This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa File: 4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa (raw, json) Hash identifier: pAlG4cc+iuFy0bImcLcPof0KeHVbNDikNSwWBjTVMU0= Subject key identifier: 63:0C:C9:BD:C8:0C:DB:0E:69:9A:F6:BD:3A:34:EC:B1:E7:AE:FB:C6 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7994A6319429D1324ED9886641B0D48AC2947025 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa Signing time: Tue 18 Nov 2025 00:30:10 +0000 ROA not before: Tue 18 Nov 2025 00:30:10 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d034:6040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:94:a6:31:94:29:d1:32:4e:d9:88:66:41:b0:d4:8a:c2:94:70:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:30:10 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=87ef96e2c007596f7e5bf71f54b6e01a3a1d4a44dc13a563cdb61e11e7be27c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:d5:c0:9e:dc:a0:cb:99:fe:1e:7a:c9:02: ea:c0:82:7e:82:08:da:24:a5:a4:d8:77:1a:23:95: 34:37:fb:9b:ef:e0:d7:87:3b:60:27:54:36:1f:0c: 74:7b:b8:13:82:ca:6a:84:59:b5:8c:d1:f9:d7:47: 42:f9:ca:20:a5:f3:27:70:0e:f4:bd:80:ec:37:ff: 8c:a0:71:03:2d:25:f8:aa:cc:75:0b:da:37:39:33: bf:8a:88:0f:01:c8:7c:ff:91:e0:28:75:f7:7a:96: 8c:e7:67:33:08:43:3f:95:f5:1d:69:7b:7a:a2:75: 63:a8:c4:14:3e:17:e7:71:1b:5c:8c:2b:5a:62:be: 55:4c:4e:ed:04:4b:30:74:c4:ce:23:7d:59:20:07: 64:4b:e0:98:a3:28:60:59:54:a8:5e:3a:e9:0b:b6: 2d:09:44:0d:86:83:23:f4:32:ae:c3:d5:df:9f:39: 0c:b3:8a:d1:52:a8:66:41:f0:05:22:80:ff:2c:48: 00:60:48:e3:1a:a4:14:40:87:77:65:06:85:f2:49: 0f:c7:91:c0:5f:69:65:b9:f6:71:f6:ea:ce:e7:f6: 58:1d:01:50:23:3d:bc:e8:ec:ea:bf:23:05:b5:15: 37:96:f8:ec:61:b5:3f:09:e1:30:04:d9:47:ce:60: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:C9:BD:C8:0C:DB:0E:69:9A:F6:BD:3A:34:EC:B1:E7:AE:FB:C6 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d034:6040::/46 Signature Algorithm: sha256WithRSAEncryption 0e:31:9b:98:63:55:e7:bc:87:93:1a:5b:f8:b8:c1:05:30:31: b8:59:cd:64:db:12:a3:97:3e:95:05:ec:b2:e1:9d:a2:e3:3c: ac:5f:cb:59:e2:5c:d8:fd:5c:3c:97:5e:43:c4:03:94:ef:ec: 0e:c8:1e:af:38:40:9a:58:01:f1:75:21:c8:fa:7b:b4:90:7e: 7e:c1:1e:37:d5:07:55:1c:4d:35:84:57:77:98:2c:82:4b:57: fb:71:85:92:79:4c:1e:c0:b3:76:53:31:9c:27:40:ae:1b:f8: c5:39:d8:44:fb:02:09:1f:6a:85:79:91:5b:f1:e4:38:13:3a: 1a:a0:26:e5:89:9d:e8:f4:5c:8a:08:48:e1:71:85:d7:26:3a: a5:b8:48:f2:6e:4e:02:b8:98:67:3c:4d:81:c7:c1:de:4d:69: 29:ae:07:8e:b1:38:ce:68:65:cc:a4:5f:4f:f9:25:78:0f:7c: 7e:42:ec:81:9a:f2:1e:b7:51:77:9b:16:f1:70:e3:09:99:52: 42:14:e5:94:0f:69:71:b1:13:7f:f3:17:e7:0f:a5:f5:31:65: 57:83:2d:83:2f:b9:32:78:80:6a:ba:85:70:4f:3a:52:3f:5f: c6:f4:81:15:a7:bf:42:45:41:f4:e0:66:4a:2a:32:5f:93:ba: 1c:45:5c:f0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUeZSmMZQp0TJO2YhmQbDUisKUcCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDMwMTBaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDg3ZWY5NmUyYzAwNzU5NmY3ZTViZjcxZjU0YjZlMDFhM2ExZDRhNDRkYzEz YTU2M2NkYjYxZTExZTdiZTI3YzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7W1cCe3KDLmf4eeskC6sCCfoII2iSlpNh3GiOVNDf7m+/g14c7YCdUNh8M dHu4E4LKaoRZtYzR+ddHQvnKIKXzJ3AO9L2A7Df/jKBxAy0l+KrMdQvaNzkzv4qI DwHIfP+R4Ch193qWjOdnMwhDP5X1HWl7eqJ1Y6jEFD4X53EbXIwrWmK+VUxO7QRL MHTEziN9WSAHZEvgmKMoYFlUqF466Qu2LQlEDYaDI/QyrsPV3585DLOK0VKoZkHw BSKA/yxIAGBI4xqkFECHd2UGhfJJD8eRwF9pZbn2cfbqzuf2WB0BUCM9vOjs6r8j BbUVN5b47GG1PwnhMATZR85gCTUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRjDMm9 yAzbDmma9r06NOyx5677xjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGFiZjFiMDQtMDI1Ni00MDRmLWE0YzctNWQxYzJjOGFkOWI3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DRg QDANBgkqhkiG9w0BAQsFAAOCAQEADjGbmGNV57yHkxpb+LjBBTAxuFnNZNsSo5c+ lQXssuGdouM8rF/LWeJc2P1cPJdeQ8QDlO/sDsgerzhAmlgB8XUhyPp7tJB+fsEe N9UHVRxNNYRXd5gsgktX+3GFknlMHsCzdlMxnCdArhv4xTnYRPsCCR9qhXmRW/Hk OBM6GqAm5Ymd6PRcighI4XGF1yY6pbhI8m5OAriYZzxNgcfB3k1pKa4HjrE4zmhl zKRfT/kleA98fkLsgZryHrdRd5sW8XDjCZlSQhTllA9pcbETf/MX5w+l9TFlV4Mt gy+5MniAarqFcE86Uj9fxvSBFae/QkVB9OBmSioyX5O6HEVc8A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:10 2025 by rpki-client