This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa File: d4a512a3-4257-431f-b201-8d747948cebb.roa (raw, json) Hash identifier: uPbH3XV8Hfp3+nB8dLHSLTrTLdOwqXafXEX5COqeDfY= Subject key identifier: 41:27:24:C2:CE:01:71:19:C2:DD:7A:5E:23:FC:A9:EC:7B:11:C7:18 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0B24B6F4263600A1FD93127DC93EA5D6D7835B65 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa Signing time: Wed 10 Dec 2025 05:50:10 +0000 ROA not before: Wed 10 Dec 2025 05:50:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:24:b6:f4:26:36:00:a1:fd:93:12:7d:c9:3e:a5:d6:d7:83:5b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=310a9072705407ac1a78be3ba82cce6aae85f47ffe26c038b5d52a8a73d82d7e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:5b:f5:b8:c7:46:f8:48:22:73:40:53:c5: bf:34:17:b2:21:39:8a:7b:ef:9a:93:5c:9b:a7:87: 7a:db:67:77:a8:da:d6:87:06:48:af:87:48:05:78: e5:87:0d:c5:a6:32:03:e0:a0:75:4f:f0:57:23:c4: b9:0a:70:2a:77:7d:df:88:e7:e8:14:f1:74:2e:fa: e7:92:3b:b5:71:23:9a:b5:73:f6:a6:e3:9f:be:a0: 47:ec:e8:98:4c:b9:d4:fd:72:8e:64:7c:28:60:9f: 20:e9:43:02:02:53:0a:8b:f8:45:4a:9b:f2:8b:05: 22:1c:48:25:54:b9:8f:94:8d:90:f0:c2:df:b8:41: 4d:ad:26:6e:67:f6:d2:f0:9a:af:09:a7:7d:01:b5: 4b:79:d0:af:b3:7b:1a:c5:92:ec:58:e7:bb:d6:cc: 81:15:8c:1e:2a:f3:5c:78:76:a3:29:dd:1b:0b:9f: 29:d3:19:3c:56:f6:16:31:d6:91:50:6a:b1:e6:5d: 40:15:ed:18:85:65:d1:33:05:f0:34:6f:fd:25:f7: e1:d8:37:28:56:1f:55:28:9d:1d:c4:6a:c2:28:b1: 65:9f:02:35:dc:83:15:a7:21:65:04:f5:78:aa:7e: 7d:9a:a1:22:2f:f9:64:39:41:55:a2:31:ba:eb:c6: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:27:24:C2:CE:01:71:19:C2:DD:7A:5E:23:FC:A9:EC:7B:11:C7:18 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 62:4d:48:cb:0a:32:84:58:92:8e:d9:73:33:bd:ae:23:50:da: cb:b3:f6:09:52:e9:c7:b0:ae:be:67:e2:33:89:e1:ef:14:02: b3:e1:b0:74:2d:9a:be:1a:c7:16:13:c1:9b:66:d6:70:12:1e: 07:3a:f5:74:32:ec:9d:a6:92:0b:70:4a:95:df:db:a9:7c:c0: fc:0c:1b:ed:44:4d:0a:23:db:a5:60:b0:e5:5a:75:06:5b:fa: 51:7f:f2:cd:a7:9d:16:55:5f:0c:dc:46:a9:a0:64:ef:c0:26: cc:b8:17:6f:c8:d6:21:5c:69:a6:83:39:98:ea:e6:13:60:3e: b1:bf:44:80:d5:7b:e2:67:ca:f7:de:8a:c3:37:c5:65:84:8e: ed:fe:0b:71:8a:1a:55:d5:4d:d2:fc:b8:96:63:b0:34:ad:08: b8:f9:46:18:48:8c:88:c5:02:76:ae:c0:ae:d5:01:f7:f4:e3: eb:b3:76:28:b8:78:94:dc:a3:c7:0f:e5:99:97:d8:c9:a5:4e: a5:04:34:bc:64:37:11:e6:03:93:69:4a:e1:ce:5d:77:ba:d8: b4:2d:ca:24:a7:31:b1:5f:c9:91:20:eb:41:41:77:14:a7:b9: d7:7d:3a:7f:20:d4:1f:63:c0:0f:b5:30:14:a5:87:0a:a3:cf: 8e:92:3e:8e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUCyS29CY2AKH9kxJ9yT6l1teDW2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDMxMGE5MDcyNzA1NDA3YWMxYTc4YmUzYmE4MmNjZTZhYWU4NWY0N2ZmZTI2 YzAzOGI1ZDUyYThhNzNkODJkN2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcyW/W4x0b4SCJzQFPFvzQXsiE5invvmpNcm6eHettnd6ja1ocGSK+HSAV4 5YcNxaYyA+CgdU/wVyPEuQpwKnd934jn6BTxdC7655I7tXEjmrVz9qbjn76gR+zo mEy51P1yjmR8KGCfIOlDAgJTCov4RUqb8osFIhxIJVS5j5SNkPDC37hBTa0mbmf2 0vCarwmnfQG1S3nQr7N7GsWS7Fjnu9bMgRWMHirzXHh2oyndGwufKdMZPFb2FjHW kVBqseZdQBXtGIVl0TMF8DRv/SX34dg3KFYfVSidHcRqwiixZZ8CNdyDFachZQT1 eKp+fZqhIi/5ZDlBVaIxuuvG3/cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRBJyTC zgFxGcLdel4j/KnsexHHGDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDRhNTEyYTMtNDI1Ny00MzFmLWIyMDEtOGQ3NDc5NDhjZWJiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADA wDANBgkqhkiG9w0BAQsFAAOCAQEAYk1IywoyhFiSjtlzM72uI1Day7P2CVLpx7Cu vmfiM4nh7xQCs+GwdC2avhrHFhPBm2bWcBIeBzr1dDLsnaaSC3BKld/bqXzA/Awb 7URNCiPbpWCw5Vp1Blv6UX/yzaedFlVfDNxGqaBk78AmzLgXb8jWIVxppoM5mOrm E2A+sb9EgNV74mfK996KwzfFZYSO7f4LcYoaVdVN0vy4lmOwNK0IuPlGGEiMiMUC dq7ArtUB9/Tj67N2KLh4lNyjxw/lmZfYyaVOpQQ0vGQ3EeYDk2lK4c5dd7rYtC3K JKcxsV/JkSDrQUF3FKe51306fyDUH2PAD7UwFKWHCqPPjpI+jg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:54 2025 by rpki-client