This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa File: 03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa (raw, json) Hash identifier: 7pO6NHnaDGerfSeIVWCycIf4mHr8C5QQdowPr8yFKUw= Subject key identifier: 9D:9A:D6:CD:19:07:DD:8D:CC:28:1D:2D:FE:F3:8C:4C:34:0B:F3:C5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 322B161C673225AFCCDC0E6888376BF9380D1A0B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa Signing time: Sat 15 Nov 2025 06:20:36 +0000 ROA not before: Sat 15 Nov 2025 06:20:36 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2b:16:1c:67:32:25:af:cc:dc:0e:68:88:37:6b:f9:38:0d:1a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:36 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=07c9df7e1e53305a5802bd492c4017a096f73795a7432ee398825e326c89e8ad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:06:9c:e5:33:0b:e1:13:93:ba:9e:f2:07: 9c:c4:d1:8a:1a:e8:1b:a4:2f:35:7a:98:58:2c:ba: 98:96:89:60:46:ed:89:c5:c9:84:fe:ac:bf:93:27: df:30:5b:7b:41:f5:a1:3c:26:f1:4b:73:d3:a2:76: 32:45:e5:79:44:7b:ee:1e:ad:f5:f8:d1:bb:82:c5: 2e:3e:0a:79:50:9e:44:da:83:aa:52:a8:6e:2d:b7: 3e:66:c4:d4:fd:b5:7a:cf:dd:4d:d9:e6:d3:44:ae: 9d:2e:11:44:74:95:d2:23:9a:44:bf:7a:58:57:85: 82:bf:ff:3c:23:aa:e1:dd:00:f3:49:83:f4:7e:29: 92:d6:18:98:b5:79:1c:34:dc:d9:65:5b:2e:81:1c: 03:f1:81:bd:24:15:d1:4b:77:3e:f3:8b:a8:ae:dd: 58:f4:a1:e8:36:a9:db:a3:85:c6:88:c3:17:37:28: 44:64:10:9d:58:c6:5b:6b:dc:cd:f4:6b:24:28:37: cb:a1:86:03:e9:24:3a:f2:af:78:87:ac:0c:af:00: 90:43:55:a9:0a:f5:90:c3:1c:22:f1:53:c7:88:85: 2d:18:b8:e5:f8:01:13:e0:3c:c0:4b:77:26:b8:27: c2:45:c1:1d:87:b6:23:3d:4a:14:3a:a0:b7:aa:51: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9A:D6:CD:19:07:DD:8D:CC:28:1D:2D:FE:F3:8C:4C:34:0B:F3:C5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:8040::/48 Signature Algorithm: sha256WithRSAEncryption 58:ff:7c:63:8f:05:e1:ae:0e:f6:1c:73:24:72:40:38:a6:c3: 19:41:7f:0e:e1:df:5c:ee:5b:46:5b:e7:c1:e5:58:33:d4:ab: fe:c2:f9:28:ab:3a:b7:ba:49:a7:19:6c:db:14:a7:cb:7f:bf: 10:c7:46:3f:33:67:d3:bf:ea:21:4e:ac:86:04:7b:0f:9b:69: 7c:5d:3a:95:7f:df:cc:9c:74:ac:45:21:25:c2:0d:25:9c:37: 60:9c:de:19:d4:20:16:8f:d3:eb:f8:7a:19:20:9a:1b:fc:11: 8e:9d:f8:30:80:95:c3:f0:01:be:33:d6:77:20:81:34:ea:ef: ba:e0:05:d4:67:e6:80:3f:ab:38:85:d8:da:b6:0d:5d:b8:17: 74:03:9f:7d:74:59:11:08:d3:b3:59:21:05:60:1a:8e:6b:37: d7:27:3a:ea:38:a8:15:1c:5c:19:d5:39:e3:37:8c:f2:2b:17: 1a:4e:a1:2c:04:bd:a6:73:39:47:a3:50:2f:54:b9:5a:2e:8d: 61:b7:2b:8b:57:df:9b:99:f2:f5:9c:f9:8a:ca:85:6d:ba:bd: c9:47:00:d9:65:25:c3:46:a7:66:ec:60:bb:6c:10:cf:f8:3e: 9b:f2:00:4e:bf:f8:e7:a1:5a:9f:ab:ed:de:98:2a:ef:3f:c4: bd:e4:8d:35 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUMisWHGcyJa/M3A5oiDdr+TgNGgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwMzZaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDA3YzlkZjdlMWU1MzMwNWE1ODAyYmQ0OTJjNDAxN2EwOTZmNzM3OTVhNzQz MmVlMzk4ODI1ZTMyNmM4OWU4YWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX9BpzlMwvhE5O6nvIHnMTRihroG6QvNXqYWCy6mJaJYEbticXJhP6sv5Mn 3zBbe0H1oTwm8Utz06J2MkXleUR77h6t9fjRu4LFLj4KeVCeRNqDqlKobi23PmbE 1P21es/dTdnm00SunS4RRHSV0iOaRL96WFeFgr//PCOq4d0A80mD9H4pktYYmLV5 HDTc2WVbLoEcA/GBvSQV0Ut3PvOLqK7dWPSh6Dap26OFxojDFzcoRGQQnVjGW2vc zfRrJCg3y6GGA+kkOvKveIesDK8AkENVqQr1kMMcIvFTx4iFLRi45fgBE+A8wEt3 JrgnwkXBHYe2Iz1KFDqgt6pRvpcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSdmtbN GQfdjcwoHS3+84xMNAvzxTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDM0MTZjZTUtMDQyYS00YjhiLTgxZGQtODE5YzVlMWNkZjA5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A QDANBgkqhkiG9w0BAQsFAAOCAQEAWP98Y48F4a4O9hxzJHJAOKbDGUF/DuHfXO5b RlvnweVYM9Sr/sL5KKs6t7pJpxls2xSny3+/EMdGPzNn07/qIU6shgR7D5tpfF06 lX/fzJx0rEUhJcINJZw3YJzeGdQgFo/T6/h6GSCaG/wRjp34MICVw/ABvjPWdyCB NOrvuuAF1GfmgD+rOIXY2rYNXbgXdAOffXRZEQjTs1khBWAajms31yc66jioFRxc GdU54zeM8isXGk6hLAS9pnM5R6NQL1S5Wi6NYbcri1ffm5ny9Zz5isqFbbq9yUcA 2WUlw0anZuxgu2wQz/g+m/IATr/456Fan6vt3pgq7z/EveSNNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:16 2025 by rpki-client