This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408fc879-4db9-446c-bdb3-37bf4ee28c97.roa File: 408fc879-4db9-446c-bdb3-37bf4ee28c97.roa (raw, json) Hash identifier: YoF44l9+vV0REnEZ0TOdcVPRw7IhLcJz3iu6mzlEJIA= Subject key identifier: DC:30:EB:DF:CA:D7:5B:54:AA:4B:01:3B:F9:FD:4A:A2:25:5B:0F:20 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7BF2C970E3CE8966F699D99DFD29CED058A06B30 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408fc879-4db9-446c-bdb3-37bf4ee28c97.roa Signing time: Sat 15 Nov 2025 06:00:32 +0000 ROA not before: Sat 15 Nov 2025 06:00:32 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07a:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f2:c9:70:e3:ce:89:66:f6:99:d9:9d:fd:29:ce:d0:58:a0:6b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:00:32 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=7f99fc60d2ca10e662d62d744de0ac9b975cac94c3dd0806adfb57fd2db2d994, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:5d:60:b3:f6:d9:f0:4c:68:d0:dd:f5:53: 74:48:c2:9b:00:03:f6:c0:e5:19:8f:ee:c4:18:22: 11:be:1b:eb:6a:2f:0f:4e:30:2f:70:e4:c7:8b:70: e3:a7:8e:0f:fa:61:4c:e1:f9:24:fe:d4:83:a5:a2: 8f:54:b5:f7:16:4b:c3:6d:2f:09:66:b7:18:64:d6: a6:c0:a2:ce:9f:af:56:76:6a:e0:71:7c:d3:48:9b: 1f:c6:2e:a7:97:8a:50:5d:dc:e7:24:5b:f4:fd:96: 41:3e:f4:5c:aa:70:82:20:eb:68:c0:a1:36:4d:47: 62:02:be:09:5b:b7:62:b2:c8:cd:09:a3:9d:2b:c9: 19:5a:a3:65:ed:ee:1b:96:dc:d0:25:ff:11:58:2c: 94:da:08:d6:e8:8d:3b:3b:2b:e1:04:66:41:d1:e3: ab:ea:1d:f3:29:6d:d4:83:59:ff:42:df:d2:9e:46: 3c:21:a5:de:fe:33:ad:79:8e:39:ef:b0:a9:5a:6e: c4:fc:50:e7:40:bc:db:e0:12:12:86:c8:97:89:bd: a1:8d:f2:5a:8f:81:f0:88:32:66:5b:98:30:fd:1f: ad:c8:69:b8:a4:37:a5:f8:a6:38:10:13:ae:bd:b7: 35:30:56:21:f9:b6:a3:18:db:14:9a:25:61:12:2b: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:EB:DF:CA:D7:5B:54:AA:4B:01:3B:F9:FD:4A:A2:25:5B:0F:20 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/408fc879-4db9-446c-bdb3-37bf4ee28c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07a:a000::/40 Signature Algorithm: sha256WithRSAEncryption 32:9d:4c:9b:b3:1f:50:4e:22:f2:6a:6a:cd:ae:27:ff:b9:e4: 39:d8:bf:a2:41:c2:e0:eb:68:29:43:88:00:0b:4a:d7:56:6a: 4c:15:9c:14:31:65:90:c7:04:bb:8a:11:3d:52:98:b5:fb:b2: 5c:e4:c7:5b:bc:51:ca:bf:3d:11:95:8a:a4:e8:6c:da:d7:17: c9:82:7c:ce:e2:3d:e7:25:33:6d:16:20:f2:92:38:23:86:fa: 8b:4e:4a:ce:cf:9a:5f:66:0d:69:15:6b:9c:f7:bf:7b:70:08: 16:bf:2e:62:d3:0b:34:d0:28:a1:8c:84:08:21:72:4f:10:02: f1:65:dc:af:94:db:2a:5c:5b:c0:af:84:4f:a2:1e:42:d7:51: db:64:26:79:3f:2c:57:47:3c:02:aa:72:ad:2d:f0:5b:4c:08: 10:97:95:72:11:44:a4:51:2e:82:6e:26:a6:10:53:e0:03:ac: a7:7a:60:67:cd:94:cc:91:9a:76:fe:6a:f6:fd:9d:6e:33:e8: 31:76:2e:14:ae:e4:7f:58:2d:ff:27:bb:36:dd:b2:c6:d6:6c: 1d:b5:7d:b8:72:be:ac:13:4d:90:84:07:86:ec:94:3b:82:7f: d7:da:90:b7:3e:09:d6:f4:bd:b1:30:70:65:8e:f5:91:22:9c: 83:01:99:3e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUe/LJcOPOiWb2mdmd/SnO0FigazAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjAwMzJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDdmOTlmYzYwZDJjYTEwZTY2MmQ2MmQ3NDRkZTBhYzliOTc1Y2FjOTRjM2Rk MDgwNmFkZmI1N2ZkMmRiMmQ5OTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzTXWCz9tnwTGjQ3fVTdEjCmwAD9sDlGY/uxBgiEb4b62ovD04wL3Dkx4tw 46eOD/phTOH5JP7Ug6Wij1S19xZLw20vCWa3GGTWpsCizp+vVnZq4HF800ibH8Yu p5eKUF3c5yRb9P2WQT70XKpwgiDraMChNk1HYgK+CVu3YrLIzQmjnSvJGVqjZe3u G5bc0CX/EVgslNoI1uiNOzsr4QRmQdHjq+od8ylt1INZ/0Lf0p5GPCGl3v4zrXmO Oe+wqVpuxPxQ50C82+ASEobIl4m9oY3yWo+B8IgyZluYMP0frchpuKQ3pfimOBAT rr23NTBWIfm2oxjbFJolYRIr/28CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTcMOvf ytdbVKpLATv5/UqiJVsPIDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDA4ZmM4NzktNGRiOS00NDZjLWJkYjMtMzdiZjRlZTI4Yzk3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hqg MA0GCSqGSIb3DQEBCwUAA4IBAQAynUybsx9QTiLyamrNrif/ueQ52L+iQcLg62gp Q4gAC0rXVmpMFZwUMWWQxwS7ihE9Upi1+7Jc5MdbvFHKvz0RlYqk6Gza1xfJgnzO 4j3nJTNtFiDykjgjhvqLTkrOz5pfZg1pFWuc9797cAgWvy5i0ws00CihjIQIIXJP EALxZdyvlNsqXFvAr4RPoh5C11HbZCZ5PyxXRzwCqnKtLfBbTAgQl5VyEUSkUS6C biamEFPgA6ynemBnzZTMkZp2/mr2/Z1uM+gxdi4UruR/WC3/J7s23bLG1mwdtX24 cr6sE02QhAeG7JQ7gn/X2pC3PgnW9L2xMHBljvWRIpyDAZk+ -----END CERTIFICATE-----Generated at Sat Dec 6 22:37:03 2025 by rpki-client