This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa File: d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa (raw, json) Hash identifier: pSTy8l3y6jal5CjG2wUieXBXHR5Dk2YtKsfwbubqt/E= Subject key identifier: AB:46:C5:B6:D4:1E:DD:51:71:B1:71:18:97:DD:05:A1:6C:A9:EC:4F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5F7F0E455ADAA5132A81C0D913930020EED23B0B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa Signing time: Wed 10 Dec 2025 06:00:39 +0000 ROA not before: Wed 10 Dec 2025 06:00:39 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d024::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7f:0e:45:5a:da:a5:13:2a:81:c0:d9:13:93:00:20:ee:d2:3b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:00:39 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=acb723aae6d543125aaaf365e2a8ccd6ed3f1531cdb32906471a702864a547f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:62:5e:90:11:2c:5a:a8:20:48:0a:d3:26:9d: c7:72:9b:64:32:ee:c8:f5:d2:18:f6:c1:aa:71:d3: c1:31:10:1c:9b:97:49:13:5f:7f:76:01:3e:6f:1c: 10:29:c2:b9:f9:11:61:fb:f6:af:42:ec:86:5e:a6: 3e:27:5f:b4:e0:36:e6:5c:b3:37:6e:a6:1a:27:ae: 40:83:72:31:6b:9c:12:4e:be:0a:33:73:32:4c:29: 2a:ae:0d:ce:9c:f0:7d:6f:e9:8c:94:47:9d:27:0d: 05:bf:b5:1b:72:bc:a1:cb:e0:ab:e6:89:dd:d8:d3: 5e:e2:db:a3:87:4f:c2:b9:95:42:34:63:8e:65:29: 28:70:cf:dc:2f:fd:c9:e6:f4:6d:59:86:df:53:83: f7:d8:16:e2:a2:39:ad:05:0e:9e:15:8e:ba:38:de: bc:5e:63:3c:63:07:01:6b:64:bf:b0:3f:af:b6:6b: 8b:d3:32:df:97:0e:c5:af:70:da:10:91:f4:04:f8: 4c:87:0a:4b:54:59:55:c9:15:ed:36:3e:4c:42:2a: b8:6d:b1:c7:5c:6c:6e:65:73:ef:99:44:87:55:c0: 4f:b8:0a:30:1d:4f:3a:62:fc:e6:44:d5:9e:e5:70: 33:31:6f:ea:3d:c0:e5:db:36:da:c5:bc:78:b5:c0: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:46:C5:B6:D4:1E:DD:51:71:B1:71:18:97:DD:05:A1:6C:A9:EC:4F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d024::/36 Signature Algorithm: sha256WithRSAEncryption 8c:2c:b4:b8:f4:73:83:60:ba:ae:0a:40:95:02:0c:69:7e:ae: 39:4a:d6:9c:1d:a5:46:f8:90:a3:9d:1d:54:8d:8e:54:78:61: 59:27:aa:07:9f:47:2d:2a:e2:78:bf:87:d6:0c:d9:a5:9e:86: 21:6c:bb:9c:83:84:6a:50:5b:7a:10:de:a4:cd:55:27:06:34: 18:f8:87:22:60:f6:d4:c8:83:8b:21:19:09:f4:a7:49:67:6a: f2:c3:1d:8c:22:76:8d:6e:ce:10:59:b8:33:e2:e1:13:c1:14: aa:d0:89:56:93:60:6f:6d:7b:1b:36:be:b8:7b:86:8b:e5:13: 2b:b8:95:25:1d:ae:06:d0:8b:04:e6:13:9e:bb:f4:fc:e0:34: a6:92:6d:ed:e6:13:44:8f:f7:f0:80:f2:f9:fa:12:18:57:4c: fe:e6:37:97:fe:ab:6b:5a:f0:61:b3:ae:c6:ec:7c:c9:52:62: 59:a3:cc:52:b8:ac:35:04:8e:9a:01:61:4d:6d:06:7f:6d:73: 45:9e:2b:8d:29:aa:d3:9e:a2:56:a1:f4:2a:81:3d:05:5c:df: 99:3a:f5:99:70:69:d4:9e:e8:7d:3c:13:14:20:5d:cc:9f:35: e6:4f:e0:5d:92:4a:93:6f:6b:64:44:a4:03:a9:71:8c:92:b3: 54:80:43:5d -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUX38ORVrapRMqgcDZE5MAIO7SOwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAwMzlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGFjYjcyM2FhZTZkNTQzMTI1YWFhZjM2NWUyYThjY2Q2ZWQzZjE1MzFjZGIz MjkwNjQ3MWE3MDI4NjRhNTQ3ZjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAONiXpARLFqoIEgK0yadx3KbZDLuyPXSGPbBqnHTwTEQHJuXSRNff3YBPm8c ECnCufkRYfv2r0Lshl6mPidftOA25lyzN26mGieuQINyMWucEk6+CjNzMkwpKq4N zpzwfW/pjJRHnScNBb+1G3K8ocvgq+aJ3djTXuLbo4dPwrmVQjRjjmUpKHDP3C/9 yeb0bVmG31OD99gW4qI5rQUOnhWOujjevF5jPGMHAWtkv7A/r7Zri9My35cOxa9w 2hCR9AT4TIcKS1RZVckV7TY+TEIquG2xx1xsbmVz75lEh1XAT7gKMB1POmL85kTV nuVwMzFv6j3A5ds22sW8eLXAd5sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSrRsW2 1B7dUXGxcRiX3QWhbKnsTzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDhmZjcwMTMtMDhiNi00ZTM2LWFiODgtYzRmOGJkM2U3YTA0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CQA MA0GCSqGSIb3DQEBCwUAA4IBAQCMLLS49HODYLquCkCVAgxpfq45StacHaVG+JCj nR1UjY5UeGFZJ6oHn0ctKuJ4v4fWDNmlnoYhbLucg4RqUFt6EN6kzVUnBjQY+Ici YPbUyIOLIRkJ9KdJZ2rywx2MInaNbs4QWbgz4uETwRSq0IlWk2BvbXsbNr64e4aL 5RMruJUlHa4G0IsE5hOeu/T84DSmkm3t5hNEj/fwgPL5+hIYV0z+5jeX/qtrWvBh s67G7HzJUmJZo8xSuKw1BI6aAWFNbQZ/bXNFniuNKarTnqJWofQqgT0FXN+ZOvWZ cGnUnuh9PBMUIF3MnzXmT+BdkkqTb2tkRKQDqXGMkrNUgENd -----END CERTIFICATE-----Generated at Thu Dec 18 03:54:34 2025 by rpki-client