This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa File: 46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json) Hash identifier: pJ2wvhREr3OefV/1G8y3pdgrE0/5dCJN33Cpr4PWknY= Subject key identifier: 53:38:2D:3A:D7:33:F8:84:69:F6:87:61:9A:37:EC:9D:3F:B6:0F:88 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 30F1D73D2464DCE7F10AF5E98F8DFFC26BE553B6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa Signing time: Tue 25 Nov 2025 20:00:42 +0000 ROA not before: Tue 25 Nov 2025 20:00:42 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f1:d7:3d:24:64:dc:e7:f1:0a:f5:e9:8f:8d:ff:c2:6b:e5:53:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:42 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=55ee735b4ab14a48fe7cbaca674d266247a0372cf922a82587ba9c826f646693, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:e5:b9:e6:8f:41:0c:01:9f:a1:8a:79:bf: 5b:f8:0c:67:f4:01:26:63:33:16:bc:fd:be:a5:0c: d3:84:fc:17:44:ec:80:fc:9e:e0:50:0f:d0:38:74: 05:4d:c1:c5:1b:21:c0:7a:d1:6d:2f:06:23:7b:55: bc:38:b8:c7:7e:25:e5:a0:f7:0f:c6:b7:9a:a7:6d: 58:1c:2f:4f:f0:dd:4c:d3:d8:bf:78:4d:72:a1:be: 9f:40:c0:87:1f:fa:04:0e:6c:40:07:95:6b:ee:0b: f7:ab:4b:10:93:6e:82:c7:7e:8b:89:73:42:7a:f1: 1b:f5:2f:51:7b:11:d0:06:9f:49:97:e1:ad:e7:56: 32:93:82:87:d5:cf:c2:55:c6:e4:31:68:f8:b2:b3: 43:17:56:1f:6c:8c:c8:98:b6:f0:b3:af:78:df:ce: 40:65:ae:14:bb:e3:8d:e1:f4:5d:f9:9d:ce:90:b2: e2:3f:f1:60:25:ea:97:fa:e6:99:30:52:ee:fb:e6: 61:1f:7d:6e:15:b5:fa:3e:f4:45:6f:a9:b9:5d:ca: d7:16:59:24:16:d1:31:6d:88:44:b2:02:10:71:f5: 01:a5:fb:7d:7a:1a:bc:7e:a8:55:46:6f:41:3c:ec: ae:20:77:e0:2b:80:1c:4e:cb:d7:74:45:89:c2:c9: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:38:2D:3A:D7:33:F8:84:69:F6:87:61:9A:37:EC:9D:3F:B6:0F:88 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 1a:68:1f:57:4f:a7:be:5a:93:7d:c3:dd:fa:00:af:62:08:81: 23:42:ad:4c:4f:4f:6e:96:39:da:4c:17:ae:01:82:f8:5d:07: 8d:45:1d:9c:b5:37:7e:89:53:d3:09:28:e5:19:62:ab:f0:d5: eb:05:69:e7:c8:b7:7e:01:1b:bb:5f:c4:dc:13:99:38:62:e3: 80:31:bf:50:de:5e:29:74:79:7f:3c:b1:b4:ff:c1:be:2a:59: 72:85:b6:db:bf:a5:1a:58:74:ef:31:ea:c5:bc:5c:fd:ab:fd: bc:f5:e3:39:c8:75:e6:c7:a0:39:49:a4:58:89:dc:86:84:29: 32:a3:83:76:88:f8:51:b3:cf:7e:74:63:1e:06:aa:ca:41:3c: cd:a6:e4:8b:97:cb:90:47:e0:bb:45:28:a2:7f:71:9b:73:69: f3:7c:21:1f:7f:2f:42:71:19:e7:29:d3:a1:60:5d:6c:0a:d6: 54:e2:85:86:0c:97:da:f4:f1:2b:46:03:c4:c3:01:08:72:04: 00:77:e5:2f:bd:fc:19:99:ac:b6:50:43:19:ba:94:13:a2:8e: a3:6b:64:de:16:b1:c0:62:8f:b6:47:92:2f:12:15:b4:24:94: 86:e9:87:3e:35:a1:04:12:f1:53:4c:0a:d9:11:ab:2c:1e:4c: b0:32:5e:ca -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUMPHXPSRk3OfxCvXpj43/wmvlU7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwNDJaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDU1ZWU3MzViNGFiMTRhNDhmZTdjYmFjYTY3NGQyNjYyNDdhMDM3MmNmOTIy YTgyNTg3YmE5YzgyNmY2NDY2OTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7d5bnmj0EMAZ+hinm/W/gMZ/QBJmMzFrz9vqUM04T8F0TsgPye4FAP0Dh0 BU3BxRshwHrRbS8GI3tVvDi4x34l5aD3D8a3mqdtWBwvT/DdTNPYv3hNcqG+n0DA hx/6BA5sQAeVa+4L96tLEJNugsd+i4lzQnrxG/UvUXsR0AafSZfhredWMpOCh9XP wlXG5DFo+LKzQxdWH2yMyJi28LOveN/OQGWuFLvjjeH0XfmdzpCy4j/xYCXql/rm mTBS7vvmYR99bhW1+j70RW+puV3K1xZZJBbRMW2IRLICEHH1AaX7fXoavH6oVUZv QTzsriB34CuAHE7L13RFicLJcKUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRTOC06 1zP4hGn2h2GaN+ydP7YPiDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDYyNjVlZWEtYTM5NS00NTc4LWFmYzgtMGJmNTUxZGUzMjdkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HPA wDANBgkqhkiG9w0BAQsFAAOCAQEAGmgfV0+nvlqTfcPd+gCvYgiBI0KtTE9PbpY5 2kwXrgGC+F0HjUUdnLU3folT0wko5Rliq/DV6wVp58i3fgEbu1/E3BOZOGLjgDG/ UN5eKXR5fzyxtP/BvipZcoW227+lGlh07zHqxbxc/av9vPXjOch15segOUmkWInc hoQpMqODdoj4UbPPfnRjHgaqykE8zabki5fLkEfgu0Uoon9xm3Np83whH38vQnEZ 5ynToWBdbArWVOKFhgyX2vTxK0YDxMMBCHIEAHflL738GZmstlBDGbqUE6KOo2tk 3haxwGKPtkeSLxIVtCSUhumHPjWhBBLxU0wK2RGrLB5MsDJeyg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:35 2025 by rpki-client