This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a64076-9adb-4301-817c-2be1c1e1d57e.roa File: 04a64076-9adb-4301-817c-2be1c1e1d57e.roa (raw, json) Hash identifier: a2dT4EsnTv8q3N4KKjvTbZwHa6/7h1BFhfjX19Qq0Hc= Subject key identifier: 23:0D:9E:62:2C:2B:64:13:D4:2D:74:45:1C:A5:D0:89:CA:A5:E4:84 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 501670FA9FB45FCA71EF3F340176F930BE192B24 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a64076-9adb-4301-817c-2be1c1e1d57e.roa Signing time: Thu 13 Nov 2025 02:00:09 +0000 ROA not before: Thu 13 Nov 2025 02:00:09 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d071:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:16:70:fa:9f:b4:5f:ca:71:ef:3f:34:01:76:f9:30:be:19:2b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:09 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=07b4083e38aea835d188841150daa14c7ab57170b08449da5b01e5de4403ad83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:c1:85:f9:9e:2b:50:f9:5f:88:81:fa:32: ba:73:1e:ca:05:b8:40:07:53:b6:e9:b4:24:59:aa: e7:b0:7b:7d:65:ff:ba:be:9f:64:1f:0c:6e:35:60: 09:a0:5b:9a:7a:ae:f5:06:08:53:6c:9b:d1:0f:62: 4b:82:5a:f3:6e:56:2a:d4:69:c6:66:6d:1e:dc:19: 47:a8:6b:6b:ed:bb:11:10:b7:bd:61:08:00:f5:97: 67:04:ad:2f:b2:8c:ba:62:ed:09:db:b5:cf:dd:ee: 29:37:26:11:f9:5f:3d:8e:de:b8:2a:04:ca:c8:1a: 32:fb:8f:bf:80:4d:32:a7:5f:87:8c:34:62:5b:ef: 07:75:e1:b4:34:05:11:ef:ef:23:79:d2:ef:01:70: 18:ce:10:d3:cc:3c:41:e0:58:e9:c2:78:e0:09:20: 03:b6:37:ba:6c:5f:ab:01:7b:4c:58:5d:d8:7a:c0: 26:77:a7:35:f8:f4:12:40:d5:3b:f8:ac:fb:31:c8: 9e:27:91:9e:f4:06:61:c1:01:45:0b:2f:00:96:da: f8:2c:3e:b6:45:14:f8:76:7e:96:5e:8d:cc:c0:25: bb:b3:0c:f4:5d:44:6e:c8:db:07:33:6c:0c:c2:9d: a9:fb:ad:80:48:bd:10:08:70:ac:20:8a:05:ed:34: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0D:9E:62:2C:2B:64:13:D4:2D:74:45:1C:A5:D0:89:CA:A5:E4:84 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04a64076-9adb-4301-817c-2be1c1e1d57e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d071:800::/40 Signature Algorithm: sha256WithRSAEncryption 4b:75:80:0d:fc:33:50:df:1f:0f:b0:86:8f:69:06:02:5a:f2: cf:a1:c3:36:54:ba:d6:78:07:69:dc:42:b1:90:12:5b:22:e7: d5:69:7d:90:30:dc:73:c6:e9:ec:9a:ef:cd:e1:da:c4:fc:f4: a5:bc:06:31:d9:b5:ff:f6:c8:62:c2:33:95:c7:77:f3:33:9b: e9:0d:0c:6a:cd:92:07:12:c2:46:e9:dd:8d:fd:d7:ea:50:a0: f9:29:e6:c8:40:b6:7b:5f:06:84:e9:d4:fe:43:d1:e1:0f:94: e3:54:df:01:db:10:92:8e:d8:ce:60:63:f1:b6:a5:99:14:c6: d0:53:ef:31:77:a6:7b:8a:5c:b0:b7:65:40:84:25:1b:6f:6a: 08:7f:a5:26:21:df:db:fb:73:95:75:4d:d1:23:31:31:dd:0a: d1:f0:74:4c:0c:50:66:4b:69:da:7a:e4:ae:60:f2:a0:91:bb: 46:f3:54:8c:83:04:a0:41:fb:71:16:ec:58:4b:b5:39:56:eb: 18:b1:cd:14:ca:3e:ff:50:99:44:7d:8b:c9:70:85:a9:50:3a: c5:e1:6c:ce:27:e8:6d:24:8f:a0:e2:2e:21:0c:5a:23:40:8e: 19:ae:8b:81:93:43:f6:c7:d7:b7:4e:f2:71:41:4b:20:59:3b: 2b:ea:07:0e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUUBZw+p+0X8px7z80AXb5ML4ZKyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMDlaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQDA3YjQwODNlMzhhZWE4MzVkMTg4ODQxMTUwZGFhMTRjN2FiNTcxNzBiMDg0 NDlkYTViMDFlNWRlNDQwM2FkODMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYNwYX5nitQ+V+IgfoyunMeygW4QAdTtum0JFmq57B7fWX/ur6fZB8MbjVg CaBbmnqu9QYIU2yb0Q9iS4Ja825WKtRpxmZtHtwZR6hra+27ERC3vWEIAPWXZwSt L7KMumLtCdu1z93uKTcmEflfPY7euCoEysgaMvuPv4BNMqdfh4w0YlvvB3XhtDQF Ee/vI3nS7wFwGM4Q08w8QeBY6cJ44AkgA7Y3umxfqwF7TFhd2HrAJnenNfj0EkDV O/is+zHInieRnvQGYcEBRQsvAJba+Cw+tkUU+HZ+ll6NzMAlu7MM9F1EbsjbBzNs DMKdqfutgEi9EAhwrCCKBe00ldkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQjDZ5i LCtkE9QtdEUcpdCJyqXkhDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDRhNjQwNzYtOWFkYi00MzAxLTgxN2MtMmJlMWMxZTFkNTdlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HEI MA0GCSqGSIb3DQEBCwUAA4IBAQBLdYAN/DNQ3x8PsIaPaQYCWvLPocM2VLrWeAdp 3EKxkBJbIufVaX2QMNxzxunsmu/N4drE/PSlvAYx2bX/9shiwjOVx3fzM5vpDQxq zZIHEsJG6d2N/dfqUKD5KebIQLZ7XwaE6dT+Q9HhD5TjVN8B2xCSjtjOYGPxtqWZ FMbQU+8xd6Z7ilywt2VAhCUbb2oIf6UmId/b+3OVdU3RIzEx3QrR8HRMDFBmS2na euSuYPKgkbtG81SMgwSgQftxFuxYS7U5VusYsc0Uyj7/UJlEfYvJcIWpUDrF4WzO J+htJI+g4i4hDFojQI4ZrouBk0P2x9e3TvJxQUsgWTsr6gcO -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:58 2025 by rpki-client