This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4208aec2-e501-4b80-8e94-0fe622727fba.roa File: 4208aec2-e501-4b80-8e94-0fe622727fba.roa (raw, json) Hash identifier: 3tlBlBqbfStQuSD1yaQpp/RMeOQFGcyuhkRtunkiZUg= Subject key identifier: B5:C4:D2:9A:DA:58:EB:A3:43:71:1B:85:DA:4B:7B:D4:B3:8C:72:B0 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0C12691A8CF084E8FD95CF5D5BE4CC4F6A178D16 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4208aec2-e501-4b80-8e94-0fe622727fba.roa Signing time: Tue 18 Nov 2025 00:30:15 +0000 ROA not before: Tue 18 Nov 2025 00:30:15 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d06d:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:12:69:1a:8c:f0:84:e8:fd:95:cf:5d:5b:e4:cc:4f:6a:17:8d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:30:15 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=5bf547e3bf0ee173b9ea39d2c8fd89054ad68545a73bda02ff8cda1345cd6c15, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:3a:4f:0e:65:9c:13:73:a9:39:34:9c:de: 1f:fd:96:57:c8:0e:5b:fc:e4:5d:c4:4a:bb:a7:a4: 06:b6:1c:68:61:3c:a1:ee:c7:8e:13:93:c6:4f:cc: d6:86:80:52:37:de:c4:25:86:6b:df:1f:bc:49:9e: 99:a9:d5:d3:60:e4:19:2a:83:8b:cb:05:78:ef:c5: 11:a3:53:33:ba:30:b0:e3:32:38:37:f0:0e:c5:9a: 8b:10:96:04:1c:c1:53:01:3d:ea:24:78:85:b9:32: 8e:4d:20:77:03:c6:8b:aa:9c:58:f2:92:1a:fa:3e: de:79:7f:83:af:a3:ca:a8:c7:ee:40:79:08:24:b0: f0:30:e7:04:2d:82:cd:d9:5d:40:07:81:f9:12:57: 6d:fc:5d:05:fc:fc:91:a6:31:38:9e:23:fc:2f:4f: ae:94:4a:ee:04:1e:74:bd:a0:21:8a:d4:94:2e:f0: e0:ab:a3:d2:c0:52:6e:4f:79:8e:1c:be:e0:27:5b: 85:ef:7a:d0:0c:ce:80:26:30:05:33:8d:87:fe:03: 86:c0:8a:d8:87:18:93:b5:1a:94:a2:4e:a5:73:a6: 1b:25:22:30:fd:af:e8:b9:65:94:31:11:56:13:ba: 74:99:dd:b7:9f:5e:a4:56:96:0c:07:f0:08:9e:fd: 42:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C4:D2:9A:DA:58:EB:A3:43:71:1B:85:DA:4B:7B:D4:B3:8C:72:B0 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4208aec2-e501-4b80-8e94-0fe622727fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06d:6080::/48 Signature Algorithm: sha256WithRSAEncryption c7:bd:7e:82:e2:d7:49:1c:c4:1d:51:14:e0:0d:98:5e:e6:c5: 0f:77:5c:02:af:b4:c3:3e:6a:1e:c1:8f:f0:c8:46:12:9d:14: 2d:73:47:32:90:53:20:f6:b2:36:2f:06:fc:86:29:49:d1:f3: 3b:f6:54:76:d7:92:27:0e:35:b8:56:53:72:43:da:b7:3f:36: 35:61:15:e5:a6:d2:c2:b6:25:88:b7:53:d8:27:c7:cb:00:84: fd:c3:59:eb:7d:e6:2d:82:ae:d2:1b:f0:97:b3:bb:c6:4f:ab: 0b:9f:ac:4a:a7:1d:d3:cd:80:93:6a:29:54:fa:66:39:4f:ee: 15:a4:a4:76:96:00:e8:44:03:52:7a:f5:35:7a:60:ab:94:65: ae:92:45:be:5c:ef:b4:0f:37:93:69:1b:73:eb:f6:f7:83:34: 68:3a:f4:ba:a2:80:a8:cb:2f:4a:e1:4b:c9:50:45:ca:f8:9b: 08:f8:47:bf:d5:95:9b:cd:7e:e2:d4:21:1f:cc:7c:d4:aa:c1: d9:9c:6c:c2:dc:39:bc:2f:32:9b:0a:0f:b1:32:6e:7e:04:c8: 49:cd:05:b5:7d:e8:d5:f4:15:bf:51:3b:d3:39:20:19:81:bd: 92:15:96:43:ad:1f:95:22:60:3e:34:3e:fa:f7:a4:a0:d7:eb: 58:36:32:be -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUDBJpGozwhOj9lc9dW+TMT2oXjRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDMwMTVaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDViZjU0N2UzYmYwZWUxNzNiOWVhMzlkMmM4ZmQ4OTA1NGFkNjg1NDVhNzNi ZGEwMmZmOGNkYTEzNDVjZDZjMTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyBOk8OZZwTc6k5NJzeH/2WV8gOW/zkXcRKu6ekBrYcaGE8oe7HjhOTxk/M 1oaAUjfexCWGa98fvEmemanV02DkGSqDi8sFeO/FEaNTM7owsOMyODfwDsWaixCW BBzBUwE96iR4hbkyjk0gdwPGi6qcWPKSGvo+3nl/g6+jyqjH7kB5CCSw8DDnBC2C zdldQAeB+RJXbfxdBfz8kaYxOJ4j/C9PrpRK7gQedL2gIYrUlC7w4Kuj0sBSbk95 jhy+4Cdbhe960AzOgCYwBTONh/4DhsCK2IcYk7UalKJOpXOmGyUiMP2v6LlllDER VhO6dJndt59epFaWDAfwCJ79QrkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS1xNKa 2ljro0NxG4XaS3vUs4xysDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDIwOGFlYzItZTUwMS00YjgwLThlOTQtMGZlNjIyNzI3ZmJhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G1g gDANBgkqhkiG9w0BAQsFAAOCAQEAx71+guLXSRzEHVEU4A2YXubFD3dcAq+0wz5q HsGP8MhGEp0ULXNHMpBTIPayNi8G/IYpSdHzO/ZUdteSJw41uFZTckPatz82NWEV 5abSwrYliLdT2CfHywCE/cNZ633mLYKu0hvwl7O7xk+rC5+sSqcd082Ak2opVPpm OU/uFaSkdpYA6EQDUnr1NXpgq5RlrpJFvlzvtA83k2kbc+v294M0aDr0uqKAqMsv SuFLyVBFyvibCPhHv9WVm81+4tQhH8x81KrB2Zxswtw5vC8ymwoPsTJufgTISc0F tX3o1fQVv1E70zkgGYG9khWWQ60flSJgPjQ++vekoNfrWDYyvg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:06 2025 by rpki-client