This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa File: 48b510e0-0d59-48d3-96c5-ddb87c118e43.roa (raw, json) Hash identifier: w586KRF+A+ohA+CQXQdP6QuEiFWhHN2hZPWk+kfCpA0= Subject key identifier: 07:87:0B:02:2D:DB:97:DA:55:DC:4B:48:FE:0A:D0:70:00:4F:A1:ED Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 01EFA7A06EA61D3A09CC1CAC33330ED4E4078B60 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa Signing time: Sat 15 Nov 2025 05:30:55 +0000 ROA not before: Sat 15 Nov 2025 05:30:55 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ef:a7:a0:6e:a6:1d:3a:09:cc:1c:ac:33:33:0e:d4:e4:07:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:30:55 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=8426997ba3530b635d9e24f8f34ddbb21049ef64adeb03a159ef62387d3a3f0d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:62:eb:e8:6c:cb:f1:14:07:ac:e9:45:9b: ce:d5:c6:9d:4d:5d:c4:b8:12:e8:19:fd:18:4a:54: dc:e6:3e:47:75:b0:5d:ab:cc:84:9c:75:e8:b0:6e: ea:28:8b:af:a6:02:da:68:ac:ca:5a:2a:11:88:87: b3:d9:ff:3e:24:2e:82:6e:18:28:d4:fc:68:9b:d4: 63:3c:92:6a:65:42:b0:af:e6:0f:b5:b7:02:0d:c3: 2a:78:c7:a7:9b:f9:41:14:72:d0:b6:cb:c7:ef:55: 63:1f:12:55:76:72:e4:d9:f0:eb:ee:f4:a5:18:d2: 02:29:62:af:e3:cd:c1:30:2c:5e:12:6d:e0:bb:1d: 5f:a6:80:7f:22:ad:44:6a:8e:fe:82:d2:f0:f9:71: 2d:7e:5c:89:9e:78:a3:18:0a:20:34:cf:0d:36:2e: f9:bc:9b:63:37:34:43:6b:d0:48:59:82:be:06:0f: d1:4a:c9:59:c3:6c:95:7e:28:56:ca:44:12:33:cc: 28:73:12:cf:69:ad:ed:08:07:78:5a:7e:24:5c:9a: 4f:5f:78:b6:b3:d3:73:b9:75:f3:e4:4e:5f:31:b6: cd:c8:09:67:a3:8a:9f:f9:ee:f3:19:f1:a0:3d:41: 44:ef:41:59:8a:bc:c6:4f:88:bf:8d:5c:86:8e:99: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:0B:02:2D:DB:97:DA:55:DC:4B:48:FE:0A:D0:70:00:4F:A1:ED X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:4020::/48 Signature Algorithm: sha256WithRSAEncryption 6a:a3:e1:b0:9a:c4:c7:96:c7:70:cd:41:b9:2a:cc:91:ac:b2: b0:42:13:50:6d:57:ec:5c:d6:a2:32:5c:38:41:3f:64:b3:ab: af:99:19:c3:be:91:62:68:6f:4e:1b:09:92:cb:3f:85:c4:5a: 7f:66:e0:e4:01:e4:d9:f9:62:ba:35:cc:ad:9a:93:c5:e8:93: 43:33:8a:8b:34:c6:ca:4a:95:64:b0:ba:4b:19:a3:60:8d:5e: 60:24:16:b1:a0:a6:31:e2:5b:3e:a6:a4:8d:40:65:a0:99:7f: 84:1e:b5:94:b6:ed:66:b4:82:64:b0:ef:c4:2f:a9:b7:ad:ef: bf:8d:ae:ec:f2:b4:3a:dd:a5:98:3c:3f:83:7b:94:13:4f:a8: dd:d9:92:c4:69:23:2c:d4:ca:ca:74:4e:3e:36:fa:80:af:06: fb:7d:d9:45:1f:06:25:e3:8f:8c:31:5b:df:8d:9f:a9:2d:0c: 7b:50:9c:a0:55:d7:a7:e6:a9:87:68:09:cd:04:46:32:b9:a1: 68:72:30:fa:31:62:23:d1:73:ba:96:7a:7a:68:77:07:95:2e: 3e:52:b9:1c:5c:1b:2f:d7:10:33:21:ff:d0:11:bb:0a:9c:66: 34:60:83:31:da:c6:d4:40:91:f6:6c:7e:6b:05:30:c1:07:e9: 83:93:f0:6c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAe+noG6mHToJzBysMzMO1OQHi2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMwNTVaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDg0MjY5OTdiYTM1MzBiNjM1ZDllMjRmOGYzNGRkYmIyMTA0OWVmNjRhZGVi MDNhMTU5ZWY2MjM4N2QzYTNmMGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKTLYuvobMvxFAes6UWbztXGnU1dxLgS6Bn9GEpU3OY+R3WwXavMhJx16LBu 6iiLr6YC2misyloqEYiHs9n/PiQugm4YKNT8aJvUYzySamVCsK/mD7W3Ag3DKnjH p5v5QRRy0LbLx+9VYx8SVXZy5Nnw6+70pRjSAilir+PNwTAsXhJt4LsdX6aAfyKt RGqO/oLS8PlxLX5ciZ54oxgKIDTPDTYu+bybYzc0Q2vQSFmCvgYP0UrJWcNslX4o VspEEjPMKHMSz2mt7QgHeFp+JFyaT194trPTc7l18+ROXzG2zcgJZ6OKn/nu8xnx oD1BRO9BWYq8xk+Iv41cho6ZNU0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQHhwsC LduX2lXcS0j+CtBwAE+h7TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDhiNTEwZTAtMGQ1OS00OGQzLTk2YzUtZGRiODdjMTE4ZTQzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA IDANBgkqhkiG9w0BAQsFAAOCAQEAaqPhsJrEx5bHcM1BuSrMkayysEITUG1X7FzW ojJcOEE/ZLOrr5kZw76RYmhvThsJkss/hcRaf2bg5AHk2fliujXMrZqTxeiTQzOK izTGykqVZLC6SxmjYI1eYCQWsaCmMeJbPqakjUBloJl/hB61lLbtZrSCZLDvxC+p t63vv42u7PK0Ot2lmDw/g3uUE0+o3dmSxGkjLNTKynROPjb6gK8G+33ZRR8GJeOP jDFb342fqS0Me1CcoFXXp+aph2gJzQRGMrmhaHIw+jFiI9FzupZ6emh3B5UuPlK5 HFwbL9cQMyH/0BG7CpxmNGCDMdrG1ECR9mx+awUwwQfpg5PwbA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:53 2025 by rpki-client