This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa File: 2636a453-2dd9-4fde-9f15-753f76341841.roa (raw, json) Hash identifier: Ivfh8536catKjKT7sYEabHOFJG/15u47eCOyVHcKKIE= Subject key identifier: 88:5F:17:3C:47:BF:30:FE:33:87:C0:0B:17:E5:EB:BA:A5:9D:B6:D3 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4F3A28063BC16145168E9E7065EA2131C3209893 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa Signing time: Sat 29 Nov 2025 03:10:41 +0000 ROA not before: Sat 29 Nov 2025 03:10:41 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d074:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3a:28:06:3b:c1:61:45:16:8e:9e:70:65:ea:21:31:c3:20:98:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:41 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=200fbc431308a65306e786d9b43d36fc57a496a47370925112160a80ea597a00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:90:b0:da:ec:e3:8a:71:71:8b:86:1b:e1:63: e0:5a:ee:7d:ec:ac:30:58:60:fb:f4:57:e1:50:bf: d7:3c:34:08:4f:00:cb:0e:cb:3f:e5:8e:6e:ca:51: 53:27:07:02:63:e2:a0:eb:ca:11:70:05:b9:c7:46: 6c:7b:26:04:e0:58:3a:3d:3c:3c:78:17:27:e2:2a: f0:d0:50:78:14:d6:59:63:5e:6d:37:d9:09:99:bc: a5:4e:8e:5d:17:b9:b1:9e:50:3a:92:eb:8d:40:05: 62:1c:88:e2:48:1a:0f:f0:33:84:c0:09:be:7b:ec: 40:a8:a2:1b:f3:c4:b5:f6:3b:f9:15:f1:c2:3d:9c: 74:6d:95:0e:14:42:a7:c3:6a:b5:5e:78:84:1f:6c: ba:4e:4e:a8:b6:3d:fd:58:b0:11:77:12:40:a7:14: b6:66:83:1c:b5:9a:27:0c:bd:a5:4a:b8:2a:c6:bb: e7:e0:d3:41:50:3f:01:dd:01:61:cd:1e:63:52:51: d6:08:1d:b1:bf:ef:02:10:51:03:06:2a:97:1b:e9: eb:1a:62:45:a5:88:38:4a:55:fe:e2:6d:a7:a6:83: ca:b2:9c:94:44:a9:1e:97:8f:f2:ab:b6:ea:85:72: ab:e8:91:b4:a8:fd:55:d6:d7:7c:68:ce:81:13:e7: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5F:17:3C:47:BF:30:FE:33:87:C0:0B:17:E5:EB:BA:A5:9D:B6:D3 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2636a453-2dd9-4fde-9f15-753f76341841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d074:a000::/40 Signature Algorithm: sha256WithRSAEncryption 38:06:88:9c:54:14:02:ac:50:58:73:33:a1:96:61:38:11:e4: e5:7d:9f:25:de:7c:78:cf:00:7e:d0:5e:e0:f4:a0:67:ef:16: d2:cd:54:f6:f2:a7:a2:4b:71:0c:08:4c:8f:eb:23:72:d0:bb: ee:15:37:3c:22:6f:64:e3:0d:d6:73:a5:21:49:27:ee:27:6d: 98:00:98:7c:37:06:64:f7:98:89:8b:e8:62:f1:92:4a:95:a0: 79:af:02:53:65:71:df:ff:2c:f5:3b:2c:1c:f4:35:21:18:1a: 9d:53:ef:26:83:01:3b:83:73:d3:45:9e:aa:9d:23:16:fb:fb: e0:41:5c:c7:27:68:0d:2f:a1:1b:06:94:4d:0a:fd:d5:ec:f9: c2:06:c8:ee:c9:4f:4b:90:a5:88:90:3a:9e:0d:d5:95:5a:3a: 92:87:41:2a:bf:8a:98:d1:bc:12:aa:e7:e8:b5:7d:e4:76:02: b7:ff:42:de:ed:ec:b4:68:11:11:55:f7:ca:ed:25:56:7f:7e: 5b:ad:9d:e2:0c:09:f9:14:48:34:d8:bc:b9:b1:9d:da:3b:1a: d4:8c:15:69:ae:f1:31:8f:c6:b1:e5:6b:cf:20:19:09:cb:3a: d7:2a:da:30:ee:dc:98:43:4f:be:b2:0d:e5:6f:97:60:8d:1b: 36:a5:da:5f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUTzooBjvBYUUWjp5wZeohMcMgmJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwNDFaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDIwMGZiYzQzMTMwOGE2NTMwNmU3ODZkOWI0M2QzNmZjNTdhNDk2YTQ3Mzcw OTI1MTEyMTYwYTgwZWE1OTdhMDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPCQsNrs44pxcYuGG+Fj4FrufeysMFhg+/RX4VC/1zw0CE8Ayw7LP+WObspR UycHAmPioOvKEXAFucdGbHsmBOBYOj08PHgXJ+Iq8NBQeBTWWWNebTfZCZm8pU6O XRe5sZ5QOpLrjUAFYhyI4kgaD/AzhMAJvnvsQKiiG/PEtfY7+RXxwj2cdG2VDhRC p8NqtV54hB9suk5OqLY9/ViwEXcSQKcUtmaDHLWaJwy9pUq4Ksa75+DTQVA/Ad0B Yc0eY1JR1ggdsb/vAhBRAwYqlxvp6xpiRaWIOEpV/uJtp6aDyrKclESpHpeP8qu2 6oVyq+iRtKj9VdbXfGjOgRPn0KECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSIXxc8 R78w/jOHwAsX5eu6pZ220zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjYzNmE0NTMtMmRkOS00ZmRlLTlmMTUtNzUzZjc2MzQxODQxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HSg MA0GCSqGSIb3DQEBCwUAA4IBAQA4BoicVBQCrFBYczOhlmE4EeTlfZ8l3nx4zwB+ 0F7g9KBn7xbSzVT28qeiS3EMCEyP6yNy0LvuFTc8Im9k4w3Wc6UhSSfuJ22YAJh8 NwZk95iJi+hi8ZJKlaB5rwJTZXHf/yz1Oywc9DUhGBqdU+8mgwE7g3PTRZ6qnSMW +/vgQVzHJ2gNL6EbBpRNCv3V7PnCBsjuyU9LkKWIkDqeDdWVWjqSh0Eqv4qY0bwS qufotX3kdgK3/0Le7ey0aBERVffK7SVWf35brZ3iDAn5FEg02Ly5sZ3aOxrUjBVp rvExj8ax5WvPIBkJyzrXKtow7tyYQ0++sg3lb5dgjRs2pdpf -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:05 2025 by rpki-client