This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa File: 2d9f3120-fab9-43aa-973f-4142925b1416.roa (raw, json) Hash identifier: 5W1wSamuq+hIYxmOJceJ/NhaFl2TWzeudvxVBGf0WCI= Subject key identifier: 85:BD:E5:A8:C4:4B:22:A0:9F:FB:8F:76:82:AB:9D:BB:49:CA:F8:D2 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 65CB25312A43690F0E22F8DB0FAD36D600DE2010 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa Signing time: Sat 15 Nov 2025 06:31:06 +0000 ROA not before: Sat 15 Nov 2025 06:31:06 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:cb:25:31:2a:43:69:0f:0e:22:f8:db:0f:ad:36:d6:00:de:20:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:31:06 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=d16e484d5ed90f6f6a43a8cb518312c68c235a895643a5dd29cdee554f58653a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:af:18:f0:00:84:d4:fb:b3:80:8c:f5:12: 55:35:30:1e:a2:00:c5:2e:25:61:28:bc:5b:55:bd: d1:b8:ea:00:a1:09:ff:d7:c2:a2:7b:f6:04:12:b5: 75:d1:f0:d5:46:cd:dc:2d:fe:dc:65:e1:a5:fe:0d: 0b:50:69:00:48:b0:23:38:68:a1:6b:6e:3e:c4:60: 1b:d9:48:11:af:ba:13:3c:f8:04:ab:2a:18:24:03: 9b:f6:28:87:b9:ae:dc:9e:d8:c4:60:12:0b:9b:7a: 53:37:3e:b9:9e:34:fa:34:8c:08:39:61:5d:1f:7c: 75:4a:23:55:3c:49:f6:e7:a2:c0:f2:f2:28:85:0b: f4:78:4c:91:31:1b:70:eb:71:e4:72:20:41:45:d9: 87:e8:a6:ab:67:4f:a5:8b:2d:66:08:83:1c:7b:cb: 93:22:6d:d9:45:52:92:69:2e:01:97:31:57:63:0b: da:17:3b:4d:86:e4:6f:54:0e:98:e4:24:b3:73:57: ec:81:2c:bd:6d:7f:c3:8e:5b:61:a1:31:ce:e4:ee: bf:b5:bc:36:6f:04:ac:60:8c:4d:f6:bc:5f:c0:d2: 08:fb:4f:cc:3c:58:dd:70:9c:0a:94:fd:67:7e:96: ea:14:6a:23:1f:c2:92:cf:0e:99:ba:44:2f:83:42: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:E5:A8:C4:4B:22:A0:9F:FB:8F:76:82:AB:9D:BB:49:CA:F8:D2 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:10c0::/48 Signature Algorithm: sha256WithRSAEncryption c5:0f:04:d9:64:f1:07:5c:75:6c:8f:ce:b3:0a:ad:31:9f:19: 45:ee:7d:27:5e:8d:86:bb:d4:90:69:f3:1c:98:6f:2a:54:f8: 4c:94:84:df:1b:c1:bc:7d:cb:6e:78:21:be:46:6e:28:b8:03: 8d:03:1f:89:0e:16:b6:e7:24:74:21:28:01:d3:20:32:b3:12: 35:e7:9e:dc:5c:1c:06:43:75:9f:6d:bd:2d:bc:6f:03:a9:89: 22:44:0d:64:94:e6:15:a8:d9:6c:dd:5e:49:db:61:00:67:35: 48:5e:90:19:4d:ad:d6:fa:d9:19:58:a3:48:45:2b:f4:c1:48: f9:a6:9d:bd:23:f1:3e:50:0d:50:18:c0:43:75:82:93:97:e6: 87:9d:84:4b:a4:b2:22:69:1e:f7:09:bb:e3:84:b5:88:40:47: 7b:8b:94:46:aa:1a:ee:30:31:3c:a3:fc:2a:fd:1d:3d:dc:8b: 47:89:4a:6f:7b:cc:ed:ae:d6:4f:5f:c5:58:70:5d:38:3c:bf: a9:5e:5b:c1:84:0f:95:8d:97:54:f2:11:20:31:46:a6:43:7f: 81:87:90:73:6a:75:ce:78:7e:91:17:b6:43:c9:83:94:c8:d5: 5c:91:3b:76:ff:2f:ba:30:01:32:de:e4:ad:fa:93:2f:96:93: da:ae:b8:fa -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUZcslMSpDaQ8OIvjbD6021gDeIBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMxMDZaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGQxNmU0ODRkNWVkOTBmNmY2YTQzYThjYjUxODMxMmM2OGMyMzVhODk1NjQz YTVkZDI5Y2RlZTU1NGY1ODY1M2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsPrxjwAITU+7OAjPUSVTUwHqIAxS4lYSi8W1W90bjqAKEJ/9fConv2BBK1 ddHw1UbN3C3+3GXhpf4NC1BpAEiwIzhooWtuPsRgG9lIEa+6Ezz4BKsqGCQDm/Yo h7mu3J7YxGASC5t6Uzc+uZ40+jSMCDlhXR98dUojVTxJ9ueiwPLyKIUL9HhMkTEb cOtx5HIgQUXZh+imq2dPpYstZgiDHHvLkyJt2UVSkmkuAZcxV2ML2hc7TYbkb1QO mOQks3NX7IEsvW1/w45bYaExzuTuv7W8Nm8ErGCMTfa8X8DSCPtPzDxY3XCcCpT9 Z36W6hRqIx/Cks8OmbpEL4NCi4cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSFveWo xEsioJ/7j3aCq527Scr40jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmQ5ZjMxMjAtZmFiOS00M2FhLTk3M2YtNDE0MjkyNWIxNDE2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAQ wDANBgkqhkiG9w0BAQsFAAOCAQEAxQ8E2WTxB1x1bI/OswqtMZ8ZRe59J16NhrvU kGnzHJhvKlT4TJSE3xvBvH3LbnghvkZuKLgDjQMfiQ4WtuckdCEoAdMgMrMSNeee 3FwcBkN1n229LbxvA6mJIkQNZJTmFajZbN1eSdthAGc1SF6QGU2t1vrZGVijSEUr 9MFI+aadvSPxPlANUBjAQ3WCk5fmh52ES6SyImke9wm744S1iEBHe4uURqoa7jAx PKP8Kv0dPdyLR4lKb3vM7a7WT1/FWHBdODy/qV5bwYQPlY2XVPIRIDFGpkN/gYeQ c2p1znh+kRe2Q8mDlMjVXJE7dv8vujABMt7krfqTL5aT2q64+g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:37 2025 by rpki-client