:32:de:6c:60:10: f0:d5:f0:82:4a:d4:14:5e:b0:4d:dc:f6:fa:69:a5:45:78:8a: 0d:80:8b:22:5f:31:01:8b:a7:f5:8f:88:22:d8:d5:99:43:cc: df:9f:ed:51:5a:f2:f6:cb:17:1c:ad:48:8e:bb:54:e2:74:dd: ae:74:2a:82:f1:f4:f4:60:f5:94:1c:0f:87:3d:d1:e3:58:b4: da:3f:b0:5f:29:fa:95:9c:86:dc:c2:f8:95:0d:34:1d:6a:92: 86:74:78:e8:25:ef:0f:82:06:cd:d7:cf:5a:f4:a4:ba:11:6e: 00:c8:59:23:15:d8:58:f6:3e:c7:31:dd:a5:1c:a9:be:42:2f: 37:b5:41:9b:0f:bf:40:2e:c2:13:5b:f3:dc:52:e1:a5:88:fe: 79:a5:27:c9 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUTr9cgpPkkyc3jOVxyGdMwfQwjEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQxMTZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGMwYzc2NjA4NTU1M2RmODM0M2ExMjcyOTA1YzNiMTIyOTM4YTY5MDI5OGJk NTZjOTY4ZTY4YTJjYTBhMWEwYjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNUfxPNG9pfeAAXZz9I+D4KqFeR4SJYPV5R8jcFqS5K4+KhiqDg0o5dlPUH W7Jkfs2bSRvRjPg+Yj7DDF4/MRGRy+4rAYvsLA3edt0I+pJr2uuCaAO0SLw3hivz qc9ojL6aY6DwrFP9hF3UZC4OeOpKmto7nzQ7zYpFAuxHsurauzQ6jB5XGW2ege8o ahjFhXxfqJ+tKb/1PePxCvWgthBFNLkWNIJtM3qalg+gJ46P/qU4xEacOv5wUVpq 2xptAMomkX/BxqnqusESg0g7fK9k05pWdHvE/HHpmlmTZ4c7FTszMeaBOxjMJAT1 /QBDgEUgunnNH6w6072dz2Y26LMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRsB86Z YySG2h2JXiXV6hozFzyHHDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2FmNDA4NjYtYTBiNC00ODgyLWIyOGUtMzI2MDJhZTNlMGRmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FCg MA0GCSqGSIb3DQEBCwUAA4IBAQAfhnHoeD6+KGB0Fz8bGP2L+7lcvOkZvPiPHaKK JI/aHzV4zOc95E+Tut/YfgYrhO6x9MN+P0jPDq4Mu7dtAnNhgQXBVm0CzUXBIwNx 5lYq+VI+lmAAUx2dKbSD1wMTJCP73hzsP0FXMt5sYBDw1fCCStQUXrBN3Pb6aaVF eIoNgIsiXzEBi6f1j4gi2NWZQ8zfn+1RWvL2yxccrUiOu1TidN2udCqC8fT0YPWU HA+HPdHjWLTaP7BfKfqVnIbcwviVDTQdapKGdHjoJe8PggbN189a9KS6EW4AyFkj FdhY9j7HMd2lHKm+Qi83tUGbD79ALsITW/PcUuGliP55pSfJ -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:28 2025 by rpki-client