This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa File: 119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa (raw, json) Hash identifier: qKszTJmPJmHbfOxtISvJmt1OeNytDLkcVL2teUIOAZY= Subject key identifier: 2B:DC:0D:F3:60:9A:3A:6E:94:8C:6B:92:17:F5:46:99:17:EB:D6:60 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1C820E57AF86A226114120BA5AE06378FD71E0CD Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa Signing time: Tue 25 Nov 2025 20:00:08 +0000 ROA not before: Tue 25 Nov 2025 20:00:08 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:82:0e:57:af:86:a2:26:11:41:20:ba:5a:e0:63:78:fd:71:e0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:08 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=2095e1a40084ff618cb6526f42be6cfb5bffb02104451698b79f855c78ce7c9f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:a4:3b:15:7d:26:26:57:77:96:fe:20:99: b6:4a:2d:3b:58:37:90:ef:4b:86:06:4a:74:0e:5e: e7:92:68:20:63:47:67:49:5f:44:a5:b4:e9:8f:0f: e9:58:39:dd:38:f3:81:39:e5:a1:00:62:a4:ac:f5: af:e0:f6:3f:98:9e:58:a7:be:70:86:4d:a9:01:e7: 85:04:fe:09:29:b7:38:4a:81:89:c9:35:68:d7:5b: 84:c4:f9:39:7e:25:96:18:07:f8:6b:1f:87:d6:db: 89:29:f8:8b:ab:3f:7f:a8:75:13:82:a1:66:6b:16: 20:97:59:1b:ed:f8:f3:83:94:6d:ff:4b:4c:d3:93: 95:c6:de:e4:45:66:c8:68:8e:80:70:3c:b3:75:27: 52:54:09:cb:96:33:ea:d4:a9:2a:fc:3b:1c:23:ff: 50:6d:f8:fa:5b:64:55:f8:4e:04:14:de:90:95:2d: 41:54:22:f3:66:57:28:4b:21:03:68:b1:71:5b:ec: b7:a0:b4:3f:3e:83:b7:19:09:1a:62:d3:c3:e3:7d: 7d:58:e4:c9:76:e3:14:00:ed:27:24:99:53:7a:8c: 7a:b1:9b:93:c7:93:27:af:15:5a:af:8f:2c:09:d1: 1b:8b:e3:13:16:e9:b0:c9:24:08:2d:f1:48:6c:ec: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DC:0D:F3:60:9A:3A:6E:94:8C:6B:92:17:F5:46:99:17:EB:D6:60 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:4000::/40 Signature Algorithm: sha256WithRSAEncryption 91:50:95:25:39:33:e0:08:80:02:7f:6a:24:76:f2:8e:32:b4: 4f:b1:ee:d1:9e:c8:de:7a:fa:8a:6a:9f:a2:b9:36:c5:d7:66: a2:d5:90:dd:09:37:ba:77:10:54:18:49:05:0c:70:34:b9:8e: 9b:62:f4:14:4c:32:b5:8f:a8:00:81:54:f9:5c:69:ee:3c:66: 37:68:87:19:cf:56:ed:ac:c8:b5:ab:2b:ad:b2:84:fc:a3:2c: 69:bb:d7:31:6b:28:9d:a9:44:15:ec:52:c6:16:e0:97:25:62: e9:19:25:44:54:2e:38:b8:67:5d:a7:67:39:b4:fc:db:9e:a8: 23:79:bc:c3:c6:c5:8d:fb:75:a6:96:aa:f3:0c:58:fd:fb:ce: 87:84:85:c6:62:06:44:87:9e:75:f3:49:b1:7d:15:81:62:10: aa:4e:5b:ee:28:db:e1:30:db:07:5b:2a:76:e4:fc:ce:ca:27: 51:fb:57:01:a9:44:fc:1f:db:d7:ea:4e:fa:05:6f:c5:bf:2a: 00:c5:d4:ec:e6:be:43:40:33:1a:34:9e:99:e3:89:74:38:55: e7:9a:97:7e:34:16:d6:7c:67:2a:34:c0:d6:2d:a9:4c:09:c9: ca:c7:be:4f:92:9f:50:6e:41:4a:36:ae:b5:11:17:e8:4c:14: 53:90:85:b5 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUHIIOV6+GoiYRQSC6WuBjeP1x4M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwMDhaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDIwOTVlMWE0MDA4NGZmNjE4Y2I2NTI2ZjQyYmU2Y2ZiNWJmZmIwMjEwNDQ1 MTY5OGI3OWY4NTVjNzhjZTdjOWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALH+pDsVfSYmV3eW/iCZtkotO1g3kO9LhgZKdA5e55JoIGNHZ0lfRKW06Y8P 6Vg53TjzgTnloQBipKz1r+D2P5ieWKe+cIZNqQHnhQT+CSm3OEqBick1aNdbhMT5 OX4llhgH+Gsfh9bbiSn4i6s/f6h1E4KhZmsWIJdZG+3484OUbf9LTNOTlcbe5EVm yGiOgHA8s3UnUlQJy5Yz6tSpKvw7HCP/UG34+ltkVfhOBBTekJUtQVQi82ZXKEsh A2ixcVvst6C0Pz6DtxkJGmLTw+N9fVjkyXbjFADtJySZU3qMerGbk8eTJ68VWq+P LAnRG4vjExbpsMkkCC3xSGzsOO8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQr3A3z YJo6bpSMa5IX9UaZF+vWYDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTE5OTk3ZjktMDgyZS00Y2I2LThmMWItN2YwMGJkZjlmNmJiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HNA MA0GCSqGSIb3DQEBCwUAA4IBAQCRUJUlOTPgCIACf2okdvKOMrRPse7RnsjeevqK ap+iuTbF12ai1ZDdCTe6dxBUGEkFDHA0uY6bYvQUTDK1j6gAgVT5XGnuPGY3aIcZ z1btrMi1qyutsoT8oyxpu9cxayidqUQV7FLGFuCXJWLpGSVEVC44uGddp2c5tPzb nqgjebzDxsWN+3WmlqrzDFj9+86HhIXGYgZEh55180mxfRWBYhCqTlvuKNvhMNsH Wyp25PzOyidR+1cBqUT8H9vX6k76BW/FvyoAxdTs5r5DQDMaNJ6Z44l0OFXnmpd+ NBbWfGcqNMDWLalMCcnKx75Pkp9QbkFKNq61ERfoTBRTkIW1 -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:01 2025 by rpki-client