This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa File: 002c315b-3412-464e-b865-645f657f136d.roa (raw, json) Hash identifier: 32GMGUgSo+re4KLN25S+79MCLlVmOuVKZUSCi6syK0M= Subject key identifier: E9:F2:8D:F6:8D:B7:70:E3:AE:F1:5C:A8:DA:65:D3:4A:33:2F:46:82 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 67DDADE773846093FA9677F4E5CB96F14171F120 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa Signing time: Tue 02 Dec 2025 01:51:10 +0000 ROA not before: Tue 02 Dec 2025 01:51:10 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d079::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:dd:ad:e7:73:84:60:93:fa:96:77:f4:e5:cb:96:f1:41:71:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:51:10 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=562069dd6bf1a7cb6f3a18fd193b228e4672d851da7ae737a026910a3a62c4d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:f0:ad:6c:48:56:2b:53:cb:95:b7:b9:50: 5e:17:f9:d9:92:21:e2:0e:0b:03:d9:b3:49:c1:cc: 6e:c6:65:2f:f8:7b:15:75:9e:52:07:57:b7:39:e3: 76:64:99:a9:99:f8:4c:a0:ad:bf:9d:64:3b:38:31: 8d:6a:58:d2:7d:df:fe:b1:a7:25:35:71:a5:e1:35: ba:89:f1:52:47:ed:75:ab:75:8c:82:47:89:1b:75: 3a:f6:28:fd:fc:6f:39:f4:5b:0e:97:7b:18:66:6e: d5:de:41:3a:0b:8e:43:93:95:b1:0c:89:93:c5:a3: aa:93:95:b2:67:2e:23:c7:25:bd:3f:bd:fe:a6:24: 00:bc:ed:b3:94:ff:ac:fb:df:40:ee:91:dc:3d:60: 20:db:7a:4e:c1:62:e9:f3:92:81:57:29:76:46:e9: 38:3a:29:02:13:71:d4:df:ff:ce:1e:33:90:c8:c4: 50:cb:54:07:f0:6a:87:45:e3:0b:30:a3:77:38:aa: 05:84:ff:41:11:95:44:cd:6e:e5:15:9e:9e:33:85: 30:1e:de:aa:91:ee:61:01:9e:78:b4:82:70:b9:eb: c8:47:ac:34:0e:3e:17:89:e6:16:85:69:43:5b:cf: 89:59:54:ca:89:40:10:0d:ce:7b:7c:4e:35:f9:57: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F2:8D:F6:8D:B7:70:E3:AE:F1:5C:A8:DA:65:D3:4A:33:2F:46:82 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d079::/32 Signature Algorithm: sha256WithRSAEncryption 51:7a:db:85:d1:d8:7e:f3:33:4a:c9:18:1d:d1:ae:3f:9d:09: 3b:cf:ae:75:cc:72:76:c8:0c:b8:d3:b4:19:b6:04:8e:f5:f7: dc:a9:0b:61:f0:e3:e3:3f:ac:15:73:70:0c:52:74:41:eb:c5: 4b:12:bf:62:ca:e6:70:21:79:ad:43:a8:62:c3:10:d6:b0:dc: 7f:4d:d0:0e:2b:b9:59:ed:e5:28:25:2c:7e:24:54:37:c2:21: 13:3d:cc:99:49:24:1c:bb:a1:9b:15:aa:e6:99:85:53:4b:a5: 1d:a5:5e:ba:eb:87:80:7c:f9:54:25:32:10:dd:ff:ea:37:30: c6:ac:ef:21:a4:a2:b9:a2:7e:24:b9:a1:8f:f5:b3:9f:67:48: 9f:3a:2a:38:9b:e8:d6:78:c1:a6:54:b5:3d:9f:6e:52:7a:de: f6:9f:da:ef:0d:a1:d6:07:1e:94:e2:0d:1e:1c:37:86:48:97: a1:78:d5:a3:47:30:43:38:b9:7e:19:b2:4f:71:f4:9a:a8:65: 85:e8:a7:a0:2d:ad:f4:76:2d:92:f6:c2:9c:ff:99:e0:b8:1c: a0:a4:f4:90:a6:34:65:f3:41:fd:d5:83:81:6f:e2:28:4a:e6: 03:72:1b:a1:25:58:ff:1a:c1:26:da:f4:9f:4d:11:8e:c0:48: 9b:74:79:fd -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUZ92t53OEYJP6lnf05cuW8UFx8SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUxMTBaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDU2MjA2OWRkNmJmMWE3Y2I2ZjNhMThmZDE5M2IyMjhlNDY3MmQ4NTFkYTdh ZTczN2EwMjY5MTBhM2E2MmM0ZDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxd8K1sSFYrU8uVt7lQXhf52ZIh4g4LA9mzScHMbsZlL/h7FXWeUgdXtznj dmSZqZn4TKCtv51kOzgxjWpY0n3f/rGnJTVxpeE1uonxUkftdat1jIJHiRt1OvYo /fxvOfRbDpd7GGZu1d5BOguOQ5OVsQyJk8WjqpOVsmcuI8clvT+9/qYkALzts5T/ rPvfQO6R3D1gINt6TsFi6fOSgVcpdkbpODopAhNx1N//zh4zkMjEUMtUB/Bqh0Xj CzCjdziqBYT/QRGVRM1u5RWenjOFMB7eqpHuYQGeeLSCcLnryEesNA4+F4nmFoVp Q1vPiVlUyolAEA3Oe3xONflXYK8CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBTp8o32 jbdw467xXKjaZdNKMy9GgjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDAyYzMxNWItMzQxMi00NjRlLWI4NjUtNjQ1ZjY1N2YxMzZkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Hkw DQYJKoZIhvcNAQELBQADggEBAFF624XR2H7zM0rJGB3Rrj+dCTvPrnXMcnbIDLjT tBm2BI7199ypC2Hw4+M/rBVzcAxSdEHrxUsSv2LK5nAhea1DqGLDENaw3H9N0A4r uVnt5SglLH4kVDfCIRM9zJlJJBy7oZsVquaZhVNLpR2lXrrrh4B8+VQlMhDd/+o3 MMas7yGkormifiS5oY/1s59nSJ86Kjib6NZ4waZUtT2fblJ63vaf2u8NodYHHpTi DR4cN4ZIl6F41aNHMEM4uX4Zsk9x9JqoZYXop6AtrfR2LZL2wpz/meC4HKCk9JCm NGXzQf3Vg4Fv4ihK5gNyG6ElWP8awSba9J9NEY7ASJt0ef0= -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:08 2025 by rpki-client