This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa File: 48202432-610c-42b2-9763-e895c6cbe70d.roa (raw, json) Hash identifier: WDzgCGzROTRVmURXBMVyVYTBDexWIf4ZWuRjAYHofYE= Subject key identifier: 80:B9:39:DA:CE:A3:2D:C4:4A:51:42:57:3D:4F:3E:13:34:FF:F6:6E Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 71DD8E991714B24862AFF08C2862B44C7A9B7121 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa Signing time: Wed 12 Nov 2025 03:00:10 +0000 ROA not before: Wed 12 Nov 2025 03:00:10 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dd:8e:99:17:14:b2:48:62:af:f0:8c:28:62:b4:4c:7a:9b:71:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 12 03:00:10 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=d36406b470227384e5ef8ee25f870b81fc22bb22c1d485cf6cdde5a547b3e5d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:f1:02:af:37:34:a9:68:97:f4:df:d9:f0: 97:ee:ec:33:9b:54:41:2f:31:97:88:a5:f7:c4:e5: 9b:c7:7e:87:9f:4f:4c:16:12:57:1d:36:47:9a:06: 6d:f1:e3:47:19:23:16:a3:ad:82:a4:3d:ed:4b:0a: f7:77:2d:0f:b4:29:71:29:c3:1c:1b:0b:40:c5:67: 91:95:67:13:09:69:39:55:29:7f:9c:b9:e8:d4:ef: 22:a7:42:74:a8:e1:42:f3:84:25:77:f8:80:e7:9c: e8:68:3f:b5:b4:b4:f8:88:d5:5f:78:de:65:c2:8b: 94:4c:45:01:e6:8d:46:61:bb:62:73:f0:61:f8:9d: 96:6f:8e:0e:00:6b:6f:c4:84:9b:2e:03:59:bf:37: de:31:af:f4:8d:0a:dd:bd:e7:a0:64:5d:f4:7e:2e: 14:ef:df:27:f9:16:4d:87:6d:63:07:27:6b:dc:72: c4:15:89:05:bd:1a:c9:da:ea:70:81:74:18:a1:aa: 34:27:79:23:36:75:f9:32:12:f8:70:eb:17:98:77: 2c:c3:3f:12:63:36:3f:09:0b:8b:33:22:4f:18:16: b9:76:8d:86:4b:64:94:34:d5:9e:d8:3f:47:0f:d2: 73:dd:c6:c7:b9:4b:64:bd:19:48:57:9e:e4:bd:52: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B9:39:DA:CE:A3:2D:C4:4A:51:42:57:3D:4F:3E:13:34:FF:F6:6E X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:1000::/48 Signature Algorithm: sha256WithRSAEncryption ca:38:9a:a9:e0:47:9c:72:50:e0:4c:83:b9:da:89:4b:cc:57: b7:ff:a4:77:3c:9e:40:73:74:75:21:33:b9:b8:d8:d9:b4:82: db:be:0c:70:9d:63:43:8e:52:0c:2e:51:5c:b8:ad:6a:b5:34: 43:c3:1f:a7:90:77:50:bf:f3:32:b7:c1:61:e1:ee:fb:2f:0b: 30:07:4c:d0:c9:0a:ac:de:9c:e8:22:5e:33:8b:01:06:4c:3f: d6:ce:58:ef:8e:58:72:a6:c8:6f:44:5b:07:30:68:bb:f7:81: 17:cb:0f:5c:41:97:e0:d5:87:17:41:ed:f9:ae:15:cf:9e:3d: e3:b6:fc:b1:35:14:5b:a5:b5:12:b9:8d:1f:0b:54:34:18:4c: ab:0d:ea:3e:64:b1:3d:ef:d9:53:85:ed:fa:7f:6e:54:21:ce: 83:be:bf:15:f4:f9:d8:e2:24:98:9a:d0:3c:04:69:13:8a:b1: 99:04:bb:b4:37:fb:6d:cf:c9:d8:7c:7f:9a:52:3d:e2:b4:cb: 46:4e:b2:8d:3f:e5:11:8b:3c:5d:de:30:d2:9a:b1:41:ac:ad: 85:9a:ca:66:bf:e9:1c:5d:80:de:e9:51:49:35:ae:93:03:b2: 3b:a4:92:6b:8f:f5:f0:76:ac:4b:05:c2:5f:72:7e:a1:ca:cf: 8d:5f:11:69 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUcd2OmRcUskhir/CMKGK0THqbcSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTIwMzAwMTBaFw0yNTEyMTcyMzU5NTlaMHoxSTBHBgNV BAUTQGQzNjQwNmI0NzAyMjczODRlNWVmOGVlMjVmODcwYjgxZmMyMmJiMjJjMWQ0 ODVjZjZjZGRlNWE1NDdiM2U1ZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF08QKvNzSpaJf039nwl+7sM5tUQS8xl4il98Tlm8d+h59PTBYSVx02R5oG bfHjRxkjFqOtgqQ97UsK93ctD7QpcSnDHBsLQMVnkZVnEwlpOVUpf5y56NTvIqdC dKjhQvOEJXf4gOec6Gg/tbS0+IjVX3jeZcKLlExFAeaNRmG7YnPwYfidlm+ODgBr b8SEmy4DWb833jGv9I0K3b3noGRd9H4uFO/fJ/kWTYdtYwcna9xyxBWJBb0aydrq cIF0GKGqNCd5IzZ1+TIS+HDrF5h3LMM/EmM2PwkLizMiTxgWuXaNhktklDTVntg/ Rw/Sc93Gx7lLZL0ZSFee5L1SXKsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSAuTna zqMtxEpRQlc9Tz4TNP/2bjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDgyMDI0MzItNjEwYy00MmIyLTk3NjMtZTg5NWM2Y2JlNzBkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HYQ ADANBgkqhkiG9w0BAQsFAAOCAQEAyjiaqeBHnHJQ4EyDudqJS8xXt/+kdzyeQHN0 dSEzubjY2bSC274McJ1jQ45SDC5RXLitarU0Q8Mfp5B3UL/zMrfBYeHu+y8LMAdM 0MkKrN6c6CJeM4sBBkw/1s5Y745YcqbIb0RbBzBou/eBF8sPXEGX4NWHF0Ht+a4V z54947b8sTUUW6W1ErmNHwtUNBhMqw3qPmSxPe/ZU4Xt+n9uVCHOg76/FfT52OIk mJrQPARpE4qxmQS7tDf7bc/J2Hx/mlI94rTLRk6yjT/lEYs8Xd4w0pqxQaythZrK Zr/pHF2A3ulRSTWukwOyO6SSa4/18HasSwXCX3J+ocrPjV8RaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:42 2025 by rpki-client