This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa File: 007aa6ae-ee04-4168-a465-d2d3db70f19f.roa (raw, json) Hash identifier: TvqZF82FnzBQ9KtC527QTKlfsafv65J0Lq1RN94Y9s0= Subject key identifier: 4B:E1:15:23:06:B6:7D:A8:46:3D:E0:DF:A5:E4:0A:3C:63:54:CA:B7 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5E661AFA36F9E90324EE61BD4AC3C2BCE2581296 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa Signing time: Sat 15 Nov 2025 05:20:12 +0000 ROA not before: Sat 15 Nov 2025 05:20:12 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:66:1a:fa:36:f9:e9:03:24:ee:61:bd:4a:c3:c2:bc:e2:58:12:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:20:12 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=27a0ca3da67b1c6516ad97d98e36f5fdbc80e8bb24d74c0e5392706dc505396b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:6b:ac:33:06:71:56:0f:2b:86:31:25:3a: 19:39:53:c4:35:0b:b9:b6:85:fa:c5:48:ee:57:45: 61:bb:7f:34:77:f9:1b:31:16:d3:91:ae:a1:28:cb: 59:21:a0:18:fb:a9:01:3f:bf:a3:27:bc:db:f9:5d: 85:df:2c:3f:6b:d1:c8:0c:69:e1:ca:16:56:84:39: 8c:10:39:f8:0b:dd:10:33:86:cd:17:12:b0:79:6e: 7d:43:8e:69:25:17:77:f4:13:d4:10:b6:59:85:a2: 94:3d:4b:ab:73:e7:99:9b:37:81:06:78:3a:eb:2a: a2:9b:5b:cb:4f:0c:6d:f4:e6:75:a0:15:f0:6a:67: 8c:21:83:33:e0:2c:68:04:88:06:75:b7:ea:d2:32: c7:10:87:7f:66:09:87:ee:f7:b4:27:97:63:7d:b9: c2:59:69:3f:39:a0:44:40:02:d3:f5:c7:bd:aa:ad: d2:a4:d5:f9:f2:49:c9:c5:93:70:66:6e:b2:8f:5f: 51:99:bb:e7:ea:6d:d6:f2:19:52:8d:f7:f8:33:9c: 8c:17:0a:46:47:94:40:93:3f:36:1d:a8:29:56:01: 27:ec:ee:81:5b:c3:78:9d:af:45:d9:0c:5a:59:36: 05:41:67:9e:ca:ff:ed:df:5e:3d:85:3f:b5:d9:84: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E1:15:23:06:B6:7D:A8:46:3D:E0:DF:A5:E4:0A:3C:63:54:CA:B7 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:1040::/48 Signature Algorithm: sha256WithRSAEncryption 50:db:68:59:60:b9:87:5b:c9:0f:d7:cd:8c:a2:8f:a2:f9:af: fc:fb:ce:77:6f:63:c8:8c:00:0c:4e:c0:8a:ae:04:c5:84:54: 01:53:92:1e:c2:ae:0e:86:4f:d5:da:d6:fc:45:d1:3b:a5:47: 36:37:ca:3c:a2:2e:05:cc:80:be:be:71:6d:d1:8f:1a:de:f6: ac:a4:6a:83:aa:6a:e3:ee:5d:8a:7c:44:c2:37:2b:a2:c6:9d: c6:33:74:1c:7e:67:71:50:cf:51:4c:f7:80:76:14:79:23:a0: 13:ca:d9:82:0c:18:f0:eb:78:ff:ee:58:3f:94:61:55:b6:2b: 44:88:c6:c3:04:5f:98:5c:52:cf:94:ff:6e:ef:ca:e2:71:96: 03:f1:1e:62:a8:e8:57:a9:5d:41:59:77:00:bb:d8:57:f5:e3: 76:f9:9a:c1:69:0f:4a:a6:e3:d7:7a:eb:40:b2:97:9c:54:17: 0d:f0:d5:6c:9e:ef:51:97:50:54:80:40:76:48:30:a7:db:15: cd:2c:14:78:52:df:48:73:33:c5:2e:9f:07:d3:58:5f:2a:b5: 42:45:29:c7:c7:08:cc:42:c1:aa:5d:18:4e:6e:80:67:6c:a6: 89:60:76:58:40:fe:b0:3e:a2:e5:d2:1c:c3:bb:2c:dd:4e:4e: ac:4f:49:1c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUXmYa+jb56QMk7mG9SsPCvOJYEpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTIwMTJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDI3YTBjYTNkYTY3YjFjNjUxNmFkOTdkOThlMzZmNWZkYmM4MGU4YmIyNGQ3 NGMwZTUzOTI3MDZkYzUwNTM5NmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYOa6wzBnFWDyuGMSU6GTlTxDULubaF+sVI7ldFYbt/NHf5GzEW05GuoSjL WSGgGPupAT+/oye82/ldhd8sP2vRyAxp4coWVoQ5jBA5+AvdEDOGzRcSsHlufUOO aSUXd/QT1BC2WYWilD1Lq3PnmZs3gQZ4Ousqoptby08MbfTmdaAV8GpnjCGDM+As aASIBnW36tIyxxCHf2YJh+73tCeXY325wllpPzmgREAC0/XHvaqt0qTV+fJJycWT cGZuso9fUZm75+pt1vIZUo33+DOcjBcKRkeUQJM/Nh2oKVYBJ+zugVvDeJ2vRdkM Wlk2BUFnnsr/7d9ePYU/tdmEKNMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRL4RUj BrZ9qEY94N+l5Ao8Y1TKtzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDA3YWE2YWUtZWUwNC00MTY4LWE0NjUtZDJkM2RiNzBmMTlmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEQ QDANBgkqhkiG9w0BAQsFAAOCAQEAUNtoWWC5h1vJD9fNjKKPovmv/PvOd29jyIwA DE7Aiq4ExYRUAVOSHsKuDoZP1drW/EXRO6VHNjfKPKIuBcyAvr5xbdGPGt72rKRq g6pq4+5dinxEwjcrosadxjN0HH5ncVDPUUz3gHYUeSOgE8rZggwY8Ot4/+5YP5Rh VbYrRIjGwwRfmFxSz5T/bu/K4nGWA/EeYqjoV6ldQVl3ALvYV/XjdvmawWkPSqbj 13rrQLKXnFQXDfDVbJ7vUZdQVIBAdkgwp9sVzSwUeFLfSHMzxS6fB9NYXyq1QkUp x8cIzELBql0YTm6AZ2ymiWB2WED+sD6i5dIcw7ss3U5OrE9JHA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:48 2025 by rpki-client