This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa File: 21442095-1d11-4516-867c-53ad149e6c07.roa (raw, json) Hash identifier: aeIAW5Na0ZxFyMFWKqsywyphom31GoxkTzTxewumHLo= Subject key identifier: B3:83:E0:53:D9:F6:B9:70:08:AB:7A:B3:4B:AE:0A:20:38:7D:C6:66 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 673070A3D0311C9CF4B001886932FED17163EC8F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa Signing time: Sat 06 Dec 2025 04:00:05 +0000 ROA not before: Sat 06 Dec 2025 04:00:05 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d035:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:30:70:a3:d0:31:1c:9c:f4:b0:01:88:69:32:fe:d1:71:63:ec:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:05 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=b9f7974910609293add09a93db1b84f7d6bb6e93dce6b04db8379da1f446cd78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:06:49:ad:ee:85:e8:f6:4e:cd:29:03:c9: 10:ee:c0:10:73:54:16:e8:10:58:ae:7d:66:3b:29: 18:4d:cf:75:5f:e8:21:d4:bd:c0:d3:1c:b6:08:09: 8a:06:f9:f9:73:b6:5f:c7:c1:56:7c:34:a1:d3:a7: 90:5d:68:33:39:90:cd:df:5b:05:44:19:e8:1f:bc: b0:c1:20:21:03:b2:ff:75:a4:89:d0:4e:4b:fd:27: df:47:0a:40:ba:1d:97:08:da:e3:bf:15:25:b3:77: ac:ef:ed:9e:bf:f7:f0:8c:8b:9a:33:96:16:3d:51: 75:77:4f:27:26:2a:6e:ff:45:71:92:ca:08:bf:85: 6e:0c:63:80:90:55:ad:8c:2c:9a:e9:7f:45:3a:3b: 5e:45:c3:8a:cc:f9:6e:f6:7c:09:16:91:ac:3d:cd: 2f:6b:45:61:14:27:a8:6b:77:04:a4:2a:40:22:8f: 3e:16:cd:f2:cd:99:ff:cb:7c:05:f2:b2:4a:6e:ac: 2b:d6:fe:0c:ca:b6:6d:28:0a:bd:8a:39:2b:ca:ab: 54:49:b3:d5:09:37:cd:c8:75:c5:33:4d:7e:03:aa: 0f:9b:60:11:51:11:bc:b2:ca:4f:a9:c0:b0:ad:61: 37:c2:f0:32:8f:bf:c3:f0:cf:1e:82:1b:6b:5e:f6: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:83:E0:53:D9:F6:B9:70:08:AB:7A:B3:4B:AE:0A:20:38:7D:C6:66 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d035:800::/40 Signature Algorithm: sha256WithRSAEncryption 39:ec:72:9e:39:7e:89:ac:8a:a7:eb:23:61:4f:d0:cb:8a:5c: 08:86:53:0a:6c:d0:a2:14:21:9f:b1:8c:76:4b:17:d0:fd:95: 2a:55:75:2f:7f:7e:66:31:e6:d2:ee:9c:32:ff:20:2d:3c:0b: 46:c1:d4:9b:08:b5:2c:21:53:5d:02:8e:d3:e6:00:1d:36:2a: fa:dd:b1:ce:b2:07:dd:a8:ba:5f:89:f3:de:92:21:b7:18:ea: 1b:47:08:63:ac:32:62:b1:79:a3:c5:12:2e:cb:22:03:db:ea: 00:4c:a2:3c:a5:f0:6a:c2:8f:27:54:86:0f:cf:e0:da:7c:55: c5:a0:ff:61:8d:7d:d1:b6:94:dd:02:fb:30:3a:b2:38:3a:40: 19:3a:03:51:5f:85:76:6f:65:fc:48:c5:2d:ff:28:42:42:24: fc:7d:7a:83:a7:d4:2e:19:b5:1e:eb:d6:d7:25:ce:0f:5b:bf: 32:64:97:65:a0:52:17:78:8f:cc:9c:88:7a:ea:74:18:04:a0: 78:3c:bc:c4:83:25:b5:69:01:0c:eb:f2:51:df:5d:03:7b:14: 23:37:b2:e0:e2:d6:96:99:77:74:a1:86:d5:ed:b6:80:86:fa: 3a:a4:b4:d8:d0:bd:c1:82:7c:aa:91:2e:8d:9d:32:f4:61:7f: 21:ee:a5:db -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZzBwo9AxHJz0sAGIaTL+0XFj7I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMDVaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGI5Zjc5NzQ5MTA2MDkyOTNhZGQwOWE5M2RiMWI4NGY3ZDZiYjZlOTNkY2U2 YjA0ZGI4Mzc5ZGExZjQ0NmNkNzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBoBkmt7oXo9k7NKQPJEO7AEHNUFugQWK59ZjspGE3PdV/oIdS9wNMctggJ igb5+XO2X8fBVnw0odOnkF1oMzmQzd9bBUQZ6B+8sMEgIQOy/3WkidBOS/0n30cK QLodlwja478VJbN3rO/tnr/38IyLmjOWFj1RdXdPJyYqbv9FcZLKCL+FbgxjgJBV rYwsmul/RTo7XkXDisz5bvZ8CRaRrD3NL2tFYRQnqGt3BKQqQCKPPhbN8s2Z/8t8 BfKySm6sK9b+DMq2bSgKvYo5K8qrVEmz1Qk3zch1xTNNfgOqD5tgEVERvLLKT6nA sK1hN8LwMo+/w/DPHoIba172B0cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSzg+BT 2fa5cAirerNLrgogOH3GZjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjE0NDIwOTUtMWQxMS00NTE2LTg2N2MtNTNhZDE0OWU2YzA3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DUI MA0GCSqGSIb3DQEBCwUAA4IBAQA57HKeOX6JrIqn6yNhT9DLilwIhlMKbNCiFCGf sYx2SxfQ/ZUqVXUvf35mMebS7pwy/yAtPAtGwdSbCLUsIVNdAo7T5gAdNir63bHO sgfdqLpfifPekiG3GOobRwhjrDJisXmjxRIuyyID2+oATKI8pfBqwo8nVIYPz+Da fFXFoP9hjX3RtpTdAvswOrI4OkAZOgNRX4V2b2X8SMUt/yhCQiT8fXqDp9QuGbUe 69bXJc4PW78yZJdloFIXeI/MnIh66nQYBKB4PLzEgyW1aQEM6/JR310DexQjN7Lg 4taWmXd0oYbV7baAhvo6pLTY0L3BgnyqkS6NnTL0YX8h7qXb -----END CERTIFICATE-----Generated at Sat Dec 6 22:37:04 2025 by rpki-client