This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17e30daf-f11a-4af6-8f47-661a735a22e9.roa File: 17e30daf-f11a-4af6-8f47-661a735a22e9.roa (raw, json) Hash identifier: hvHypkQlEZiZ/wwzNV4pMWWw6hpGAbVHeM4SNwD/z/M= Subject key identifier: 76:BD:27:4F:FE:F0:86:C7:05:7F:EB:08:0B:CD:F3:7C:66:E3:96:1D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4817E2C4D607807F506E97CD2B226AD7FD28251F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17e30daf-f11a-4af6-8f47-661a735a22e9.roa Signing time: Sat 15 Nov 2025 05:20:39 +0000 ROA not before: Sat 15 Nov 2025 05:20:39 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d058:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:17:e2:c4:d6:07:80:7f:50:6e:97:cd:2b:22:6a:d7:fd:28:25:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:20:39 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=9815fab87d6de1015bb5c1a6397e69143753d8aa7a8fa44364e1eedf9c71a0ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:e4:73:87:35:18:98:83:bc:fa:96:a1:3a: 6e:f7:78:48:e3:48:10:94:4c:bd:1e:51:f9:c4:e3: f5:f3:37:13:86:20:f4:bd:1b:22:7b:c9:02:37:4d: 8e:17:5b:48:ed:da:0b:24:d1:d9:1d:c6:56:a8:33: ba:cb:8a:e5:6d:25:c8:c2:a1:e5:3f:31:0d:6f:0c: c5:c0:a2:d2:bb:59:cd:9b:de:6c:7b:fd:5f:2d:28: 4c:0d:51:f2:5f:a6:3f:17:b0:27:6e:c9:75:6c:4f: 1a:37:ca:be:f8:4f:35:eb:a5:6d:9c:87:c6:65:51: 0e:03:0c:d9:2e:6f:1f:b6:e5:f6:3a:b3:54:cc:aa: 14:ff:73:5d:ac:24:c4:4b:1d:7e:fe:e6:41:9a:e9: 34:46:01:16:95:92:ff:a2:a3:84:e7:ba:3f:ca:58: 46:13:d4:d3:d2:eb:b7:52:28:7a:6d:ad:03:0d:62: 75:2a:db:ed:f8:14:fe:1e:b6:a3:d2:03:06:14:87: cb:7c:ef:7c:e2:f2:93:76:5d:59:3e:b6:2c:3e:eb: d4:ac:1d:70:c2:f5:37:6a:5c:2e:b5:1d:ae:ca:c7: 38:75:df:ec:d9:7d:95:bb:d7:58:c5:2d:8f:43:07: 92:db:57:b5:0d:fb:c4:e1:2a:09:d4:35:ed:3b:24: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BD:27:4F:FE:F0:86:C7:05:7F:EB:08:0B:CD:F3:7C:66:E3:96:1D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17e30daf-f11a-4af6-8f47-661a735a22e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d058:5000::/40 Signature Algorithm: sha256WithRSAEncryption 72:87:0c:5d:0a:83:75:af:48:5e:4a:c7:6e:aa:b7:90:fc:32: ad:58:4e:4d:af:1f:34:10:b5:e6:38:92:da:9a:60:78:31:c6: 55:0a:0f:dc:a2:db:6c:1d:2c:e3:b5:4b:f3:a5:50:14:d0:44: b9:b1:42:32:fe:15:56:f6:59:07:a6:97:1a:1b:6e:83:8f:24: da:65:ca:f1:d6:83:4c:59:c8:47:23:7f:8b:a7:43:33:51:59: 75:c9:40:1f:ef:67:d1:2b:7d:63:30:44:f8:fc:f7:67:b8:7d: 6c:e0:04:07:8e:d2:e6:0b:9a:fc:3f:b8:6e:b8:d9:87:c4:d2: d4:68:42:62:7a:5e:cc:fb:73:0b:84:2c:8c:e1:98:51:c4:96: df:2d:c1:53:b6:ca:e5:45:86:48:45:73:29:98:80:68:3b:b2: f2:bd:7e:3f:80:e6:8c:b3:28:a2:d9:bb:b7:b9:ed:bb:15:e1: 12:4a:62:d6:ab:2b:89:fc:20:07:26:00:47:0e:a8:04:a9:04: a9:21:92:ce:b5:6c:8f:3d:27:40:71:31:c1:7d:e3:2d:15:67: 27:45:df:72:95:49:0f:cb:03:fc:b6:5b:94:b3:62:46:96:a3: bc:11:74:a8:46:2c:3d:1a:1d:ed:62:7f:8c:08:15:16:a6:6e: fa:90:c5:19 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUSBfixNYHgH9QbpfNKyJq1/0oJR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTIwMzlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDk4MTVmYWI4N2Q2ZGUxMDE1YmI1YzFhNjM5N2U2OTE0Mzc1M2Q4YWE3YThm YTQ0MzY0ZTFlZWRmOWM3MWEwYWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJJ75HOHNRiYg7z6lqE6bvd4SONIEJRMvR5R+cTj9fM3E4Yg9L0bInvJAjdN jhdbSO3aCyTR2R3GVqgzusuK5W0lyMKh5T8xDW8MxcCi0rtZzZvebHv9Xy0oTA1R 8l+mPxewJ27JdWxPGjfKvvhPNeulbZyHxmVRDgMM2S5vH7bl9jqzVMyqFP9zXawk xEsdfv7mQZrpNEYBFpWS/6KjhOe6P8pYRhPU09Lrt1Ioem2tAw1idSrb7fgU/h62 o9IDBhSHy3zvfOLyk3ZdWT62LD7r1KwdcML1N2pcLrUdrsrHOHXf7Nl9lbvXWMUt j0MHkttXtQ37xOEqCdQ17TskqCcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR2vSdP /vCGxwV/6wgLzfN8ZuOWHTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTdlMzBkYWYtZjExYS00YWY2LThmNDctNjYxYTczNWEyMmU5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FhQ MA0GCSqGSIb3DQEBCwUAA4IBAQByhwxdCoN1r0heSsduqreQ/DKtWE5Nrx80ELXm OJLammB4McZVCg/cottsHSzjtUvzpVAU0ES5sUIy/hVW9lkHppcaG26DjyTaZcrx 1oNMWchHI3+Lp0MzUVl1yUAf72fRK31jMET4/PdnuH1s4AQHjtLmC5r8P7huuNmH xNLUaEJiel7M+3MLhCyM4ZhRxJbfLcFTtsrlRYZIRXMpmIBoO7LyvX4/gOaMsyii 2bu3ue27FeESSmLWqyuJ/CAHJgBHDqgEqQSpIZLOtWyPPSdAcTHBfeMtFWcnRd9y lUkPywP8tluUs2JGlqO8EXSoRiw9Gh3tYn+MCBUWpm76kMUZ -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:55 2025 by rpki-client