This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json) Hash identifier: sKzlzeg4kDw+SQqLUngFQ5KvvqtdJjHrKiLRkfqiQR0= Subject key identifier: 9C:55:64:BF:A6:2B:F5:53:AA:FD:DF:66:64:D5:1F:9B:16:26:7A:2B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 44079D35F065A70B73A35CADADCF77F24C187179 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa Signing time: Sat 15 Nov 2025 05:31:11 +0000 ROA not before: Sat 15 Nov 2025 05:31:11 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:07:9d:35:f0:65:a7:0b:73:a3:5c:ad:ad:cf:77:f2:4c:18:71:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:31:11 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=2a536a93d85e2445dde77255c8a91b8339a7b0cdb1050c97175540a7cf28be1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:5b:49:32:e5:73:ef:a0:5b:28:3d:75:e2: 53:6c:58:86:a8:82:e8:58:3a:aa:8a:fd:62:86:32: 80:b4:f7:be:f9:7b:17:cd:bc:1f:96:4b:bb:f8:b0: 52:70:fa:56:49:7c:3e:fd:4c:90:cb:75:fb:19:18: 16:ce:25:3d:9e:29:c0:7f:7b:3d:6a:3c:c6:6a:39: a1:60:3d:fd:de:44:08:58:1c:a9:d1:9e:31:08:5f: 4d:af:73:76:16:e0:ca:3c:02:84:bd:7d:e9:8d:ed: 84:13:29:7a:06:64:b2:17:ff:b6:03:65:a8:39:df: bc:04:d6:fe:d8:dc:97:02:f6:a5:60:62:cf:70:c0: 20:6b:70:d8:cc:c7:9f:aa:67:34:21:b6:f1:0c:e0: 08:d6:2c:f9:b2:42:b3:7a:10:d4:cd:86:6d:d1:98: ff:7a:25:d8:a4:f6:b9:23:9a:4b:ca:75:d4:9f:c9: 76:e0:f0:d3:49:98:c6:87:bc:4e:e8:ec:6d:75:6e: d7:37:d4:c7:7d:f5:ab:44:76:6f:f3:e1:61:37:d4: 9a:3e:b6:cb:ba:7e:88:aa:2d:1d:5c:c1:7e:29:b2: c5:c5:d8:8b:6e:94:04:10:3e:8e:d6:82:2a:ff:54: 1f:89:ef:20:36:6a:81:44:24:b4:5e:42:64:69:de: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:55:64:BF:A6:2B:F5:53:AA:FD:DF:66:64:D5:1F:9B:16:26:7A:2B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:50c0::/48 Signature Algorithm: sha256WithRSAEncryption b5:e1:a5:c8:50:cf:15:62:7a:6d:9e:90:21:c6:0e:24:eb:8f: f2:ba:79:1d:ea:b2:86:4d:f3:3b:ed:29:01:08:1c:10:dd:15: 8a:33:9f:9b:d0:39:b4:1f:ee:d9:8e:d5:d2:bc:32:d0:ea:2d: 72:ec:65:ff:63:81:0e:62:97:55:85:f0:d0:f9:03:d8:49:0e: ff:79:c0:77:61:7c:9f:e4:e2:36:f8:ae:2f:91:36:50:15:6d: dd:a4:ec:db:ef:74:b1:bf:37:0a:0e:9b:8b:da:ad:a1:5a:ce: 8e:f4:22:9d:50:20:44:e7:2a:29:00:3f:39:c0:59:99:40:d6: e7:86:be:08:7e:c8:32:c0:a7:51:4a:72:3d:88:9b:8c:11:95: 45:79:50:65:59:5a:03:48:a6:b5:90:1a:38:05:65:d3:8e:b2: 32:ac:fa:72:7c:4d:86:e4:44:0f:16:42:0f:2b:d2:85:9c:2a: 3a:4e:04:35:b3:3f:25:50:08:ce:33:73:c3:1d:6b:c9:d4:1c: 34:cd:75:ae:fd:2d:1f:dd:f0:7c:1f:5f:a5:a3:fe:85:52:bb: 2a:ee:4c:d2:85:4d:ee:c1:90:8f:fa:c3:72:6f:65:87:b6:73: c5:8b:e4:3b:43:4a:6a:ad:3c:cd:5a:22:af:fc:1c:ce:af:b2: e1:96:21:03 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIURAedNfBlpwtzo1ytrc938kwYcXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMxMTFaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDJhNTM2YTkzZDg1ZTI0NDVkZGU3NzI1NWM4YTkxYjgzMzlhN2IwY2RiMTA1 MGM5NzE3NTU0MGE3Y2YyOGJlMWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPuW0ky5XPvoFsoPXXiU2xYhqiC6Fg6qor9YoYygLT3vvl7F828H5ZLu/iw UnD6Vkl8Pv1MkMt1+xkYFs4lPZ4pwH97PWo8xmo5oWA9/d5ECFgcqdGeMQhfTa9z dhbgyjwChL196Y3thBMpegZkshf/tgNlqDnfvATW/tjclwL2pWBiz3DAIGtw2MzH n6pnNCG28QzgCNYs+bJCs3oQ1M2GbdGY/3ol2KT2uSOaS8p11J/JduDw00mYxoe8 TujsbXVu1zfUx331q0R2b/PhYTfUmj62y7p+iKotHVzBfimyxcXYi26UBBA+jtaC Kv9UH4nvIDZqgUQktF5CZGnevVMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBScVWS/ piv1U6r932Zk1R+bFiZ6KzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTdjMzYxYWEtOWQyMy00OGYxLTgyNTAtYmM3NzJmYTc3NzNhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFQ wDANBgkqhkiG9w0BAQsFAAOCAQEAteGlyFDPFWJ6bZ6QIcYOJOuP8rp5Heqyhk3z O+0pAQgcEN0VijOfm9A5tB/u2Y7V0rwy0Ootcuxl/2OBDmKXVYXw0PkD2EkO/3nA d2F8n+TiNviuL5E2UBVt3aTs2+90sb83Cg6bi9qtoVrOjvQinVAgROcqKQA/OcBZ mUDW54a+CH7IMsCnUUpyPYibjBGVRXlQZVlaA0imtZAaOAVl046yMqz6cnxNhuRE DxZCDyvShZwqOk4ENbM/JVAIzjNzwx1rydQcNM11rv0tH93wfB9fpaP+hVK7Ku5M 0oVN7sGQj/rDcm9lh7ZzxYvkO0NKaq08zVoir/wczq+y4ZYhAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:40 2025 by rpki-client