This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa File: 24b496aa-161c-4d5d-a9ca-3ba09772390a.roa (raw, json) Hash identifier: Pr12ekHvP/KmgfAeBx2A4uZWTpCgTOFwkOGi4vA5+Fo= Subject key identifier: 69:80:52:02:64:B8:6F:13:86:ED:47:6A:40:AF:7C:B6:21:77:0C:52 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 213469A7F31AF009C389265E857C3DECB2899B14 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa Signing time: Sat 15 Nov 2025 06:30:17 +0000 ROA not before: Sat 15 Nov 2025 06:30:17 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:34:69:a7:f3:1a:f0:09:c3:89:26:5e:85:7c:3d:ec:b2:89:9b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:17 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=60ed1b8f0abdd44608f2c927f87c3d68f7e175e9846c73e2e2535326563bc038, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:5d:11:6d:19:e4:e0:41:22:93:9f:0d:47: 54:a1:f8:dd:27:e7:e9:7c:a0:80:c0:52:0d:21:95: 0c:4a:fe:cd:51:58:4f:6e:86:3c:15:99:7a:ec:d0: bb:10:a0:23:f4:c7:2e:c3:b1:2c:fe:54:1a:9a:76: 9a:13:0c:c4:0d:07:2f:ff:78:b8:b8:74:d6:56:78: fc:3e:f8:73:3d:36:bc:2d:a8:1f:d6:aa:dd:6b:e0: 64:5c:c6:a1:8c:cf:66:8b:2f:59:01:c2:81:e0:dd: 20:ae:ab:26:f5:37:f7:32:5f:df:38:3c:7e:fe:6e: bd:10:45:66:7d:d3:2f:e1:11:84:78:f3:34:eb:04: e4:99:5e:63:b9:72:37:69:53:38:c0:27:e9:83:cc: 83:9d:92:ea:84:a2:91:a9:f0:65:a4:09:41:68:c0: 92:5c:87:3d:18:7d:42:8f:27:a0:dc:eb:fa:fe:da: be:6d:0f:9f:93:95:6f:78:98:83:69:7e:20:bf:df: 12:cc:17:bf:b2:96:0f:59:00:a7:62:59:99:71:7f: 4b:c9:cf:e4:34:51:3e:0f:15:95:e2:e2:75:dc:16: 39:41:f3:8f:a7:8a:c1:b6:55:be:de:da:af:26:30: 04:09:36:1f:b8:45:81:fc:cc:26:8b:44:69:af:e1: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:80:52:02:64:B8:6F:13:86:ED:47:6A:40:AF:7C:B6:21:77:0C:52 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036:6000::/40 Signature Algorithm: sha256WithRSAEncryption 67:63:51:43:58:cc:36:a5:18:b9:e9:89:da:8b:50:c2:5e:09: ca:6f:b9:dc:21:b3:33:1e:b9:02:8c:83:ef:9a:1d:e4:23:6c: 9f:79:a5:1d:54:7e:51:7b:30:11:a2:13:64:00:09:d4:4b:b5: 30:00:19:92:60:1e:28:16:f0:46:52:23:96:96:8e:66:01:af: eb:37:c2:a1:a4:97:b5:14:22:00:16:9e:0c:6c:06:72:3c:bb: 0a:44:df:fe:02:b6:11:ff:f0:5d:fa:c9:a2:16:0e:06:8c:e1: 7c:35:a3:6b:76:42:ef:83:36:d0:01:37:ef:75:01:2d:93:84: 7e:5d:99:03:be:03:2d:40:7c:1a:0e:55:11:7b:e3:8e:4f:e9: fb:1b:d2:b1:57:a2:85:5d:07:ee:9e:c1:1c:f0:d9:83:2c:c1: ca:c0:b1:cf:e4:1b:3f:26:8f:3d:2c:09:70:c0:e7:13:80:50: 84:d1:27:34:1f:ba:19:34:84:bf:48:e4:be:88:03:f7:b9:bc: eb:b6:7d:aa:1b:fb:0f:51:c2:c3:0b:3d:a6:c8:6c:cc:a3:b6: 1b:fb:aa:e1:27:4f:38:6c:ac:69:c6:a0:0a:dc:60:af:3a:6b: f6:f0:9a:32:fd:e8:c9:fb:6b:81:f7:67:4d:56:f9:b9:3f:74: c6:2e:8d:d8 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUITRpp/Ma8AnDiSZehXw97LKJmxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwMTdaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDYwZWQxYjhmMGFiZGQ0NDYwOGYyYzkyN2Y4N2MzZDY4ZjdlMTc1ZTk4NDZj NzNlMmUyNTM1MzI2NTYzYmMwMzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALchXRFtGeTgQSKTnw1HVKH43Sfn6XyggMBSDSGVDEr+zVFYT26GPBWZeuzQ uxCgI/THLsOxLP5UGpp2mhMMxA0HL/94uLh01lZ4/D74cz02vC2oH9aq3WvgZFzG oYzPZosvWQHCgeDdIK6rJvU39zJf3zg8fv5uvRBFZn3TL+ERhHjzNOsE5JleY7ly N2lTOMAn6YPMg52S6oSikanwZaQJQWjAklyHPRh9Qo8noNzr+v7avm0Pn5OVb3iY g2l+IL/fEswXv7KWD1kAp2JZmXF/S8nP5DRRPg8VleLiddwWOUHzj6eKwbZVvt7a ryYwBAk2H7hFgfzMJotEaa/h0FMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRpgFIC ZLhvE4btR2pAr3y2IXcMUjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjRiNDk2YWEtMTYxYy00ZDVkLWE5Y2EtM2JhMDk3NzIzOTBhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DZg MA0GCSqGSIb3DQEBCwUAA4IBAQBnY1FDWMw2pRi56Ynai1DCXgnKb7ncIbMzHrkC jIPvmh3kI2yfeaUdVH5RezARohNkAAnUS7UwABmSYB4oFvBGUiOWlo5mAa/rN8Kh pJe1FCIAFp4MbAZyPLsKRN/+ArYR//Bd+smiFg4GjOF8NaNrdkLvgzbQATfvdQEt k4R+XZkDvgMtQHwaDlURe+OOT+n7G9KxV6KFXQfunsEc8NmDLMHKwLHP5Bs/Jo89 LAlwwOcTgFCE0Sc0H7oZNIS/SOS+iAP3ubzrtn2qG/sPUcLDCz2myGzMo7Yb+6rh J084bKxpxqAK3GCvOmv28Joy/ejJ+2uB92dNVvm5P3TGLo3Y -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:33 2025 by rpki-client