This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa File: 4581b00e-602d-4a4b-b191-1af16885c541.roa (raw, json) Hash identifier: CtaZzhEftamhG6V8QEXiR0YUUFcCl+oM9/s06VDBQ6U= Subject key identifier: 86:5B:7A:1C:13:2C:8B:7A:B2:DF:80:49:47:1C:4B:CB:0A:C2:03:56 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 37AC804BD817F7FD2C0F66D8762C7F2D27A15978 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa Signing time: Tue 25 Nov 2025 20:00:10 +0000 ROA not before: Tue 25 Nov 2025 20:00:10 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ac:80:4b:d8:17:f7:fd:2c:0f:66:d8:76:2c:7f:2d:27:a1:59:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:10 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=9269efde5ccc4ee10769f57fd9c3120efcb68b6510550ac1b0fd66852e97d3a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:83:15:2b:8d:fa:9b:f7:74:7d:3a:d7:7c: 4c:03:ec:a8:9e:f4:99:17:e1:ea:ba:0a:78:a8:b9: a3:ea:2d:e2:91:e7:10:ab:f8:29:22:c2:b7:f9:f8: 79:0d:8f:ba:c0:99:3f:35:6a:00:a1:56:d0:a4:3d: cd:b5:b1:1e:41:13:61:f0:b2:c1:68:30:4f:f2:c1: 1c:7c:a8:6b:f1:13:d7:e4:d5:04:a7:a4:55:f2:e4: 30:5e:c8:10:b0:a6:76:9b:e7:1a:7c:b6:f1:24:9f: cb:8d:46:73:18:34:f7:20:a3:5e:4a:41:81:c6:56: 71:99:75:47:8c:18:49:cd:3a:09:85:f9:10:0e:b7: 76:ee:17:70:2b:46:08:0f:66:16:a1:ca:68:d1:a9: c8:b4:b2:44:54:70:35:0b:07:e3:a3:52:ba:bb:11: e8:b1:94:a8:66:1c:5c:d3:00:b6:df:5b:b7:fb:6e: 0f:b3:78:b6:7d:c1:48:d5:c8:9f:fc:1e:62:7c:9d: d3:44:84:83:bb:82:ff:c8:e1:cd:22:a8:0e:5d:f4: 5a:0d:7f:61:c8:f0:37:5b:e0:c4:91:17:b2:69:c9: a6:6e:85:40:fe:f8:1c:53:fd:58:d0:f0:ef:a3:e3: 17:b1:50:d2:15:b7:ff:df:ac:58:7c:39:00:b4:61: 46:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5B:7A:1C:13:2C:8B:7A:B2:DF:80:49:47:1C:4B:CB:0A:C2:03:56 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:5000::/40 Signature Algorithm: sha256WithRSAEncryption 19:a3:7e:5a:18:a6:97:8e:6e:f4:3d:29:9e:5d:db:34:9b:63: 0f:a8:00:5c:54:31:a5:e0:fa:a2:c6:0d:8a:84:30:93:1e:27: 91:fb:2a:c9:1e:26:af:2c:c5:b7:ce:05:a4:5e:90:fa:71:5e: fc:7e:e1:11:7d:20:30:52:26:25:c9:c6:7d:b0:f0:25:33:5c: a4:3e:4c:8a:0f:c7:95:f6:96:e4:79:1a:5f:f2:26:d6:ee:c6: 32:a5:f2:a1:76:1c:5a:90:1c:9b:33:8d:d3:05:51:77:7a:8e: e2:a4:b5:0c:14:8f:38:51:81:34:68:85:7c:5f:71:e3:73:32: 0c:a0:ec:9c:a5:01:3a:a3:a0:f5:9a:bf:bc:05:cb:4c:f8:24: 99:fa:91:6a:59:b8:cf:e2:81:b0:6e:eb:f7:a1:c4:c3:08:39: dc:d5:07:36:a5:a3:79:c6:4b:eb:f5:81:01:73:7a:98:1f:02: 24:7f:c0:32:b1:b8:99:53:05:13:1d:11:7f:66:ca:7f:dc:e8: b3:34:63:b5:22:eb:91:96:7c:ff:d0:2c:db:3a:25:b7:fb:6c: ee:5e:48:0e:9c:03:55:b1:24:11:13:4c:3a:3f:29:84:60:a2: 85:22:e4:aa:08:a1:44:97:3e:a4:b5:59:d8:50:24:63:91:74: 68:f2:85:fe -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUN6yAS9gX9/0sD2bYdix/LSehWXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwMTBaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDkyNjllZmRlNWNjYzRlZTEwNzY5ZjU3ZmQ5YzMxMjBlZmNiNjhiNjUxMDU1 MGFjMWIwZmQ2Njg1MmU5N2QzYTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMo2gxUrjfqb93R9Otd8TAPsqJ70mRfh6roKeKi5o+ot4pHnEKv4KSLCt/n4 eQ2PusCZPzVqAKFW0KQ9zbWxHkETYfCywWgwT/LBHHyoa/ET1+TVBKekVfLkMF7I ELCmdpvnGny28SSfy41Gcxg09yCjXkpBgcZWcZl1R4wYSc06CYX5EA63du4XcCtG CA9mFqHKaNGpyLSyRFRwNQsH46NSursR6LGUqGYcXNMAtt9bt/tuD7N4tn3BSNXI n/weYnyd00SEg7uC/8jhzSKoDl30Wg1/YcjwN1vgxJEXsmnJpm6FQP74HFP9WNDw 76PjF7FQ0hW3/9+sWHw5ALRhRlMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSGW3oc EyyLerLfgElHHEvLCsIDVjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDU4MWIwMGUtNjAyZC00YTRiLWIxOTEtMWFmMTY4ODVjNTQxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HNQ MA0GCSqGSIb3DQEBCwUAA4IBAQAZo35aGKaXjm70PSmeXds0m2MPqABcVDGl4Pqi xg2KhDCTHieR+yrJHiavLMW3zgWkXpD6cV78fuERfSAwUiYlycZ9sPAlM1ykPkyK D8eV9pbkeRpf8ibW7sYypfKhdhxakBybM43TBVF3eo7ipLUMFI84UYE0aIV8X3Hj czIMoOycpQE6o6D1mr+8BctM+CSZ+pFqWbjP4oGwbuv3ocTDCDnc1Qc2paN5xkvr 9YEBc3qYHwIkf8AysbiZUwUTHRF/Zsp/3OizNGO1IuuRlnz/0CzbOiW3+2zuXkgO nANVsSQRE0w6PymEYKKFIuSqCKFElz6ktVnYUCRjkXRo8oX+ -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:49 2025 by rpki-client