This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa File: 33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json) Hash identifier: oyMqYDudxalGWExazg8po6+VPhgtZesH9CzMrqip0Rs= Subject key identifier: DF:F2:86:A9:30:A9:9B:BE:2C:92:FA:F4:81:91:89:07:54:87:1B:50 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4E503DFE8C333210C4C5F8FB32C1ADB306A1689A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa Signing time: Sat 15 Nov 2025 06:30:35 +0000 ROA not before: Sat 15 Nov 2025 06:30:35 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d016:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:50:3d:fe:8c:33:32:10:c4:c5:f8:fb:32:c1:ad:b3:06:a1:68:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:35 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=d3d08ea4561b77cad6eeb564d805bdcb19dcbc9a895576ce8256081165c6652e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:84:52:50:0d:f2:3e:95:16:57:bd:8d:35: 8b:90:e1:69:f2:d4:5c:3e:aa:01:87:dd:71:1b:f2: 65:83:fa:0a:44:83:b7:1b:ea:13:c6:39:43:79:07: 86:a9:a6:0b:32:fc:7e:0b:6c:41:0f:54:f2:91:31: 9f:ed:c8:77:b7:45:ac:26:ad:16:5a:49:b7:41:8e: 2f:fd:8e:34:01:fb:f9:ae:e2:76:c9:5f:12:70:30: 2c:7a:b7:a2:0a:e9:89:af:df:2b:46:81:69:6b:9a: f7:66:7e:84:13:62:8d:01:58:7b:22:b5:f0:26:d0: 7e:28:07:e6:40:f1:2a:3f:f4:d6:dc:2f:d3:9c:0f: eb:90:03:42:40:c3:2e:76:57:e2:17:26:71:fd:4e: 72:a7:01:42:d5:b8:23:aa:e4:0c:0d:e7:9a:0f:8a: 02:b0:6a:83:b1:a5:b4:7d:e4:c6:2e:64:3b:5d:f3: a5:d1:2e:3b:20:57:90:99:c2:eb:cd:9f:1e:90:c9: 9b:b3:0e:26:48:df:ac:e8:79:d9:68:67:f9:03:6d: 55:56:91:e8:17:92:cf:33:9d:9a:57:6c:1d:e8:7d: f1:7d:a8:54:20:7e:79:66:27:6d:25:ec:86:3c:d8: c4:d8:21:f7:fa:6d:8f:05:a4:fd:9c:2c:62:cf:69: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F2:86:A9:30:A9:9B:BE:2C:92:FA:F4:81:91:89:07:54:87:1B:50 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d016:800::/38 Signature Algorithm: sha256WithRSAEncryption c1:4f:87:d1:8a:45:0e:b8:20:47:6f:e4:22:23:e3:a1:b9:ee: 8a:fc:73:5a:f2:45:5b:ff:a2:15:79:4a:b1:d4:1f:ea:a0:bf: 38:fc:87:b9:37:8c:a3:55:b7:38:e2:63:3f:18:8f:f4:eb:56: 69:9b:65:c2:94:b0:6d:06:0f:c7:bb:4a:ca:b6:11:52:b3:91: 29:d7:5c:1a:ba:f1:42:d1:8f:2e:51:de:17:76:dd:5f:17:9d: 29:21:76:fa:f5:b2:30:cd:65:66:4a:e4:b5:77:18:09:d4:d7: 94:c5:6a:99:b9:80:3e:7b:55:19:69:94:b5:e8:0c:7f:02:37: 43:f9:12:f3:d1:67:0e:a8:d1:af:da:4b:c8:dd:60:0a:cc:b2: 7b:18:85:75:27:7a:14:42:d0:52:8d:b9:f6:a2:fc:64:5e:fe: af:8a:a1:79:12:88:2d:0d:32:bc:56:a8:3f:e1:cf:57:a9:12: 3a:67:85:08:b4:77:64:87:da:e7:76:26:4d:c4:df:10:54:8e: 4e:69:f7:07:dd:0b:56:02:37:97:fc:9f:e2:3a:2b:aa:51:a5: 20:bb:f8:7f:b2:ee:55:6b:9d:18:a9:0d:1e:4a:7e:1a:7a:c7: 3a:59:3e:f6:83:45:f2:3b:38:00:f8:2d:d0:27:29:63:a6:ed: 81:aa:dc:23 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUTlA9/owzMhDExfj7MsGtswahaJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwMzVaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGQzZDA4ZWE0NTYxYjc3Y2FkNmVlYjU2NGQ4MDViZGNiMTlkY2JjOWE4OTU1 NzZjZTgyNTYwODExNjVjNjY1MmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALD1hFJQDfI+lRZXvY01i5DhafLUXD6qAYfdcRvyZYP6CkSDtxvqE8Y5Q3kH hqmmCzL8fgtsQQ9U8pExn+3Id7dFrCatFlpJt0GOL/2ONAH7+a7idslfEnAwLHq3 ogrpia/fK0aBaWua92Z+hBNijQFYeyK18CbQfigH5kDxKj/01twv05wP65ADQkDD LnZX4hcmcf1OcqcBQtW4I6rkDA3nmg+KArBqg7GltH3kxi5kO13zpdEuOyBXkJnC 682fHpDJm7MOJkjfrOh52Whn+QNtVVaR6BeSzzOdmldsHeh98X2oVCB+eWYnbSXs hjzYxNgh9/ptjwWk/ZwsYs9pO/8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTf8oap MKmbviyS+vSBkYkHVIcbUDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MzNkMjdkMzAtYWM1Yy00MTViLThiOTYtYmRmM2ZhMmRhM2U1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYI MA0GCSqGSIb3DQEBCwUAA4IBAQDBT4fRikUOuCBHb+QiI+Ohue6K/HNa8kVb/6IV eUqx1B/qoL84/Ie5N4yjVbc44mM/GI/061Zpm2XClLBtBg/Hu0rKthFSs5Ep11wa uvFC0Y8uUd4Xdt1fF50pIXb69bIwzWVmSuS1dxgJ1NeUxWqZuYA+e1UZaZS16Ax/ AjdD+RLz0WcOqNGv2kvI3WAKzLJ7GIV1J3oUQtBSjbn2ovxkXv6viqF5EogtDTK8 Vqg/4c9XqRI6Z4UItHdkh9rndiZNxN8QVI5OafcH3QtWAjeX/J/iOiuqUaUgu/h/ su5Va50YqQ0eSn4aesc6WT72g0XyOzgA+C3QJyljpu2Bqtwj -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:51 2025 by rpki-client