This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa File: 28181159-5695-4944-b901-f84b836b4d8f.roa (raw, json) Hash identifier: JQeQ7gLphlA4/mjpck8rBiHIr21o759OTyuxXzJvRxI= Subject key identifier: 0A:72:1A:A5:F4:C4:F0:A4:5C:DD:D2:EA:5A:F5:C1:20:36:F0:C6:1D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 458F9BA0B2E126B6BB8E8947BC1529B55908B864 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa Signing time: Wed 12 Nov 2025 03:00:08 +0000 ROA not before: Wed 12 Nov 2025 03:00:08 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8f:9b:a0:b2:e1:26:b6:bb:8e:89:47:bc:15:29:b5:59:08:b8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 12 03:00:08 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=7e3f51b734fcfab6b829e739012fc77c6c65deab3edb85ee9816d880e249168e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:d1:3d:32:f6:0d:08:b8:30:c5:0a:78:8e: 97:e0:b0:3a:1d:fc:17:70:10:89:4a:0d:73:2b:56: e2:c6:8e:f0:6b:c8:e0:1a:35:c5:ae:71:70:52:2a: aa:4a:fc:fe:16:33:fd:eb:85:9e:a6:9a:42:0e:db: 1b:f0:65:fa:b0:0a:c1:bc:70:17:ed:82:2c:9a:4a: ab:f1:a8:ed:a6:db:91:dd:04:e2:5c:2c:29:00:f7: d9:3f:66:c9:f5:9a:66:6b:41:0d:be:1d:1e:62:c2: d5:d5:e6:6b:27:e5:6d:c0:4b:31:c9:47:48:5f:17: 2d:e0:28:d5:cf:3c:01:cd:8a:24:ac:a6:f9:7f:0e: 82:37:06:2c:73:08:85:8f:66:bb:f0:d2:92:31:b4: 2a:3a:96:60:0d:ae:d7:b3:4d:25:30:fb:23:b3:95: 35:27:33:12:66:9d:e5:08:59:b8:22:1b:0a:02:98: 8d:d7:5c:ef:74:73:b0:21:ab:25:3c:86:69:3e:af: d6:9e:c5:cd:ae:ce:4f:7e:25:4a:ab:80:92:99:04: ec:f0:2d:f6:24:66:e0:f9:7c:55:4c:e7:0d:77:f7: 1c:e7:07:62:16:a1:4d:14:bc:7f:8b:b3:a5:51:e9: 2f:15:0d:32:10:f9:88:1e:28:b2:9f:b7:41:fe:7e: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:72:1A:A5:F4:C4:F0:A4:5C:DD:D2:EA:5A:F5:C1:20:36:F0:C6:1D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:9000::/40 Signature Algorithm: sha256WithRSAEncryption 65:df:6c:96:1a:77:28:3d:e0:91:04:0d:5b:08:0e:b7:81:17: 4f:7c:0f:58:b5:00:79:b4:ed:84:1b:84:a1:ce:c4:70:1c:ed: fd:8f:40:c5:2f:41:b9:fc:b2:2c:3e:97:28:0d:bd:05:89:b4: 50:b2:c5:42:5a:a8:e1:80:d8:ed:b8:1b:91:61:71:e1:e6:59: b0:7e:cb:b1:cc:dd:71:a6:08:da:fb:44:ed:a6:e9:cc:62:8c: ba:c6:b6:7c:25:0a:95:9f:be:a6:eb:09:8c:cd:7d:32:83:fe: 35:4e:4d:b1:77:62:52:f7:1a:56:2a:da:4e:52:f0:64:ab:cf: de:1e:21:bd:ab:f4:01:b0:2b:25:34:c9:da:ce:d1:d3:ad:81: e9:f3:14:c4:dd:95:60:30:6f:c4:37:c7:5c:6b:76:1a:89:72: 7d:34:99:96:50:d5:71:74:f1:a1:c3:88:f1:2d:dd:b2:21:52: 7a:9e:0e:e5:0e:bb:4b:95:63:83:e0:9d:cc:04:5f:0b:86:c8: 84:b1:7e:b7:da:e3:b3:d6:a6:84:ae:83:a0:10:db:5e:d4:2e: 84:1f:b3:79:7e:88:af:bc:81:f8:fa:8b:ae:23:f8:f3:e7:ad: b6:c4:7f:3d:44:af:c4:07:8a:aa:b9:99:af:ca:73:57:46:bd: f1:fb:6f:79 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIURY+boLLhJra7jolHvBUptVkIuGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTIwMzAwMDhaFw0yNTEyMTcyMzU5NTlaMHoxSTBHBgNV BAUTQDdlM2Y1MWI3MzRmY2ZhYjZiODI5ZTczOTAxMmZjNzdjNmM2NWRlYWIzZWRi ODVlZTk4MTZkODgwZTI0OTE2OGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRw0T0y9g0IuDDFCniOl+CwOh38F3AQiUoNcytW4saO8GvI4Bo1xa5xcFIq qkr8/hYz/euFnqaaQg7bG/Bl+rAKwbxwF+2CLJpKq/Go7abbkd0E4lwsKQD32T9m yfWaZmtBDb4dHmLC1dXmayflbcBLMclHSF8XLeAo1c88Ac2KJKym+X8OgjcGLHMI hY9mu/DSkjG0KjqWYA2u17NNJTD7I7OVNSczEmad5QhZuCIbCgKYjddc73RzsCGr JTyGaT6v1p7Fza7OT34lSquAkpkE7PAt9iRm4Pl8VUznDXf3HOcHYhahTRS8f4uz pVHpLxUNMhD5iB4osp+3Qf5+vY8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQKchql 9MTwpFzd0upa9cEgNvDGHTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjgxODExNTktNTY5NS00OTQ0LWI5MDEtZjg0YjgzNmI0ZDhmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HaQ MA0GCSqGSIb3DQEBCwUAA4IBAQBl32yWGncoPeCRBA1bCA63gRdPfA9YtQB5tO2E G4ShzsRwHO39j0DFL0G5/LIsPpcoDb0FibRQssVCWqjhgNjtuBuRYXHh5lmwfsux zN1xpgja+0TtpunMYoy6xrZ8JQqVn76m6wmMzX0yg/41Tk2xd2JS9xpWKtpOUvBk q8/eHiG9q/QBsCslNMnaztHTrYHp8xTE3ZVgMG/EN8dca3YaiXJ9NJmWUNVxdPGh w4jxLd2yIVJ6ng7lDrtLlWOD4J3MBF8LhsiEsX632uOz1qaEroOgENte1C6EH7N5 foivvIH4+ouuI/jz5622xH89RK/EB4qquZmvynNXRr3x+295 -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:25 2025 by rpki-client