This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa File: 1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa (raw, json) Hash identifier: g45V4EUDn5d6hAsG1fOv4Dcfp0v2eWMeQ3PmwiwKW5g= Subject key identifier: 6A:15:1C:AB:34:71:41:2A:9F:D2:AA:50:3F:85:B8:05:D7:37:29:44 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6FD9A83BA2559909C31409138A284741E3E28D83 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa Signing time: Sat 15 Nov 2025 06:30:49 +0000 ROA not before: Sat 15 Nov 2025 06:30:49 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d9:a8:3b:a2:55:99:09:c3:14:09:13:8a:28:47:41:e3:e2:8d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:49 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=95255fc1c69edd97001da75ecac6464a6dd1eac706343aa850000704d650a2b0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f1:f4:4f:df:a7:3a:cc:57:c0:d5:f5:b0:90: a2:ae:c5:9b:65:0e:38:fc:bb:64:58:a6:8a:71:92: b7:ac:8d:c9:f1:f5:73:82:05:41:a8:3a:81:e7:41: 46:47:d2:6e:76:1f:24:51:9a:42:2e:6b:21:c3:08: de:ae:08:f4:5d:1c:54:54:61:b0:53:68:47:18:f5: 0d:67:0b:92:46:bb:91:5f:a0:11:bd:39:bc:0a:5a: c7:12:d1:1c:5b:0d:c1:b2:f0:eb:02:c1:00:dd:62: 6a:b0:3b:83:ff:5f:04:d7:bc:ae:dd:17:d8:7c:ae: a3:d6:d4:61:e6:ed:d6:b9:bd:29:ea:61:ec:a8:d3: 6e:27:e9:9b:7d:01:f8:a1:82:fc:d1:9e:1f:c8:76: 0b:ec:ad:47:35:ad:08:84:80:01:b7:16:73:2a:7d: 35:3a:cc:01:36:02:e4:7e:bb:d5:f4:d1:40:69:d4: 0c:83:38:21:49:18:1b:98:88:db:97:d3:8c:e3:4d: 17:f0:b4:f2:77:4a:97:bf:60:f7:f7:af:c9:4f:ce: e9:fe:2a:53:49:d4:20:01:84:fa:6a:d0:35:70:e5: 76:ea:ee:6d:74:3f:d7:5c:1c:31:a0:d9:d3:69:c9: 3b:1d:66:a4:2a:d6:b1:a7:fa:b7:51:9e:39:eb:18: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:15:1C:AB:34:71:41:2A:9F:D2:AA:50:3F:85:B8:05:D7:37:29:44 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:8080::/48 Signature Algorithm: sha256WithRSAEncryption 1e:3d:f1:6c:cb:37:42:25:c2:0b:10:60:c1:ee:c5:57:a4:4b: 63:c7:c2:b6:bc:7d:30:19:dc:5c:8e:10:36:a9:f6:c0:fe:f6: a7:15:62:f7:87:d7:bc:97:d4:4d:de:4c:b5:23:56:17:3b:5d: 89:de:e8:44:66:48:1c:5c:31:64:42:02:2a:51:21:b2:a8:7e: f2:59:d0:68:15:b7:cb:47:53:31:25:17:90:a1:67:08:82:67: 97:0f:05:79:61:cd:a4:13:cf:10:0d:55:c9:30:4d:e4:32:2f: 28:9b:cc:47:51:87:56:8c:74:0f:df:1f:8a:b9:f0:d4:4d:7a: 9f:8d:c4:d7:44:58:d5:58:21:2a:28:b3:cb:d3:fb:1e:88:07: 0b:9d:c3:01:8a:89:81:82:06:90:78:06:5d:2f:39:50:00:bf: b5:44:5c:13:b8:bf:9f:39:89:df:49:9b:74:93:40:bf:69:c8: d2:5f:6b:7f:2e:24:db:9d:20:e5:26:3c:6f:d4:7a:bf:af:f1: e3:8f:88:9d:6f:35:f6:30:21:83:60:46:96:25:13:44:98:7e: 23:7d:26:4b:75:4e:e9:4b:44:ef:d2:fd:a5:fe:43:ca:8a:63: de:0c:44:50:24:34:0b:0e:fe:00:70:d7:6d:7b:e1:3e:9b:36: 84:eb:c6:cb -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUb9moO6JVmQnDFAkTiihHQePijYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwNDlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDk1MjU1ZmMxYzY5ZWRkOTcwMDFkYTc1ZWNhYzY0NjRhNmRkMWVhYzcwNjM0 M2FhODUwMDAwNzA0ZDY1MGEyYjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHx9E/fpzrMV8DV9bCQoq7Fm2UOOPy7ZFiminGSt6yNyfH1c4IFQag6gedB RkfSbnYfJFGaQi5rIcMI3q4I9F0cVFRhsFNoRxj1DWcLkka7kV+gEb05vApaxxLR HFsNwbLw6wLBAN1iarA7g/9fBNe8rt0X2Hyuo9bUYebt1rm9Keph7KjTbifpm30B +KGC/NGeH8h2C+ytRzWtCISAAbcWcyp9NTrMATYC5H671fTRQGnUDIM4IUkYG5iI 25fTjONNF/C08ndKl79g9/evyU/O6f4qU0nUIAGE+mrQNXDldurubXQ/11wcMaDZ 02nJOx1mpCrWsaf6t1GeOesYE/8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRqFRyr NHFBKp/SqlA/hbgF1zcpRDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWE4ZDllMTQtY2ZhOS00NDAwLWFmYTgtYjhjMGQ5ZWVlNGU0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKA gDANBgkqhkiG9w0BAQsFAAOCAQEAHj3xbMs3QiXCCxBgwe7FV6RLY8fCtrx9MBnc XI4QNqn2wP72pxVi94fXvJfUTd5MtSNWFztdid7oRGZIHFwxZEICKlEhsqh+8lnQ aBW3y0dTMSUXkKFnCIJnlw8FeWHNpBPPEA1VyTBN5DIvKJvMR1GHVox0D98firnw 1E16n43E10RY1VghKiizy9P7HogHC53DAYqJgYIGkHgGXS85UAC/tURcE7i/nzmJ 30mbdJNAv2nI0l9rfy4k250g5SY8b9R6v6/x44+InW819jAhg2BGliUTRJh+I30m S3VO6UtE79L9pf5Dyopj3gxEUCQ0Cw7+AHDXbXvhPps2hOvGyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:03 2025 by rpki-client