This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa File: 28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa (raw, json) Hash identifier: tOEMkHzXSzyaWVdxUdV3imrzrAEquTv03fnt5Q666v0= Subject key identifier: 41:2C:95:8C:B6:48:D5:14:AB:01:AC:C9:F7:C7:28:19:98:D5:CB:1B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 60C5D6D38F9FA1B985B36DF11A65F7BF40256F61 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa Signing time: Sat 29 Nov 2025 03:10:48 +0000 ROA not before: Sat 29 Nov 2025 03:10:48 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d074:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c5:d6:d3:8f:9f:a1:b9:85:b3:6d:f1:1a:65:f7:bf:40:25:6f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:48 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=0509a324e5d9bdb46d77351c8386b7fe4bd7382a37f49c480ea52839ba0b16a9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1b:d5:a2:da:6f:ed:93:ba:e7:3f:4a:8d:67: 4a:52:7c:0d:1c:ef:67:30:92:86:1f:aa:2c:47:59: 09:e0:08:5a:68:f6:98:c0:12:c8:62:a6:e6:4c:a2: 1a:22:37:03:8b:03:62:8d:0e:1f:81:07:c7:f2:b0: 79:26:12:52:cd:e3:4e:36:38:d5:54:aa:7f:0e:80: e9:10:47:83:f6:da:d2:ed:97:53:04:f2:d2:50:97: 29:4d:77:45:ce:00:d9:44:6e:35:1a:47:90:6d:7a: 18:52:09:29:58:07:8b:3d:58:b0:5f:4f:75:ef:4d: 8e:a9:13:6e:3a:f1:82:f3:79:45:f7:ae:04:cd:6f: 70:02:eb:96:2e:5c:a1:b6:de:f7:cb:99:c8:26:46: 88:89:17:d9:00:7e:9c:57:af:a1:8c:2b:41:ce:96: 36:a4:99:d7:fb:a7:af:74:09:27:d8:ea:b3:ac:ec: b2:75:f4:cc:c3:86:7a:0f:51:c2:29:01:ac:d8:b9: 0a:73:16:0e:88:49:9e:c9:90:61:27:3d:ca:0f:b7: 3a:44:d7:e2:ec:81:95:c0:b0:96:ff:55:e4:1a:66: 7a:f2:d6:f0:48:07:8d:2e:27:87:d1:58:5e:32:65: 2a:18:c9:88:df:64:91:8f:2e:3c:c6:09:af:43:94: 8d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2C:95:8C:B6:48:D5:14:AB:01:AC:C9:F7:C7:28:19:98:D5:CB:1B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d074:1000::/40 Signature Algorithm: sha256WithRSAEncryption 0f:a4:4d:5d:1a:1e:a3:53:2b:6a:8b:19:25:82:10:7b:b6:97: da:9b:42:f2:7b:fe:79:7a:20:33:3b:54:a8:09:31:2f:86:54: a9:0d:65:45:53:50:de:7f:9a:89:91:32:36:35:db:ba:7a:c2: 9b:72:9e:c4:c9:e1:c7:d6:a8:d5:29:4e:09:e8:ca:86:c3:f1: 63:11:50:f9:f1:e5:28:87:74:33:ab:69:5c:9f:17:ee:d7:98: 12:84:7a:08:41:bf:86:79:a3:1e:97:bc:5e:5f:fc:7b:e2:34: 9a:e1:f5:34:90:32:f9:85:64:4f:86:88:e8:18:b3:0b:e9:67: da:e5:92:ff:80:5c:4a:52:a9:9d:70:8e:18:ac:4f:92:7f:30: 0a:bd:a5:b2:9b:9a:c5:6f:4a:52:60:89:01:76:f6:86:69:b1: fe:0c:0c:d4:df:9b:1c:c3:34:aa:77:c5:d8:55:59:c6:d5:99: 2f:c5:31:90:8e:6c:9b:b5:1c:2c:ca:c3:ef:dd:16:4e:16:0c: 4d:51:c8:c3:c1:c7:ed:25:28:d1:c1:0f:18:45:e6:19:71:e6: 5c:97:d8:b5:00:8e:94:1a:43:37:04:57:77:6f:38:30:2c:3e: db:8f:e5:dc:10:e1:c0:6b:f3:4b:0a:cf:4b:b1:7f:86:81:c9: d0:40:34:95 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUYMXW04+fobmFs23xGmX3v0Alb2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwNDhaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDA1MDlhMzI0ZTVkOWJkYjQ2ZDc3MzUxYzgzODZiN2ZlNGJkNzM4MmEzN2Y0 OWM0ODBlYTUyODM5YmEwYjE2YTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQb1aLab+2Tuuc/So1nSlJ8DRzvZzCShh+qLEdZCeAIWmj2mMASyGKm5kyi GiI3A4sDYo0OH4EHx/KweSYSUs3jTjY41VSqfw6A6RBHg/ba0u2XUwTy0lCXKU13 Rc4A2URuNRpHkG16GFIJKVgHiz1YsF9Pde9NjqkTbjrxgvN5RfeuBM1vcALrli5c obbe98uZyCZGiIkX2QB+nFevoYwrQc6WNqSZ1/unr3QJJ9jqs6zssnX0zMOGeg9R wikBrNi5CnMWDohJnsmQYSc9yg+3OkTX4uyBlcCwlv9V5BpmevLW8EgHjS4nh9FY XjJlKhjJiN9kkY8uPMYJr0OUjQsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRBLJWM tkjVFKsBrMn3xygZmNXLGzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Mjg4NDBmZGItZmJjOS00YjUxLWIwOWItYmMwOGQ2MzQyZWE3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HQQ MA0GCSqGSIb3DQEBCwUAA4IBAQAPpE1dGh6jUytqixklghB7tpfam0Lye/55eiAz O1SoCTEvhlSpDWVFU1Def5qJkTI2Ndu6esKbcp7EyeHH1qjVKU4J6MqGw/FjEVD5 8eUoh3Qzq2lcnxfu15gShHoIQb+GeaMel7xeX/x74jSa4fU0kDL5hWRPhojoGLML 6Wfa5ZL/gFxKUqmdcI4YrE+SfzAKvaWym5rFb0pSYIkBdvaGabH+DAzU35scwzSq d8XYVVnG1ZkvxTGQjmybtRwsysPv3RZOFgxNUcjDwcftJSjRwQ8YReYZceZcl9i1 AI6UGkM3BFd3bzgwLD7bj+XcEOHAa/NLCs9LsX+GgcnQQDSV -----END CERTIFICATE-----Generated at Sat Dec 6 19:46:01 2025 by rpki-client