This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa File: 4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa (raw, json) Hash identifier: 8WO0iu0dqZGAGsldsNcE3eVb06ojU9nn6WJtCHqGscs= Subject key identifier: 60:7D:FD:78:CE:24:01:D4:46:0A:3A:2E:10:DD:16:48:E5:D7:7A:72 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0AC741145E02099AAB403512A899E681314C8B83 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa Signing time: Sun 23 Nov 2025 01:31:02 +0000 ROA not before: Sun 23 Nov 2025 01:31:02 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c7:41:14:5e:02:09:9a:ab:40:35:12:a8:99:e6:81:31:4c:8b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:31:02 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=2df62dda9d92702f80a431a1ca31610ead9a47dbcb617ab60e93865568ab4919, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:43:cc:04:84:8d:f7:6f:ca:80:6d:f4:8d: ab:15:5f:09:07:67:3a:51:84:eb:5b:c3:b6:cc:51: be:73:a8:5a:e1:76:0f:5d:60:0b:b4:20:ff:23:b3: 82:ad:d2:97:04:e1:79:7b:55:62:b8:8a:ec:4c:da: f8:84:04:33:7b:eb:4e:7b:a5:78:20:09:7c:38:cd: 68:f2:77:91:2b:4c:b8:58:2c:e2:3a:a7:42:f2:14: b1:d6:7e:b1:1f:9b:48:c7:a1:19:8c:9e:23:fc:9e: 61:7b:32:17:b2:5f:96:ac:22:d9:22:50:6b:5c:48: 03:a2:7a:87:d3:74:9d:1b:e3:cd:50:21:1d:df:09: 34:d2:7d:2f:64:5f:ac:e8:9f:33:99:3a:a1:3f:09: 82:ee:57:ec:0a:42:9d:35:2c:d2:22:59:75:6a:7f: f1:5e:bb:0b:1b:3e:01:2d:dd:6c:92:1b:44:d3:8f: c8:b2:b0:51:83:34:e1:f5:83:e5:52:1f:e6:76:07: e8:f8:e5:20:3f:85:97:42:63:e8:65:f0:d7:22:58: 95:38:e3:6b:7d:f6:12:81:92:4a:ad:69:71:1e:fa: b2:f9:3f:21:76:82:89:2b:27:de:a6:87:e5:a4:6d: 1a:3c:ac:a7:18:b4:e6:23:3c:ab:3b:dc:6b:e4:77: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7D:FD:78:CE:24:01:D4:46:0A:3A:2E:10:DD:16:48:E5:D7:7A:72 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4604fc5d-5125-4a3b-890a-3f8830a08b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 96:b4:34:c5:f3:4a:9b:41:c9:16:d1:b5:c4:e3:c8:6a:17:50: f7:e0:92:62:44:7c:6b:3d:5b:1a:ef:72:6c:41:e6:cf:cb:35: 9c:17:c6:f7:ae:22:0e:cd:9a:82:ab:73:e2:b6:a4:67:1b:1e: 20:68:f9:0c:7a:e7:6e:62:10:16:6d:05:c2:7e:92:6d:63:2d: 84:a5:4d:71:d9:1f:bf:71:f7:d9:67:b7:b7:12:ca:0f:c3:02: 07:70:d5:92:65:51:ee:44:b9:39:93:5b:f8:cf:32:0e:67:e1: d3:2d:87:de:ae:e4:42:c0:18:7e:69:2e:42:d7:7f:b8:7e:96: c4:97:fb:e1:d8:76:58:a1:f6:d1:29:45:00:85:4c:ff:07:ab: 22:ef:8e:0a:1c:b7:93:93:2f:f9:ae:2d:36:cb:d8:ff:70:3f: f0:05:8d:bb:98:e0:f8:3f:48:ae:6a:0d:93:1f:0b:1f:ff:f2: e8:a5:70:21:e7:af:2c:d8:4a:41:ba:5b:3e:63:e6:67:ae:0e: 81:61:c6:da:0c:14:88:55:b8:56:be:03:f6:67:ed:2d:20:96: 9e:93:f5:9e:8b:f3:95:71:51:7a:4b:3f:75:3a:28:eb:ef:4c: 98:5b:4f:49:65:16:3e:ee:d8:1f:4a:cc:69:48:9d:b4:ef:76: ff:23:a1:75 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUCsdBFF4CCZqrQDUSqJnmgTFMi4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMxMDJaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDJkZjYyZGRhOWQ5MjcwMmY4MGE0MzFhMWNhMzE2MTBlYWQ5YTQ3ZGJjYjYx N2FiNjBlOTM4NjU1NjhhYjQ5MTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4mQ8wEhI33b8qAbfSNqxVfCQdnOlGE61vDtsxRvnOoWuF2D11gC7Qg/yOz gq3SlwTheXtVYriK7Eza+IQEM3vrTnuleCAJfDjNaPJ3kStMuFgs4jqnQvIUsdZ+ sR+bSMehGYyeI/yeYXsyF7Jflqwi2SJQa1xIA6J6h9N0nRvjzVAhHd8JNNJ9L2Rf rOifM5k6oT8Jgu5X7ApCnTUs0iJZdWp/8V67Cxs+AS3dbJIbRNOPyLKwUYM04fWD 5VIf5nYH6PjlID+Fl0Jj6GXw1yJYlTjja332EoGSSq1pcR76svk/IXaCiSsn3qaH 5aRtGjyspxi05iM8qzvca+R3+wECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRgff14 ziQB1EYKOi4Q3RZI5dd6cjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDYwNGZjNWQtNTEyNS00YTNiLTg5MGEtM2Y4ODMwYTA4YjFmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gqg wDANBgkqhkiG9w0BAQsFAAOCAQEAlrQ0xfNKm0HJFtG1xOPIahdQ9+CSYkR8az1b Gu9ybEHmz8s1nBfG964iDs2agqtz4rakZxseIGj5DHrnbmIQFm0Fwn6SbWMthKVN cdkfv3H32We3txLKD8MCB3DVkmVR7kS5OZNb+M8yDmfh0y2H3q7kQsAYfmkuQtd/ uH6WxJf74dh2WKH20SlFAIVM/werIu+OChy3k5Mv+a4tNsvY/3A/8AWNu5jg+D9I rmoNkx8LH//y6KVwIeevLNhKQbpbPmPmZ64OgWHG2gwUiFW4Vr4D9mftLSCWnpP1 novzlXFReks/dToo6+9MmFtPSWUWPu7YH0rMaUidtO92/yOhdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:03 2025 by rpki-client