This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa File: 2678e5d7-5995-4791-9318-f087e83654a9.roa (raw, json) Hash identifier: hbJCsryZlaI6XSrotwapX0tpePhRjEtzEXo1m46FEHc= Subject key identifier: 5B:21:5E:00:43:21:A2:44:CB:9B:60:79:8D:0A:12:3F:6F:E4:62:FF Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 361682004F0E26B4D1D841E21EDD719C22FAB8F9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa Signing time: Wed 12 Nov 2025 03:00:09 +0000 ROA not before: Wed 12 Nov 2025 03:00:09 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:16:82:00:4f:0e:26:b4:d1:d8:41:e2:1e:dd:71:9c:22:fa:b8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 12 03:00:09 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=eb31a15c5ad78bfb81621923f63ebfdea441489ab95e50e13475a55c869d0b31, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:ed:c1:e2:d9:d9:c3:c4:e7:cf:50:04:9d: cd:e7:15:db:3a:58:12:c1:63:ea:24:c3:0e:ba:1d: 8c:3f:bd:ad:4f:b1:7d:1c:44:71:55:b0:ac:41:e0: dc:14:a3:fb:be:ba:9b:b8:4b:1c:5d:64:5f:e6:74: 15:09:55:e0:45:90:6d:19:48:7b:71:b1:8e:d0:dc: 39:9a:fb:cc:71:8a:0f:3f:87:0b:c8:9f:33:e7:b7: b7:1e:d4:b5:3f:ac:e4:2e:ad:f2:a2:5f:f4:ff:11: ff:33:06:56:b9:50:38:d4:e5:51:d4:36:f0:1b:f8: bc:dd:6b:69:6d:62:e0:b7:db:3b:10:2f:a0:32:c0: a2:d2:5c:d5:b7:7c:cd:03:3e:f5:ba:fd:b3:79:1b: 88:9f:e7:cd:d0:c6:bc:6f:fb:be:a7:ce:c6:e7:0b: 6c:62:77:53:ae:4f:c9:16:5b:4d:e8:0d:a1:ca:db: bb:8c:55:32:ed:86:d3:ac:93:42:45:1d:3a:85:67: ea:60:a6:16:f9:7d:d5:b2:e9:e3:33:da:63:57:c1: 53:2c:6d:e2:ba:76:a6:72:ae:a2:8a:77:14:cb:ad: 43:99:4c:41:fa:37:85:ad:b5:bd:db:ab:14:6c:af: 51:e2:66:7a:90:d8:62:2c:52:07:19:c0:60:6d:86: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:5E:00:43:21:A2:44:CB:9B:60:79:8D:0A:12:3F:6F:E4:62:FF X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:e000::/48 Signature Algorithm: sha256WithRSAEncryption c9:b9:a0:69:01:11:59:13:ad:dd:e6:9d:5e:80:0f:62:b9:48: 8e:8d:f3:25:6b:67:7f:34:bc:d4:c3:7e:1d:d2:54:be:78:e6: 2c:33:ce:36:1f:ec:a7:9e:2f:5c:53:3d:f3:8e:25:2c:59:41: 01:52:66:65:7b:aa:78:df:cf:08:28:d1:bf:7a:dd:c5:e6:f4: 24:e1:6e:8b:c1:b8:0e:22:29:e5:4a:63:61:f0:3b:c1:3d:65: 2d:a2:65:3d:19:38:05:3a:75:e7:ce:4b:d5:7c:9c:5d:ea:12: 74:1f:9e:aa:52:25:f6:c9:4b:75:ab:0b:13:6a:fe:6c:7c:0d: 83:9d:47:00:77:0e:1a:dc:8f:21:ba:1c:9f:a5:3d:94:54:5e: 1a:7a:2f:68:ae:86:9e:f9:09:55:9f:4d:d9:df:22:fd:de:17: 92:dd:3e:58:8e:b2:7a:0d:89:cb:89:25:09:c0:f8:01:17:c2: 37:54:bd:94:2e:4a:4c:08:b2:b9:74:07:5e:be:d2:76:56:87: c2:3c:26:75:22:e2:e8:9c:89:45:65:66:72:4f:cc:0f:19:d9: 12:1a:b5:19:b4:e2:40:c6:e1:67:bd:b3:83:dd:c9:eb:60:b2: b1:6f:61:61:7e:e3:a9:6a:70:89:03:2b:eb:5c:e2:d3:5e:5e: d3:1f:a2:22 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUNhaCAE8OJrTR2EHiHt1xnCL6uPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTIwMzAwMDlaFw0yNTEyMTcyMzU5NTlaMHoxSTBHBgNV BAUTQGViMzFhMTVjNWFkNzhiZmI4MTYyMTkyM2Y2M2ViZmRlYTQ0MTQ4OWFiOTVl NTBlMTM0NzVhNTVjODY5ZDBiMzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZp7cHi2dnDxOfPUASdzecV2zpYEsFj6iTDDrodjD+9rU+xfRxEcVWwrEHg 3BSj+766m7hLHF1kX+Z0FQlV4EWQbRlIe3GxjtDcOZr7zHGKDz+HC8ifM+e3tx7U tT+s5C6t8qJf9P8R/zMGVrlQONTlUdQ28Bv4vN1raW1i4LfbOxAvoDLAotJc1bd8 zQM+9br9s3kbiJ/nzdDGvG/7vqfOxucLbGJ3U65PyRZbTegNocrbu4xVMu2G06yT QkUdOoVn6mCmFvl91bLp4zPaY1fBUyxt4rp2pnKuoop3FMutQ5lMQfo3ha21vdur FGyvUeJmepDYYixSBxnAYG2G6H0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRbIV4A QyGiRMubYHmNChI/b+Ri/zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjY3OGU1ZDctNTk5NS00NzkxLTkzMTgtZjA4N2U4MzY1NGE5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Hbg ADANBgkqhkiG9w0BAQsFAAOCAQEAybmgaQERWROt3eadXoAPYrlIjo3zJWtnfzS8 1MN+HdJUvnjmLDPONh/sp54vXFM9844lLFlBAVJmZXuqeN/PCCjRv3rdxeb0JOFu i8G4DiIp5UpjYfA7wT1lLaJlPRk4BTp1585L1XycXeoSdB+eqlIl9slLdasLE2r+ bHwNg51HAHcOGtyPIbocn6U9lFReGnovaK6GnvkJVZ9N2d8i/d4Xkt0+WI6yeg2J y4klCcD4ARfCN1S9lC5KTAiyuXQHXr7SdlaHwjwmdSLi6JyJRWVmck/MDxnZEhq1 GbTiQMbhZ72zg93J62CysW9hYX7jqWpwiQMr61zi015e0x+iIg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:45 2025 by rpki-client