This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa File: 1bb27900-3531-4083-aef8-cc7656dba027.roa (raw, json) Hash identifier: +iXzrATYI1v44GYAtj5keupanjtKRyjs1CHq4q7eMsE= Subject key identifier: 19:6C:DF:AC:BC:32:43:B9:13:68:9B:9B:2F:3B:69:97:2A:6E:5C:6A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 320877144451FE445BFDA9D4F4D2F6D12044AADC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa Signing time: Tue 25 Nov 2025 20:00:09 +0000 ROA not before: Tue 25 Nov 2025 20:00:09 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:08:77:14:44:51:fe:44:5b:fd:a9:d4:f4:d2:f6:d1:20:44:aa:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:09 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=c81b788f98866907ffc2f8815b23c3ad8fe441561bc9e68f02ebc5d64f1305a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:2d:81:18:18:d8:e3:0d:b8:99:67:ed:86: 83:51:eb:21:4f:73:4b:6f:62:78:9d:40:81:0b:29: 3e:15:4e:ed:37:97:40:1c:2e:28:3e:84:3a:c2:ae: 38:2b:61:06:6f:61:0a:36:2d:35:cc:1d:77:c0:96: 70:af:28:20:6a:85:66:1c:6c:50:83:cc:20:49:c7: 04:ee:ba:46:c9:4c:ec:b1:94:c2:95:8f:4e:ce:0e: e8:4c:6d:5a:4b:3b:37:68:43:54:4e:85:5c:b8:9c: 36:8a:eb:0d:b3:99:3d:a4:a5:c1:5a:4a:87:c8:df: 02:29:78:0e:8c:7c:51:ba:fa:10:2e:28:5c:46:88: 0f:92:26:14:6f:46:34:da:e2:c5:2c:36:d7:27:43: e0:e6:a5:0b:ba:cd:fc:d5:39:67:af:eb:e5:2f:cb: 07:38:1f:2d:38:b3:c6:92:33:85:e7:81:3c:b2:45: 89:14:4c:13:91:9c:51:41:aa:1c:1e:11:1d:ad:94: 93:f5:14:d9:38:48:a6:88:fe:2f:60:ce:5c:a6:9f: 8e:ff:cb:8b:5b:5f:96:b8:65:5b:a2:10:ae:e8:05: 32:ea:50:17:56:c3:ac:57:ba:53:47:19:22:52:6f: 7d:b9:7a:c1:1b:07:ff:41:66:56:c0:52:76:2e:2f: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6C:DF:AC:BC:32:43:B9:13:68:9B:9B:2F:3B:69:97:2A:6E:5C:6A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:b000::/40 Signature Algorithm: sha256WithRSAEncryption 8d:52:c2:31:25:2c:86:fc:f7:09:1c:1b:36:dd:43:04:73:d0: 6f:24:0e:fc:ac:8c:53:fb:0f:5e:49:8a:4b:11:d4:b3:89:d9: 17:cf:a8:7c:53:a2:3a:20:f5:e7:ea:c5:bb:d8:07:46:7a:c3: 98:5a:dd:5a:a7:d3:29:3d:1e:29:3f:b0:00:ea:bc:d7:de:8f: ad:81:4e:7a:1f:65:b2:dd:f6:04:27:ac:2a:07:1b:be:7b:32: eb:d8:44:f6:d4:e2:a0:af:d4:66:29:fa:75:f1:82:c0:ce:3b: 68:fe:bb:27:f0:59:a5:05:a6:88:1e:88:d7:3f:93:73:64:6f: 5f:9b:ac:84:f6:32:b9:12:e8:01:f8:60:3b:fb:06:d0:9b:5b: 9b:79:54:cd:65:03:95:33:f6:39:d8:fb:d2:da:c0:8c:d6:7d: 35:15:87:1c:02:11:b1:81:d0:58:24:2c:60:36:e6:cd:01:e0: bb:2b:20:1f:89:01:5d:f6:6f:5c:db:18:2e:25:eb:f5:a9:21: d8:06:38:5b:de:47:1b:d1:53:31:8a:a4:29:cc:0e:68:3f:2c: 73:f3:a5:5c:c7:b9:6f:68:ed:07:d2:1a:07:a3:d7:df:61:34: cc:76:27:60:70:2f:ab:b1:cd:c9:58:ab:26:56:1e:11:49:31: 22:53:77:24 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUMgh3FERR/kRb/anU9NL20SBEqtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwMDlaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQGM4MWI3ODhmOTg4NjY5MDdmZmMyZjg4MTViMjNjM2FkOGZlNDQxNTYxYmM5 ZTY4ZjAyZWJjNWQ2NGYxMzA1YTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvoLYEYGNjjDbiZZ+2Gg1HrIU9zS29ieJ1AgQspPhVO7TeXQBwuKD6EOsKu OCthBm9hCjYtNcwdd8CWcK8oIGqFZhxsUIPMIEnHBO66RslM7LGUwpWPTs4O6Ext Wks7N2hDVE6FXLicNorrDbOZPaSlwVpKh8jfAil4Dox8Ubr6EC4oXEaID5ImFG9G NNrixSw21ydD4OalC7rN/NU5Z6/r5S/LBzgfLTizxpIzheeBPLJFiRRME5GcUUGq HB4RHa2Uk/UU2ThIpoj+L2DOXKafjv/Li1tflrhlW6IQrugFMupQF1bDrFe6U0cZ IlJvfbl6wRsH/0FmVsBSdi4v96MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQZbN+s vDJDuRNom5svO2mXKm5cajAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWJiMjc5MDAtMzUzMS00MDgzLWFlZjgtY2M3NjU2ZGJhMDI3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HOw MA0GCSqGSIb3DQEBCwUAA4IBAQCNUsIxJSyG/PcJHBs23UMEc9BvJA78rIxT+w9e SYpLEdSzidkXz6h8U6I6IPXn6sW72AdGesOYWt1ap9MpPR4pP7AA6rzX3o+tgU56 H2Wy3fYEJ6wqBxu+ezLr2ET21OKgr9RmKfp18YLAzjto/rsn8FmlBaaIHojXP5Nz ZG9fm6yE9jK5EugB+GA7+wbQm1ubeVTNZQOVM/Y52PvS2sCM1n01FYccAhGxgdBY JCxgNubNAeC7KyAfiQFd9m9c2xguJev1qSHYBjhb3kcb0VMxiqQpzA5oPyxz86Vc x7lvaO0H0hoHo9ffYTTMdidgcC+rsc3JWKsmVh4RSTEiU3ck -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:28 2025 by rpki-client