This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa File: 52b24640-f60c-42e4-9476-345e951e2387.roa (raw, json) Hash identifier: lGjp7KMRe9oe+BNzDtKEWbgyQPxOkF0juOKKG/mNknM= Subject key identifier: 42:4B:95:8F:0F:86:60:5D:DA:52:F4:98:C0:61:D4:E2:A9:92:A1:C8 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 74A913CE1084911D99A7CA01398F1287EDECCF39 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa Signing time: Sat 15 Nov 2025 05:50:14 +0000 ROA not before: Sat 15 Nov 2025 05:50:14 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a9:13:ce:10:84:91:1d:99:a7:ca:01:39:8f:12:87:ed:ec:cf:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:50:14 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=b30ec5e509c9d1308efce6bc8d3a6402988a887e51c8e304304756ba9371f256, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:ce:f8:a5:a0:cc:c9:34:0d:95:0b:ee:cd: 0d:8c:2b:65:dd:46:a7:c7:d0:9b:8f:1d:e6:41:6e: c2:ba:cd:c1:d3:9a:14:d9:34:45:e1:42:7d:4c:be: 86:a9:9b:53:99:84:a8:d7:fb:41:20:32:62:ff:6f: 08:11:50:50:13:b6:25:a1:bf:16:0f:30:5e:ae:c9: b6:3b:f7:fd:3e:bd:2f:46:80:24:e8:c9:0a:c5:08: 50:4c:31:de:20:2f:35:38:3c:bf:c6:7f:df:49:da: 24:86:83:2d:b4:0e:15:b6:c5:cb:df:78:f8:75:c8: 4d:62:c8:6b:52:2a:13:28:2e:7b:1f:5b:8c:45:d6: c8:f9:35:b3:9d:20:fa:02:41:77:82:15:9a:7d:6c: e7:cb:9f:df:45:86:0a:6c:ad:6e:ba:2f:85:7b:a2: cc:67:a1:8f:92:1c:22:6e:a5:f3:bd:15:51:87:d3: 29:40:5b:cd:c1:08:e5:18:48:4c:9e:f5:67:1e:7a: 3d:4e:f4:03:d2:f3:3d:5a:e4:3e:89:50:b7:e0:6c: 26:c9:c0:bb:05:83:18:68:ca:5e:b9:42:7e:cd:f7: 16:53:74:0d:e7:fa:66:e2:75:41:83:67:c0:a6:81: 29:69:bf:a3:1a:7a:6b:8a:89:30:e6:2d:4c:09:ec: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:95:8F:0F:86:60:5D:DA:52:F4:98:C0:61:D4:E2:A9:92:A1:C8 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:5040::/48 Signature Algorithm: sha256WithRSAEncryption 82:a0:c2:47:57:76:bd:b7:ef:50:3e:c8:96:37:e0:9d:ae:69: 20:57:60:29:19:b6:78:56:41:5d:74:2c:c5:83:91:1f:82:36: 09:a7:ae:a0:a4:90:1f:ad:a1:e1:b9:83:06:ad:91:19:23:6c: db:57:c8:e2:af:35:1b:9a:32:24:2b:a7:eb:c2:37:42:91:4b: 1c:2f:40:fb:1b:de:35:e0:72:37:a4:20:d7:5f:08:b2:72:20: d3:47:6f:d2:d8:3d:8f:3f:ab:40:ce:70:9c:2e:36:12:cf:76: 90:e6:b4:df:09:a5:80:b3:0b:9c:63:46:38:f8:96:9c:bf:9f: 8b:66:b5:f8:35:92:45:d5:ef:d6:d0:e7:db:71:cc:97:78:e4: 50:25:5a:e8:b4:da:ed:32:f9:16:c6:af:53:11:24:1d:70:88: 9b:69:fc:85:74:58:3f:39:49:e7:c2:ef:23:44:fc:ff:36:50: 19:b0:2a:d9:f8:9b:2b:bd:67:07:1a:04:05:f5:fb:9b:a6:68: 57:20:c4:17:0e:5c:93:b3:0d:67:07:05:ed:f4:2a:5c:21:3d: 9f:f9:5a:65:64:5a:98:73:32:1f:d9:07:0c:ca:39:19:74:e2: 2d:22:c8:28:bd:63:5b:17:67:92:f4:b4:10:cd:4e:63:7d:dd: 11:5e:7c:07 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUdKkTzhCEkR2Zp8oBOY8Sh+3szzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTUwMTRaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGIzMGVjNWU1MDljOWQxMzA4ZWZjZTZiYzhkM2E2NDAyOTg4YTg4N2U1MWM4 ZTMwNDMwNDc1NmJhOTM3MWYyNTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHBzviloMzJNA2VC+7NDYwrZd1Gp8fQm48d5kFuwrrNwdOaFNk0ReFCfUy+ hqmbU5mEqNf7QSAyYv9vCBFQUBO2JaG/Fg8wXq7Jtjv3/T69L0aAJOjJCsUIUEwx 3iAvNTg8v8Z/30naJIaDLbQOFbbFy994+HXITWLIa1IqEyguex9bjEXWyPk1s50g +gJBd4IVmn1s58uf30WGCmytbrovhXuizGehj5IcIm6l870VUYfTKUBbzcEI5RhI TJ71Zx56PU70A9LzPVrkPolQt+BsJsnAuwWDGGjKXrlCfs33FlN0Def6ZuJ1QYNn wKaBKWm/oxp6a4qJMOYtTAnsv50CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRCS5WP D4ZgXdpS9JjAYdTiqZKhyDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTJiMjQ2NDAtZjYwYy00MmU0LTk0NzYtMzQ1ZTk1MWUyMzg3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9Q QDANBgkqhkiG9w0BAQsFAAOCAQEAgqDCR1d2vbfvUD7Iljfgna5pIFdgKRm2eFZB XXQsxYORH4I2CaeuoKSQH62h4bmDBq2RGSNs21fI4q81G5oyJCun68I3QpFLHC9A +xveNeByN6Qg118IsnIg00dv0tg9jz+rQM5wnC42Es92kOa03wmlgLMLnGNGOPiW nL+fi2a1+DWSRdXv1tDn23HMl3jkUCVa6LTa7TL5FsavUxEkHXCIm2n8hXRYPzlJ 58LvI0T8/zZQGbAq2fibK71nBxoEBfX7m6ZoVyDEFw5ck7MNZwcF7fQqXCE9n/la ZWRamHMyH9kHDMo5GXTiLSLIKL1jWxdnkvS0EM1OY33dEV58Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:38 2025 by rpki-client