This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa File: 25b2b0c2-5313-4108-9379-3a551ea46c87.roa (raw, json) Hash identifier: djLrfSX8JRe7mp+UJVCec/hibtq6u4vfk/+IFOIHI4Y= Subject key identifier: FC:1E:EB:CE:3B:89:B2:DB:E9:B0:F9:1E:49:BE:5C:CD:BE:30:51:40 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7E3368AD7CB3B0A1F759183201DEDA758BB23DE3 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa Signing time: Sat 29 Nov 2025 03:10:41 +0000 ROA not before: Sat 29 Nov 2025 03:10:41 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d059:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:33:68:ad:7c:b3:b0:a1:f7:59:18:32:01:de:da:75:8b:b2:3d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:41 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=28c7eabf55116a59c483d918f6af0ba7ad9068c1a3dac13e50b1817608a5c993, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:30:a0:2c:44:1e:71:9a:7a:de:ff:64:4c: 5f:5a:23:61:98:f8:bb:98:a4:8b:65:20:6b:75:1a: bf:be:16:86:bb:02:9e:02:32:bb:d3:c3:3c:3f:52: 56:43:55:96:04:9f:a2:9b:76:dc:15:b6:a7:57:be: cb:97:31:17:49:72:23:33:ca:a0:f1:d5:20:bd:0b: cd:13:78:2a:d8:bc:8c:2b:07:6b:a7:b6:45:d5:e0: 81:a9:58:25:1a:e4:19:dd:a2:49:77:c4:fe:20:a8: 4d:5f:3b:a0:76:3d:54:c6:15:e0:f4:61:ba:fe:ba: 25:97:90:ad:a9:4e:19:4d:6a:b1:33:23:94:b8:58: 7d:26:7c:2b:c6:24:09:79:eb:2e:d4:33:79:86:2c: 10:cd:e6:10:1c:d7:fd:39:dd:e4:20:48:a6:24:02: eb:d3:26:6d:1a:42:a6:1d:51:86:9d:87:f7:84:88: 37:9d:c7:79:ce:16:57:08:c8:6c:3b:a2:0f:d2:28: b5:32:ed:a0:77:bc:be:a9:88:8c:5a:b2:72:c0:79: 98:fc:1a:20:2e:88:f1:77:b9:ff:20:74:9b:9a:bb: ce:c6:72:07:2f:ee:c6:f9:d2:dc:90:14:eb:c1:a2: 6e:df:84:03:58:da:2e:21:a7:10:86:98:2a:7a:6d: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1E:EB:CE:3B:89:B2:DB:E9:B0:F9:1E:49:BE:5C:CD:BE:30:51:40 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d059:c000::/40 Signature Algorithm: sha256WithRSAEncryption 82:41:f0:4f:63:26:84:39:97:44:44:3a:0e:6d:0a:1a:73:bc: 78:ff:48:0d:7d:70:a8:16:bc:a1:24:4e:25:26:34:71:94:15: 6e:66:ed:4c:a5:f7:d8:0e:9f:58:48:61:c5:1c:b1:80:bf:d9: fd:03:d6:d0:a1:43:7c:77:cb:ff:e7:58:fa:84:6f:bc:3e:fe: 3e:7a:f5:7b:ad:86:98:8a:a2:0b:8b:bc:ce:5b:8f:97:3e:f3: 77:3d:09:c3:cb:9d:a7:cf:dc:84:68:10:8e:61:47:ba:2e:9e: a4:b2:df:64:99:b4:c7:67:ed:88:96:c7:b5:2a:39:be:63:e7: 36:a9:9e:49:41:9c:e5:7e:d7:35:12:7b:07:7e:88:73:16:d8: 6d:14:e1:32:ee:28:ef:0a:fa:e1:f3:b8:44:e2:66:33:6c:5c: 9d:d9:27:6b:b6:c6:c5:a5:da:e7:56:d2:eb:15:8a:8d:5c:24: e0:03:d0:7b:ee:91:fd:e5:9b:be:ff:4a:dc:63:e8:d6:c6:0c: 0a:94:32:b0:dc:43:b1:c7:f6:af:76:4a:cb:76:f5:c8:c3:f0: 20:d4:b6:ec:3a:8e:c0:df:e2:d2:52:1a:1a:7b:7b:d3:42:fe: 01:6a:f4:40:53:cf:77:b4:a6:6c:58:5b:02:df:56:68:3c:29: 6a:4b:77:26 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUfjNorXyzsKH3WRgyAd7adYuyPeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwNDFaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDI4YzdlYWJmNTUxMTZhNTljNDgzZDkxOGY2YWYwYmE3YWQ5MDY4YzFhM2Rh YzEzZTUwYjE4MTc2MDhhNWM5OTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfYMKAsRB5xmnre/2RMX1ojYZj4u5iki2Uga3Uav74WhrsCngIyu9PDPD9S VkNVlgSfopt23BW2p1e+y5cxF0lyIzPKoPHVIL0LzRN4Kti8jCsHa6e2RdXggalY JRrkGd2iSXfE/iCoTV87oHY9VMYV4PRhuv66JZeQralOGU1qsTMjlLhYfSZ8K8Yk CXnrLtQzeYYsEM3mEBzX/Tnd5CBIpiQC69MmbRpCph1Rhp2H94SIN53Hec4WVwjI bDuiD9IotTLtoHe8vqmIjFqycsB5mPwaIC6I8Xe5/yB0m5q7zsZyBy/uxvnS3JAU 68Gibt+EA1jaLiGnEIaYKnpt7JkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT8HuvO O4my2+mw+R5JvlzNvjBRQDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjViMmIwYzItNTMxMy00MTA4LTkzNzktM2E1NTFlYTQ2Yzg3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FnA MA0GCSqGSIb3DQEBCwUAA4IBAQCCQfBPYyaEOZdERDoObQoac7x4/0gNfXCoFryh JE4lJjRxlBVuZu1MpffYDp9YSGHFHLGAv9n9A9bQoUN8d8v/51j6hG+8Pv4+evV7 rYaYiqILi7zOW4+XPvN3PQnDy52nz9yEaBCOYUe6Lp6kst9kmbTHZ+2Ilse1Kjm+ Y+c2qZ5JQZzlftc1EnsHfohzFthtFOEy7ijvCvrh87hE4mYzbFyd2SdrtsbFpdrn VtLrFYqNXCTgA9B77pH95Zu+/0rcY+jWxgwKlDKw3EOxx/avdkrLdvXIw/Ag1Lbs Oo7A3+LSUhoae3vTQv4BavRAU893tKZsWFsC31ZoPClqS3cm -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:30 2025 by rpki-client