This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa File: 470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa (raw, json) Hash identifier: sDCssIPSip7GY7EaoGV0Pg8tk5oxa0Iw62YZjX43jP0= Subject key identifier: 63:3C:F7:FC:19:8A:35:7B:AC:24:BC:3E:49:CB:30:3A:C4:67:2D:EA Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6F9493894AE430300C82E305AF913FF2F7667483 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa Signing time: Sat 15 Nov 2025 06:11:01 +0000 ROA not before: Sat 15 Nov 2025 06:11:01 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:94:93:89:4a:e4:30:30:0c:82:e3:05:af:91:3f:f2:f7:66:74:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:11:01 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=9863428eb112fdd99b404b6b9a6818a29c5d066b8b9b26634d4b78523e3e05ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:1b:b2:b6:3a:2c:93:45:85:b9:4b:53:dc: c2:c8:28:6f:91:0b:03:9d:1d:77:ce:e1:97:21:d6: e1:fe:a9:87:f4:2b:8d:ba:fa:3d:31:01:8b:dc:53: 74:2c:b5:e4:eb:d9:ba:f1:df:97:9a:2e:21:c3:d5: 95:ab:e7:4b:bc:47:2f:cb:62:fd:06:a8:d2:66:9f: cd:b3:20:b7:f5:e9:6b:bd:89:72:a9:b2:26:64:88: 2c:3e:a3:95:fe:eb:f7:4a:42:d6:9e:f3:62:98:56: f1:15:9b:5d:b8:1a:51:46:a6:c5:81:9f:86:da:7b: 4a:c1:57:c1:a9:13:43:79:09:bd:ee:a9:94:8c:8a: 47:05:d9:1a:a3:fc:b7:05:51:e4:e6:8a:fe:c1:c1: a6:8a:4f:3e:2e:24:5c:45:7a:42:44:e9:22:43:ea: 56:25:8c:4c:bd:dd:66:4d:40:29:52:5f:27:62:c1: 36:45:a3:42:31:85:32:d2:08:18:74:cc:80:3e:60: c8:85:d0:e3:f1:ab:67:5b:9f:bb:60:bb:9e:09:d7: 59:fe:17:17:69:d0:3d:32:8d:88:1c:13:bc:56:ba: da:5b:8d:32:e3:1d:83:25:44:29:c5:7e:63:e3:83: ea:d1:68:2d:fa:a3:38:99:df:d6:ba:c7:a7:f1:4a: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3C:F7:FC:19:8A:35:7B:AC:24:BC:3E:49:CB:30:3A:C4:67:2D:EA X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:1000::/40 Signature Algorithm: sha256WithRSAEncryption 1e:39:e0:fb:50:a7:42:f6:9f:5c:d0:c3:1e:16:c2:63:8d:83: 10:23:77:54:6c:0a:e1:18:9c:d7:93:a4:fe:a8:3c:b8:62:ee: 73:3e:13:1b:77:cc:95:dc:6e:10:b6:f1:6c:b5:81:fd:69:71: 46:78:81:9c:20:6b:11:5d:cf:51:4e:a8:23:ad:fe:07:42:3f: c7:6a:38:c1:d9:6e:59:8c:a2:d0:36:89:95:4b:87:c2:31:32: 0e:f4:31:35:ef:7f:4b:0d:05:d0:c3:16:74:97:fc:bd:80:40: dd:ba:a0:3e:5b:1b:9d:b1:6c:10:58:1a:c3:e5:1e:b8:ca:d2: c6:24:39:37:ab:63:a5:bd:18:26:05:fb:e8:d7:7f:98:66:4f: 2b:c2:f8:92:60:ab:7b:37:94:ef:c7:db:fc:75:4c:50:ad:e8: 33:9a:11:d0:f2:26:1d:1e:b5:5f:88:13:8c:46:c0:87:ac:21: 00:53:13:c9:1e:c6:b9:75:d6:76:01:ad:2d:14:45:2a:3a:1b: 52:fb:ba:03:46:8d:c5:6f:e1:3a:98:9b:c4:7b:b5:36:2b:c4: 44:68:b0:fc:db:74:da:67:21:10:aa:88:e5:29:b0:b9:4b:ab: cf:83:e7:25:ee:26:50:b8:f7:40:3b:c2:4c:2d:3b:96:6f:1c: a5:73:ed:65 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUb5STiUrkMDAMguMFr5E/8vdmdIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjExMDFaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDk4NjM0MjhlYjExMmZkZDk5YjQwNGI2YjlhNjgxOGEyOWM1ZDA2NmI4Yjli MjY2MzRkNGI3ODUyM2UzZTA1Y2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMU3G7K2OiyTRYW5S1Pcwsgob5ELA50dd87hlyHW4f6ph/Qrjbr6PTEBi9xT dCy15OvZuvHfl5ouIcPVlavnS7xHL8ti/Qao0mafzbMgt/Xpa72JcqmyJmSILD6j lf7r90pC1p7zYphW8RWbXbgaUUamxYGfhtp7SsFXwakTQ3kJve6plIyKRwXZGqP8 twVR5OaK/sHBpopPPi4kXEV6QkTpIkPqViWMTL3dZk1AKVJfJ2LBNkWjQjGFMtII GHTMgD5gyIXQ4/GrZ1ufu2C7ngnXWf4XF2nQPTKNiBwTvFa62luNMuMdgyVEKcV+ Y+OD6tFoLfqjOJnf1rrHp/FKOF0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRjPPf8 GYo1e6wkvD5JyzA6xGct6jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDcwYjZjNzYtY2QxYS00ZGI0LWJhZjUtMWM2ZDg2NTRhNTJjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0AAQ MA0GCSqGSIb3DQEBCwUAA4IBAQAeOeD7UKdC9p9c0MMeFsJjjYMQI3dUbArhGJzX k6T+qDy4Yu5zPhMbd8yV3G4QtvFstYH9aXFGeIGcIGsRXc9RTqgjrf4HQj/HajjB 2W5ZjKLQNomVS4fCMTIO9DE1739LDQXQwxZ0l/y9gEDduqA+WxudsWwQWBrD5R64 ytLGJDk3q2OlvRgmBfvo13+YZk8rwviSYKt7N5Tvx9v8dUxQregzmhHQ8iYdHrVf iBOMRsCHrCEAUxPJHsa5ddZ2Aa0tFEUqOhtS+7oDRo3Fb+E6mJvEe7U2K8REaLD8 23TaZyEQqojlKbC5S6vPg+cl7iZQuPdAO8JMLTuWbxylc+1l -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:47 2025 by rpki-client