This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json) Hash identifier: iH3xsDb96MesQ+fs1Q+xTaxzZMGf6Eb9g+fHtdxqCcA= Subject key identifier: 3C:42:E3:DE:C0:64:41:78:F0:3E:19:02:F6:1F:AE:27:05:67:79:CF Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0D87B04255F5F68539222154501EA41EC1C9C6EA Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa Signing time: Wed 10 Dec 2025 05:20:05 +0000 ROA not before: Wed 10 Dec 2025 05:20:05 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d078:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:87:b0:42:55:f5:f6:85:39:22:21:54:50:1e:a4:1e:c1:c9:c6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:20:05 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=c370a9925e0215059e7ffb0661bb1deb016811f5ddfd2844463107292a8a8363, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:6d:65:5d:bb:01:99:e2:bd:a8:58:7e:f8: 9b:7a:72:c9:7b:92:8e:26:47:7a:91:c2:3c:20:1f: 71:87:7f:31:bf:df:be:46:71:e1:e7:b7:aa:51:68: 07:74:34:df:f9:09:c2:1b:94:7c:24:5d:9c:f6:25: e4:86:e1:78:c7:04:6d:54:0d:93:a2:53:f9:c3:6c: f1:6e:f1:8f:41:1f:5f:8a:a9:dd:e0:53:f8:f0:e0: 5f:a5:67:3f:6c:4f:6b:c2:81:d5:18:06:26:28:5d: 8d:93:62:60:05:17:a5:5f:ae:12:22:6f:76:41:7d: 0c:5f:2d:d4:c6:6b:f8:07:cb:e4:eb:d3:ea:3f:72: dd:e8:e0:00:d7:6f:a7:8d:4b:f8:0b:a7:ca:0d:ce: 63:d2:0b:08:3d:60:01:77:17:d0:be:e4:3c:3d:b5: 0c:aa:83:22:b5:53:dd:9b:b4:a1:da:0f:99:34:cd: e8:64:f9:24:1f:59:97:5b:9e:b9:ea:10:17:d8:29: 8e:4b:7d:4f:b4:76:c3:c7:fa:32:a8:d5:17:72:09: 64:ed:59:f4:e7:d2:c6:45:01:a9:6c:e8:c8:f8:9c: e0:ad:42:c5:76:d8:63:01:83:48:77:5b:b9:a3:c0: 15:8b:48:0d:29:ef:63:78:34:4f:6c:6f:8d:a2:0c: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:42:E3:DE:C0:64:41:78:F0:3E:19:02:F6:1F:AE:27:05:67:79:CF X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d078:1000::/40 Signature Algorithm: sha256WithRSAEncryption 00:54:cf:aa:a2:f0:b5:33:00:b0:b3:8d:85:f9:f0:52:58:c4: 27:3e:6a:90:bd:90:a1:39:e3:09:73:5e:71:c9:4c:19:af:0f: fc:a6:f2:64:58:9f:97:f6:a9:63:b6:a5:b3:25:04:99:fe:e7: 12:51:46:22:6f:be:95:71:27:38:88:39:4f:8c:c0:bb:97:ee: ac:e9:d0:1c:e5:25:ea:02:3c:15:c4:89:dc:f8:1c:a9:92:60: de:ac:8a:42:5c:58:7e:71:e9:04:66:5c:89:f2:2b:27:33:bd: 4d:18:b3:9a:e8:e6:73:8f:7d:93:ac:cb:bd:31:44:89:e5:7d: 7f:94:04:67:07:ec:22:a4:60:92:44:f5:6c:e6:fd:ce:e2:25: 24:96:b7:b3:ca:06:2f:e6:f7:59:ae:7b:15:32:bf:15:d5:42: e7:1a:1e:23:b4:b4:61:29:17:a4:a5:51:ce:e7:42:47:71:d9: f0:a4:e1:59:c4:00:4c:ae:bd:cd:6f:a5:0d:22:c1:a2:18:f6: 2d:7c:56:60:12:65:8e:e5:89:3d:74:7f:6f:f8:0d:6f:6f:91: a1:76:f5:a5:a2:7f:55:2c:a3:90:51:e1:3a:ed:f4:e9:30:54: 3c:d1:09:60:f4:43:9e:71:1d:90:4b:1b:00:7a:ca:8c:25:6f: 50:31:5f:ae -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUDYewQlX19oU5IiFUUB6kHsHJxuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTIwMDVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGMzNzBhOTkyNWUwMjE1MDU5ZTdmZmIwNjYxYmIxZGViMDE2ODExZjVkZGZk Mjg0NDQ2MzEwNzI5MmE4YTgzNjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPibWVduwGZ4r2oWH74m3pyyXuSjiZHepHCPCAfcYd/Mb/fvkZx4ee3qlFo B3Q03/kJwhuUfCRdnPYl5IbheMcEbVQNk6JT+cNs8W7xj0EfX4qp3eBT+PDgX6Vn P2xPa8KB1RgGJihdjZNiYAUXpV+uEiJvdkF9DF8t1MZr+AfL5OvT6j9y3ejgANdv p41L+Aunyg3OY9ILCD1gAXcX0L7kPD21DKqDIrVT3Zu0odoPmTTN6GT5JB9Zl1ue ueoQF9gpjkt9T7R2w8f6MqjVF3IJZO1Z9OfSxkUBqWzoyPic4K1CxXbYYwGDSHdb uaPAFYtIDSnvY3g0T2xvjaIMrl8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ8QuPe wGRBePA+GQL2H64nBWd5zzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGU2MmJkMDUtMTAzYi00Y2NlLTkxZDctMDE2ZjRhYjI2YWE4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HgQ MA0GCSqGSIb3DQEBCwUAA4IBAQAAVM+qovC1MwCws42F+fBSWMQnPmqQvZChOeMJ c15xyUwZrw/8pvJkWJ+X9qljtqWzJQSZ/ucSUUYib76VcSc4iDlPjMC7l+6s6dAc 5SXqAjwVxInc+BypkmDerIpCXFh+cekEZlyJ8isnM71NGLOa6OZzj32TrMu9MUSJ 5X1/lARnB+wipGCSRPVs5v3O4iUklrezygYv5vdZrnsVMr8V1ULnGh4jtLRhKRek pVHO50JHcdnwpOFZxABMrr3Nb6UNIsGiGPYtfFZgEmWO5Yk9dH9v+A1vb5GhdvWl on9VLKOQUeE67fTpMFQ80Qlg9EOecR2QSxsAesqMJW9QMV+u -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:47 2025 by rpki-client