This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa File: 4a799a36-6e8c-4ca7-be23-5388518d8f95.roa (raw, json) Hash identifier: KUYlLMD4RvGhvbiSYDSbs9S+hUtIklBJCWGjbOLeR3o= Subject key identifier: 62:81:6B:E6:50:FD:E4:16:C3:3C:B0:4E:C7:81:AF:C4:55:1F:52:92 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 503105FC5805F82B7D91AE5F1A8D49673ADE843B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa Signing time: Tue 18 Nov 2025 00:40:04 +0000 ROA not before: Tue 18 Nov 2025 00:40:04 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d01f::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:31:05:fc:58:05:f8:2b:7d:91:ae:5f:1a:8d:49:67:3a:de:84:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:40:04 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=d99189a3e1fc125366d9eb785b47f77db6d06f619bc4d3a8363f3881ab774116, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:6c:42:e7:46:6d:0c:f6:a8:5e:2a:d1:da: ec:4e:a4:dd:0d:68:d3:af:2b:ba:76:a3:01:20:c0: 09:f6:f0:04:00:e2:b1:96:27:b1:af:b3:3e:f3:2d: f5:49:b6:86:48:5f:47:73:61:28:a1:ed:c3:e6:6d: 86:a0:a9:81:ef:18:8e:a5:92:04:6d:e0:9e:a6:f1: 53:ff:54:e1:98:6e:f9:08:c7:13:75:e4:c1:a0:94: af:51:d2:c8:13:02:c1:9e:4e:25:54:fa:e8:5f:43: 01:ed:81:70:89:81:08:8f:f3:9a:47:ea:6e:c0:ce: 1e:68:c5:03:05:a5:ea:0e:a0:65:cd:f2:cb:6c:f8: 32:ef:b2:ee:e2:04:f6:ef:54:d8:a5:c8:6c:60:87: c8:71:47:3f:51:76:af:4b:78:f2:64:ea:20:bb:b5: 3d:2c:6e:6d:d2:81:7b:9c:f9:38:d2:71:64:ae:11: a3:24:f6:dd:7d:c3:62:ab:2d:5f:0e:85:72:4d:3e: e2:a5:4a:d8:b1:4a:f0:d5:38:9a:b3:a8:96:fa:9d: 45:e5:f3:b2:88:8e:59:43:de:cb:37:2a:a3:3d:3a: 7c:ce:3a:af:c7:ed:45:f7:32:4d:22:cc:a1:c6:92: 89:1e:6f:ed:77:80:79:5a:2f:b5:b9:70:e9:c3:3d: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:81:6B:E6:50:FD:E4:16:C3:3C:B0:4E:C7:81:AF:C4:55:1F:52:92 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d01f::/36 Signature Algorithm: sha256WithRSAEncryption 28:9a:82:59:94:2e:25:73:4a:13:13:55:50:73:a9:68:19:55: a0:78:7e:4a:60:70:3f:0f:14:14:f7:30:d7:ca:7f:69:51:99: 36:0b:64:b3:3f:05:4f:82:e4:4c:a6:d8:83:99:d5:41:a5:cf: 36:7c:c7:7b:a9:cf:b5:46:76:13:bf:57:96:f1:18:5c:9a:a6: 98:89:12:a1:12:67:06:8f:df:f5:dc:17:dd:52:b3:da:c1:ad: eb:ec:d8:34:f6:f2:57:cb:32:7e:c2:a8:52:92:40:b3:f4:72: 67:43:6f:bd:88:70:0d:5e:e3:4c:93:76:36:d4:76:40:e1:75: e4:71:68:21:ec:d9:8c:18:e2:c4:3a:42:77:df:7a:59:d1:6b: 76:55:9c:ed:dd:56:ba:35:91:86:fe:e0:00:d9:ae:eb:8d:22: 45:05:d4:41:38:77:e0:76:bd:ce:84:fc:5c:a1:f0:47:e0:b1: f9:a1:d0:7c:42:9f:e5:f3:7d:25:3a:26:6a:14:9d:36:96:46: 0b:4e:19:c1:e6:9f:42:42:ba:e9:7b:97:1d:24:17:36:56:62: 41:8e:1d:48:af:87:06:13:30:d2:52:1c:34:c5:ae:11:d3:06: e5:20:64:95:a2:f0:e8:5a:52:4c:67:f6:3c:ac:b4:d4:9f:41: 6b:ee:a8:83 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUUDEF/FgF+Ct9ka5fGo1JZzrehDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDQwMDRaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQGQ5OTE4OWEzZTFmYzEyNTM2NmQ5ZWI3ODViNDdmNzdkYjZkMDZmNjE5YmM0 ZDNhODM2M2YzODgxYWI3NzQxMTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwGbELnRm0M9qheKtHa7E6k3Q1o068runajASDACfbwBADisZYnsa+zPvMt 9Um2hkhfR3NhKKHtw+ZthqCpge8YjqWSBG3gnqbxU/9U4Zhu+QjHE3XkwaCUr1HS yBMCwZ5OJVT66F9DAe2BcImBCI/zmkfqbsDOHmjFAwWl6g6gZc3yy2z4Mu+y7uIE 9u9U2KXIbGCHyHFHP1F2r0t48mTqILu1PSxubdKBe5z5ONJxZK4RoyT23X3DYqst Xw6Fck0+4qVK2LFK8NU4mrOolvqdReXzsoiOWUPeyzcqoz06fM46r8ftRfcyTSLM ocaSiR5v7XeAeVovtblw6cM9AgkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRigWvm UP3kFsM8sE7Hga/EVR9SkjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGE3OTlhMzYtNmU4Yy00Y2E3LWJlMjMtNTM4ODUxOGQ4Zjk1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0B8A MA0GCSqGSIb3DQEBCwUAA4IBAQAomoJZlC4lc0oTE1VQc6loGVWgeH5KYHA/DxQU 9zDXyn9pUZk2C2SzPwVPguRMptiDmdVBpc82fMd7qc+1RnYTv1eW8RhcmqaYiRKh EmcGj9/13BfdUrPawa3r7Ng09vJXyzJ+wqhSkkCz9HJnQ2+9iHANXuNMk3Y21HZA 4XXkcWgh7NmMGOLEOkJ333pZ0Wt2VZzt3Va6NZGG/uAA2a7rjSJFBdRBOHfgdr3O hPxcofBH4LH5odB8Qp/l830lOiZqFJ02lkYLThnB5p9CQrrpe5cdJBc2VmJBjh1I r4cGEzDSUhw0xa4R0wblIGSVovDoWlJMZ/Y8rLTUn0Fr7qiD -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:39 2025 by rpki-client