This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa File: 36851825-b64c-4907-b152-006b17b6b7d7.roa (raw, json) Hash identifier: ebDMYrzPuggeVCJItUlr1h6q82MjAU04dih0M7GAqts= Subject key identifier: B2:34:AC:36:C2:4F:C0:11:27:DA:B6:06:5A:C6:BF:BB:9A:71:4E:97 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7ADE6BA2CE550878DD2AC2DB8F28C8F18B6A1159 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa Signing time: Sat 15 Nov 2025 06:40:07 +0000 ROA not before: Sat 15 Nov 2025 06:40:07 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:de:6b:a2:ce:55:08:78:dd:2a:c2:db:8f:28:c8:f1:8b:6a:11:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:40:07 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=837b7cad5cc5dfc4c00a1573e01920a23dfb975cc28229f78895a2e78e5d996e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:15:fb:ba:51:29:e0:dc:f8:39:9b:a8:4e: d1:da:64:85:dc:67:0e:f9:9a:f6:71:66:26:5e:3d: e0:24:5f:d5:af:2a:ce:9c:a8:8d:7e:b3:24:91:87: b2:bd:68:44:fb:9f:17:73:7e:86:18:e5:10:63:66: a6:a8:20:9c:93:2d:af:5f:0d:20:a1:15:83:67:cd: a8:71:bc:03:3f:83:c9:45:e7:51:20:8f:8e:56:7e: bb:48:35:39:89:7a:c8:d9:6c:c0:10:fa:69:a7:89: 1f:fd:62:d9:b5:cf:22:44:3a:0b:9d:b0:3f:44:a5: c8:e9:da:85:f0:60:58:9b:5a:c3:ae:4c:8d:5f:2b: 4b:ec:8e:99:dd:d9:c2:ae:d0:bb:c3:23:05:22:ca: 95:4a:24:f8:d9:89:8a:d9:bf:40:43:fb:87:37:c5: a0:54:4d:86:0c:86:f0:22:3b:78:15:73:b1:8e:e1: 3d:6d:c1:95:cc:e7:23:49:20:a3:05:04:3c:8f:06: 98:ed:9b:f2:b3:f3:d3:03:ca:30:24:a0:54:7b:49: 05:dc:80:5e:94:8e:1b:14:3a:33:b8:2a:73:0d:d3: ca:59:2c:3e:a6:0f:a5:60:7d:05:8c:53:b9:9d:b1: 26:2f:20:2d:c6:ed:98:34:bb:95:9b:cc:1c:bf:71: 31:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:AC:36:C2:4F:C0:11:27:DA:B6:06:5A:C6:BF:BB:9A:71:4E:97 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:b000::/40 Signature Algorithm: sha256WithRSAEncryption 4e:a7:92:ea:18:89:10:bf:bc:94:47:68:9c:4d:83:b3:f5:73: ad:11:d9:02:db:46:f5:c6:26:cd:ce:fe:25:92:fb:2f:12:d8: 2b:65:9f:f7:cd:d8:fd:31:51:50:37:54:81:1f:b6:88:7d:05: d7:fa:cd:87:b9:10:7d:33:b7:7c:65:3c:52:3f:94:61:45:78: 82:67:2e:b5:c6:3e:47:0b:8a:d6:72:de:16:7b:79:59:0b:93: 63:94:f0:fb:6d:1e:6b:ea:ad:38:45:ad:4d:69:df:df:51:52: 1d:94:56:60:1b:3d:ec:b2:41:b3:e1:aa:d7:53:94:82:30:2b: 4f:c2:34:d7:40:57:1f:10:72:79:01:e6:d4:b2:3f:8c:50:68: b3:fd:9a:63:25:51:c8:e9:8d:43:1e:de:a2:47:68:a6:f0:ea: 13:f4:7f:c3:de:49:e1:e1:fd:78:d5:af:02:af:ad:35:c5:68: 3a:d8:b2:1b:c7:7c:61:ec:39:2e:3b:bb:4a:6c:09:58:b0:97: c3:c9:78:0f:c7:14:5e:50:71:c5:99:dc:6a:85:ac:90:70:92: ff:89:13:81:1f:1b:19:3a:ab:f3:67:cb:b8:ef:31:f5:d0:f1: b0:6f:d3:59:b4:68:c5:7d:42:04:b5:3a:70:21:de:46:af:57: 03:7c:54:ae -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUet5ros5VCHjdKsLbjyjI8YtqEVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjQwMDdaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDgzN2I3Y2FkNWNjNWRmYzRjMDBhMTU3M2UwMTkyMGEyM2RmYjk3NWNjMjgy MjlmNzg4OTVhMmU3OGU1ZDk5NmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2jFfu6USng3Pg5m6hO0dpkhdxnDvma9nFmJl494CRf1a8qzpyojX6zJJGH sr1oRPufF3N+hhjlEGNmpqggnJMtr18NIKEVg2fNqHG8Az+DyUXnUSCPjlZ+u0g1 OYl6yNlswBD6aaeJH/1i2bXPIkQ6C52wP0SlyOnahfBgWJtaw65MjV8rS+yOmd3Z wq7Qu8MjBSLKlUok+NmJitm/QEP7hzfFoFRNhgyG8CI7eBVzsY7hPW3BlcznI0kg owUEPI8GmO2b8rPz0wPKMCSgVHtJBdyAXpSOGxQ6M7gqcw3TylksPqYPpWB9BYxT uZ2xJi8gLcbtmDS7lZvMHL9xMWsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSyNKw2 wk/AESfatgZaxr+7mnFOlzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MzY4NTE4MjUtYjY0Yy00OTA3LWIxNTItMDA2YjE3YjZiN2Q3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DGw MA0GCSqGSIb3DQEBCwUAA4IBAQBOp5LqGIkQv7yUR2icTYOz9XOtEdkC20b1xibN zv4lkvsvEtgrZZ/3zdj9MVFQN1SBH7aIfQXX+s2HuRB9M7d8ZTxSP5RhRXiCZy61 xj5HC4rWct4We3lZC5NjlPD7bR5r6q04Ra1Nad/fUVIdlFZgGz3sskGz4arXU5SC MCtPwjTXQFcfEHJ5AebUsj+MUGiz/ZpjJVHI6Y1DHt6iR2im8OoT9H/D3knh4f14 1a8Cr601xWg62LIbx3xh7DkuO7tKbAlYsJfDyXgPxxReUHHFmdxqhayQcJL/iROB HxsZOqvzZ8u47zH10PGwb9NZtGjFfUIEtTpwId5Gr1cDfFSu -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:54 2025 by rpki-client