This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa File: 1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa (raw, json) Hash identifier: AAW4o6qV0G1neqEFoLdBo5YekO9vY/KgfG0ns6kfI94= Subject key identifier: BE:67:E3:70:62:AF:02:32:74:3B:74:33:82:2B:1E:20:D2:37:19:55 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3030AB39CA671FA3FFA3480BFA646D6175A64367 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa Signing time: Tue 18 Nov 2025 00:30:10 +0000 ROA not before: Tue 18 Nov 2025 00:30:10 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d034:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:30:ab:39:ca:67:1f:a3:ff:a3:48:0b:fa:64:6d:61:75:a6:43:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:30:10 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=68122daa84effe3d2438d4881927a9ed5405c11cbdb9e451759be3b080e231af, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:c3:78:53:49:eb:76:1c:f2:20:72:bb:74: 99:9c:b6:84:0b:f8:ac:08:3d:83:5e:a2:ee:13:a6: d5:ba:a2:f3:57:25:ec:8a:f2:b8:a5:09:87:d6:e6: ae:f3:dd:95:5c:18:9d:02:e6:86:dd:d9:af:af:4a: 7c:46:05:f7:9f:78:8f:91:2b:e8:0b:14:fa:d2:79: a7:21:48:16:4f:7f:68:77:82:ac:7d:a1:cf:af:34: e2:bf:41:47:fa:ee:83:ac:77:c9:58:00:a0:3d:52: e2:95:80:98:df:5c:ad:e1:15:d4:11:f1:0d:80:0f: 49:c6:ae:b2:47:d6:02:c8:be:28:21:e1:a5:c5:9d: 38:1f:ae:5c:cd:8b:4c:91:11:41:7d:05:10:a1:15: 0f:14:71:12:0b:85:f2:bb:40:36:ac:bb:98:61:1c: f0:12:d8:8f:85:27:4b:b4:62:ac:8a:75:59:7e:80: 54:7a:00:92:9e:b1:5d:08:4c:99:5c:c1:cb:64:12: 6c:04:9e:d8:b0:cb:0e:85:24:00:6f:e7:94:af:ca: c9:5c:00:5d:f1:23:90:a8:b2:60:52:94:04:0a:a3: 00:39:e3:22:b1:b0:ea:e0:b1:34:f7:ad:39:6e:ed: d6:eb:e7:57:84:91:bd:1e:78:30:40:7f:09:08:5d: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:E3:70:62:AF:02:32:74:3B:74:33:82:2B:1E:20:D2:37:19:55 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d034:60c0::/46 Signature Algorithm: sha256WithRSAEncryption aa:93:92:24:d7:eb:4b:be:11:79:8d:da:30:4a:c4:18:02:55: ca:b3:2b:27:a6:71:d1:09:aa:07:8e:a6:c8:86:54:4b:0b:82: 1e:af:4f:03:99:56:bd:29:47:05:46:11:3e:84:05:16:f1:e5: 2e:d9:ae:f0:b6:6b:99:c6:d4:c2:62:d3:57:de:3e:e1:c6:78: 0c:12:b4:f4:ad:87:35:ba:64:d2:e9:27:ec:5a:08:66:dd:d1: ee:14:d3:d7:b1:3c:f4:3f:7e:f2:f0:80:35:f4:41:62:53:93: e8:fe:76:44:9a:aa:54:8c:3d:1b:63:f5:8e:07:d6:2b:6e:e9: d2:60:64:90:a4:91:d8:6a:c1:ee:f1:1a:d4:87:14:27:e8:7f: e8:c8:da:de:6f:fb:d9:4c:22:5d:27:3e:b5:f1:ea:ce:9b:e6: 75:95:b5:3a:aa:60:fc:a9:d2:66:29:3a:97:b7:ec:58:a2:ed: 1a:7d:61:d3:44:21:28:1c:9d:b2:f5:a6:bd:b3:fb:39:47:31: e8:28:0d:0b:b0:cb:4e:d3:bc:1e:11:d4:04:ef:2f:bd:6f:ea: 5e:fd:cd:f5:22:75:15:3c:92:22:44:58:f9:c4:3c:61:be:93: ea:71:38:3f:0c:7f:8e:fb:a5:22:4d:84:45:54:11:f9:c1:91: 18:8f:37:7e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUMDCrOcpnH6P/o0gL+mRtYXWmQ2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDMwMTBaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDY4MTIyZGFhODRlZmZlM2QyNDM4ZDQ4ODE5MjdhOWVkNTQwNWMxMWNiZGI5 ZTQ1MTc1OWJlM2IwODBlMjMxYWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdiw3hTSet2HPIgcrt0mZy2hAv4rAg9g16i7hOm1bqi81cl7IryuKUJh9bm rvPdlVwYnQLmht3Zr69KfEYF9594j5Er6AsU+tJ5pyFIFk9/aHeCrH2hz6804r9B R/rug6x3yVgAoD1S4pWAmN9creEV1BHxDYAPScauskfWAsi+KCHhpcWdOB+uXM2L TJERQX0FEKEVDxRxEguF8rtANqy7mGEc8BLYj4UnS7RirIp1WX6AVHoAkp6xXQhM mVzBy2QSbASe2LDLDoUkAG/nlK/KyVwAXfEjkKiyYFKUBAqjADnjIrGw6uCxNPet OW7t1uvnV4SRvR54MEB/CQhdA4sCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS+Z+Nw Yq8CMnQ7dDOCKx4g0jcZVTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWIxMWEwOTMtODdjMS00ZGMzLWI2YTctYjcwMTYxOGFlM2NlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DRg wDANBgkqhkiG9w0BAQsFAAOCAQEAqpOSJNfrS74ReY3aMErEGAJVyrMrJ6Zx0Qmq B46myIZUSwuCHq9PA5lWvSlHBUYRPoQFFvHlLtmu8LZrmcbUwmLTV94+4cZ4DBK0 9K2HNbpk0ukn7FoIZt3R7hTT17E89D9+8vCANfRBYlOT6P52RJqqVIw9G2P1jgfW K27p0mBkkKSR2GrB7vEa1IcUJ+h/6Mja3m/72UwiXSc+tfHqzpvmdZW1Oqpg/KnS Zik6l7fsWKLtGn1h00QhKBydsvWmvbP7OUcx6CgNC7DLTtO8HhHUBO8vvW/qXv3N 9SJ1FTySIkRY+cQ8Yb6T6nE4Pwx/jvulIk2ERVQR+cGRGI83fg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:38 2025 by rpki-client