This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11b6f817-9b7c-4713-a998-67a8a2a5a379.roa File: 11b6f817-9b7c-4713-a998-67a8a2a5a379.roa (raw, json) Hash identifier: 7ZIBaU7WA+E+NpESKYlSzfBcm5dUVdLMvOZpTvL0XiU= Subject key identifier: 3C:B7:72:1C:6F:6E:68:5F:E8:67:64:E6:4D:43:1E:5D:B6:AF:FB:78 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 785ABB54551A7032B0E014906B033C7A7448766F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11b6f817-9b7c-4713-a998-67a8a2a5a379.roa Signing time: Sun 23 Nov 2025 01:30:50 +0000 ROA not before: Sun 23 Nov 2025 01:30:50 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5a:bb:54:55:1a:70:32:b0:e0:14:90:6b:03:3c:7a:74:48:76:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:50 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=b524eb890fa21f67ba4eb9483c09a6755976a9fe2034d9d411a5eb502cbcc00d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:8c:57:bf:5c:24:24:40:41:b6:9f:39:87: ee:a4:60:3f:ec:20:93:52:19:e3:d6:34:64:92:e6: 87:b0:d3:4a:17:2d:10:82:7e:06:1b:aa:e3:2b:4d: 1c:2c:7f:47:5c:d5:79:59:d6:52:2b:85:5a:48:72: 01:17:16:fe:7e:21:4e:37:ab:32:58:7f:c9:3e:d8: eb:8c:ed:28:50:26:83:c0:52:91:43:e6:16:2e:27: ea:56:94:ea:5d:76:41:80:e0:5f:05:86:af:ed:60: 3e:b8:8d:27:16:95:1d:02:10:19:b2:c4:bb:e8:85: 69:8b:de:ce:2d:07:c0:71:3e:7f:a4:3d:71:6a:72: 4a:1e:d9:d0:d3:33:ee:fb:54:21:35:7c:00:90:e8: d0:98:27:89:13:ca:66:f2:51:44:e1:5f:cf:48:96: b9:b4:4d:ad:42:dd:25:d2:ae:6a:5a:03:1a:b8:d0: 87:99:dd:1d:0f:6a:7b:6a:de:a8:00:a1:b7:40:73: 1e:8c:02:31:88:9a:e0:6f:f8:fc:9c:30:bd:5c:2a: ee:47:31:63:a9:f2:92:f9:94:c4:c4:84:e7:03:e5: ad:44:f7:02:83:32:f3:31:66:0a:e9:df:f6:fa:b6: 68:bc:75:13:42:9e:1c:ce:ad:91:fe:b5:d8:63:05: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B7:72:1C:6F:6E:68:5F:E8:67:64:E6:4D:43:1E:5D:B6:AF:FB:78 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11b6f817-9b7c-4713-a998-67a8a2a5a379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 70:06:2f:a8:15:93:18:a6:45:fe:1a:80:41:b0:9d:26:88:58: f6:5d:77:3c:fb:59:4d:c6:57:24:c3:e8:08:56:68:b2:6e:2a: 37:c7:4b:a4:ec:e0:52:7f:54:99:60:4f:f8:cb:f6:7b:b3:51: 19:39:b9:b5:54:37:74:0e:f3:7e:63:1e:b5:5f:f2:fa:4f:b1: 50:79:cf:72:e1:05:04:6d:02:f9:d5:88:1a:07:ef:07:b9:a3: f8:7a:13:e6:73:dd:19:22:49:64:29:71:47:4e:3c:67:d7:86: 41:86:a8:84:7f:0b:c2:2a:ac:af:27:76:70:ea:37:82:68:30: 19:4a:4e:a0:43:cb:2a:92:9c:f2:c6:9d:26:38:9c:ca:c8:75: 35:3c:95:d4:05:55:9e:f2:48:45:e5:4d:f5:0c:eb:55:ac:da: 4c:f6:a4:65:5b:60:d9:9a:c0:32:ca:69:2b:5e:88:35:52:79: e7:42:c7:d5:62:51:4e:ee:1d:e1:5e:43:dc:19:d3:9c:f2:4b: 40:68:fd:35:de:89:b7:52:72:6b:ad:ff:44:c4:cb:17:ee:a5: 43:b4:55:18:19:37:b5:27:9d:0c:57:c5:ef:e9:94:7a:a5:37: 15:7d:b2:29:38:cc:a1:46:9b:9b:0e:af:7a:70:f7:02:99:91: 04:07:6e:fb -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUeFq7VFUacDKw4BSQawM8enRIdm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwNTBaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGI1MjRlYjg5MGZhMjFmNjdiYTRlYjk0ODNjMDlhNjc1NTk3NmE5ZmUyMDM0 ZDlkNDExYTVlYjUwMmNiY2MwMGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKs5jFe/XCQkQEG2nzmH7qRgP+wgk1IZ49Y0ZJLmh7DTShctEIJ+Bhuq4ytN HCx/R1zVeVnWUiuFWkhyARcW/n4hTjerMlh/yT7Y64ztKFAmg8BSkUPmFi4n6laU 6l12QYDgXwWGr+1gPriNJxaVHQIQGbLEu+iFaYvezi0HwHE+f6Q9cWpySh7Z0NMz 7vtUITV8AJDo0JgniRPKZvJRROFfz0iWubRNrULdJdKualoDGrjQh5ndHQ9qe2re qACht0BzHowCMYia4G/4/JwwvVwq7kcxY6nykvmUxMSE5wPlrUT3AoMy8zFmCunf 9vq2aLx1E0KeHM6tkf612GMF/Y8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ8t3Ic b25oX+hnZOZNQx5dtq/7eDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTFiNmY4MTctOWI3Yy00NzEzLWE5OTgtNjdhOGEyYTVhMzc5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Grg wDANBgkqhkiG9w0BAQsFAAOCAQEAcAYvqBWTGKZF/hqAQbCdJohY9l13PPtZTcZX JMPoCFZosm4qN8dLpOzgUn9UmWBP+Mv2e7NRGTm5tVQ3dA7zfmMetV/y+k+xUHnP cuEFBG0C+dWIGgfvB7mj+HoT5nPdGSJJZClxR048Z9eGQYaohH8Lwiqsryd2cOo3 gmgwGUpOoEPLKpKc8sadJjicysh1NTyV1AVVnvJIReVN9QzrVazaTPakZVtg2ZrA MsppK16INVJ550LH1WJRTu4d4V5D3BnTnPJLQGj9Nd6Jt1Jya63/RMTLF+6lQ7RV GBk3tSedDFfF7+mUeqU3FX2yKTjMoUabmw6venD3ApmRBAdu+w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:03 2025 by rpki-client