This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa File: 1fb46240-1c3f-4b2f-9927-3470c9898890.roa (raw, json) Hash identifier: hMX6bUYX4vDZhMXCBQpnvAYYA8nFDo+KqMXgHZZhDrg= Subject key identifier: A5:36:44:48:0D:3D:B1:C4:81:72:58:C4:B5:DD:A6:B7:45:CB:72:27 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3F1DFA46001D89C9E1533598BBE897B6D11DD6D0 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa Signing time: Sat 15 Nov 2025 06:10:09 +0000 ROA not before: Sat 15 Nov 2025 06:10:09 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1d:fa:46:00:1d:89:c9:e1:53:35:98:bb:e8:97:b6:d1:1d:d6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:10:09 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=3e4a8f7e1e4c0fdbe39e686e8984697af24ee18e157749244e331214119f68d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:88:9c:81:d3:8d:46:51:40:c0:0c:97:7e: 4b:f3:64:bd:d2:a3:76:a0:f2:eb:65:85:8d:f4:11: 6a:7a:21:2b:c2:99:07:8e:e0:47:29:13:e4:8d:75: 92:73:d9:f3:7a:32:9d:6b:be:b1:48:14:d6:83:e9: 84:cc:cb:c3:df:a9:bc:63:b9:7b:e1:ea:09:dd:99: 1a:13:8a:fa:c4:97:59:4f:a3:8b:eb:c5:8e:46:a2: 21:5c:e9:58:ba:63:46:57:a3:bd:b1:f1:44:35:e1: 5c:7b:57:e9:a9:ae:a9:5e:7d:86:32:e6:48:da:37: c9:89:20:c2:86:0b:29:86:7a:e4:cf:de:4f:0d:11: 0d:e8:79:80:2c:96:48:86:90:62:47:22:1d:2b:4e: 4a:a1:f7:56:47:0d:6a:2e:53:e3:f7:68:5f:88:6d: cf:fe:a9:11:dd:a6:9f:04:6a:3a:36:b8:f9:c1:e9: 1b:99:bd:8a:f0:75:1b:e9:0b:b6:72:84:b3:7c:ee: a9:b5:63:96:af:b9:63:bf:ff:94:be:c7:d1:5c:d0: 16:a0:af:ab:bb:82:f9:1f:5d:5d:cd:21:19:a3:0b: a6:0f:01:47:8f:d8:0c:ff:21:bf:a7:78:20:c3:55: 06:d8:ae:33:ac:b3:08:93:9f:0d:26:13:85:60:d0: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:36:44:48:0D:3D:B1:C4:81:72:58:C4:B5:DD:A6:B7:45:CB:72:27 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1fb46240-1c3f-4b2f-9927-3470c9898890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 7c:84:c0:96:15:c0:ec:ca:c9:81:fc:3e:60:a1:ca:2a:af:8f: d0:f7:e6:2f:76:77:a2:6a:07:6f:08:02:e8:34:ee:7d:d1:5a: 8a:06:80:9f:7f:f5:fd:11:79:ce:90:70:34:e5:9d:d4:ad:67: ba:0f:b6:f4:63:b9:e9:ef:ba:1a:69:ad:e5:f0:0e:35:6a:55: 5a:ff:47:06:54:62:96:f5:ab:1e:85:fc:57:ab:9e:9b:e8:be: ed:98:68:78:dd:8b:67:1b:73:b4:34:09:65:c7:c7:f2:b8:6e: 70:c6:1d:fc:15:87:4e:bc:11:8d:f5:1c:f4:25:5b:c1:08:c6: 56:86:fd:52:ed:a6:2b:36:e0:93:e8:40:ac:30:e3:26:f0:f6: 81:1d:55:df:d0:37:de:9f:34:dc:d3:8c:96:5c:96:fb:71:07: fa:e4:e1:18:bb:dc:30:9a:b1:70:e5:bc:2c:88:69:b7:16:b9: ee:55:b9:e1:58:a5:a3:ee:c3:b8:42:98:28:68:99:57:bd:1f: fd:f6:9f:7b:fa:dd:e1:1e:cb:04:de:b0:af:23:41:98:3a:7c: 59:2d:69:9e:f4:10:eb:d0:26:7f:39:03:0c:1a:90:7f:c5:02: ca:23:bc:c3:60:73:82:4a:f4:e6:3b:ff:c0:fe:50:20:49:0e: 29:f1:0b:fc -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUPx36RgAdicnhUzWYu+iXttEd1tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjEwMDlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDNlNGE4ZjdlMWU0YzBmZGJlMzllNjg2ZTg5ODQ2OTdhZjI0ZWUxOGUxNTc3 NDkyNDRlMzMxMjE0MTE5ZjY4ZDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzAiJyB041GUUDADJd+S/NkvdKjdqDy62WFjfQRanohK8KZB47gRykT5I11 knPZ83oynWu+sUgU1oPphMzLw9+pvGO5e+HqCd2ZGhOK+sSXWU+ji+vFjkaiIVzp WLpjRlejvbHxRDXhXHtX6amuqV59hjLmSNo3yYkgwoYLKYZ65M/eTw0RDeh5gCyW SIaQYkciHStOSqH3VkcNai5T4/doX4htz/6pEd2mnwRqOja4+cHpG5m9ivB1G+kL tnKEs3zuqbVjlq+5Y7//lL7H0VzQFqCvq7uC+R9dXc0hGaMLpg8BR4/YDP8hv6d4 IMNVBtiuM6yzCJOfDSYThWDQ5XkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSlNkRI DT2xxIFyWMS13aa3RctyJzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWZiNDYyNDAtMWMzZi00YjJmLTk5MjctMzQ3MGM5ODk4ODkwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A oDANBgkqhkiG9w0BAQsFAAOCAQEAfITAlhXA7MrJgfw+YKHKKq+P0PfmL3Z3omoH bwgC6DTufdFaigaAn3/1/RF5zpBwNOWd1K1nug+29GO56e+6Gmmt5fAONWpVWv9H BlRilvWrHoX8V6uem+i+7ZhoeN2LZxtztDQJZcfH8rhucMYd/BWHTrwRjfUc9CVb wQjGVob9Uu2mKzbgk+hArDDjJvD2gR1V39A33p803NOMllyW+3EH+uThGLvcMJqx cOW8LIhptxa57lW54Vilo+7DuEKYKGiZV70f/fafe/rd4R7LBN6wryNBmDp8WS1p nvQQ69AmfzkDDBqQf8UCyiO8w2Bzgkr05jv/wP5QIEkOKfEL/A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:38 2025 by rpki-client