This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa File: 53f71feb-77ff-438f-8d1f-e553194144d2.roa (raw, json) Hash identifier: nQ/2siyLBaTs68vqFwUd6OWpxjJKjnwPKCrp8Oc5SJc= Subject key identifier: 72:FC:88:88:04:2F:2A:45:06:D5:34:5B:27:0D:C9:C0:28:40:5F:0F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4B55D2F7E54CD3670D376656D96E9BA021230720 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa Signing time: Tue 25 Nov 2025 20:10:33 +0000 ROA not before: Tue 25 Nov 2025 20:10:33 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:55:d2:f7:e5:4c:d3:67:0d:37:66:56:d9:6e:9b:a0:21:23:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:10:33 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=63ac6477b15094dc8fcb05d61882ad7406c7d3077a7e3ba7a3602a847d5c7c3a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:9c:e9:8d:cb:34:49:50:61:8c:c0:16:86: f4:33:48:3e:c6:5e:3b:ba:b9:c3:5a:6c:46:5f:a9: 3c:7a:cd:80:ca:1e:a8:cc:69:0c:23:2b:4b:d8:27: 4e:36:44:3e:81:5f:42:63:2e:ca:17:45:86:f7:8b: 19:4c:7f:4f:ed:7b:1b:df:96:72:d3:89:e7:c4:39: 35:43:e0:61:d1:90:41:f6:92:8f:11:d4:41:26:e3: 78:5a:7e:70:d7:83:46:53:16:6a:cb:36:65:91:40: 14:0b:7d:4d:7f:c5:dd:30:ec:e1:f6:b8:06:52:06: 50:e8:40:58:7c:fd:ab:c7:e4:0b:33:3e:2a:f6:60: 23:40:e9:2b:af:f6:08:c3:75:6f:61:68:05:ea:ba: 09:c4:a8:d4:7f:40:a4:cd:ae:b2:7a:67:ea:04:99: eb:cd:3c:10:92:42:10:e1:c9:74:fd:61:bd:1e:96: f8:2d:a2:30:e4:52:94:da:73:88:be:33:96:13:fd: d0:74:54:05:d9:82:21:10:95:23:d5:3b:81:f7:fa: 24:a2:6e:54:7e:2d:57:ce:04:b1:ff:1c:67:a6:17: 5d:b4:0d:7a:4a:a7:6f:af:d2:27:00:53:28:8d:f0: 9c:0a:dc:37:a0:02:95:99:04:5f:ed:fe:c2:85:50: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FC:88:88:04:2F:2A:45:06:D5:34:5B:27:0D:C9:C0:28:40:5F:0F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53f71feb-77ff-438f-8d1f-e553194144d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:4020::/48 Signature Algorithm: sha256WithRSAEncryption 3f:a0:fe:1f:b5:c6:bd:96:6a:13:31:ee:de:ed:d2:fa:25:44: 1f:3e:99:e5:00:b1:68:98:37:e1:d3:31:3d:69:c3:42:a9:13: 28:e1:d4:2b:69:d8:84:0c:63:80:89:27:4c:ec:bc:b4:6c:6f: f9:5b:34:3c:b6:58:a8:75:7f:bf:66:f0:6a:a5:31:f1:fd:42: d5:71:bb:68:22:0b:82:6e:d6:7b:7a:f1:05:34:4f:4a:1f:33: 05:e1:2f:e3:90:35:4a:3c:0a:a9:49:cc:ca:92:4e:45:cf:d1: 87:e3:ac:fe:a0:61:ef:03:66:fa:36:8c:e0:ef:fb:b7:db:d5: e7:04:2c:42:db:73:f9:10:1d:ec:5e:12:93:1b:4b:13:99:23: 7c:f5:ca:20:4c:a3:f7:ba:26:3c:47:b5:11:ed:c3:8b:0f:ef: 53:24:fd:96:f6:a1:17:1a:44:5b:94:de:7e:e9:e2:3e:de:8e: 27:8c:4f:d6:20:52:c2:e9:66:31:61:1b:13:6a:09:b3:ad:91: 98:f6:72:45:32:7d:c2:f6:97:55:fa:03:f4:b2:55:3f:9f:ca: 06:ed:73:72:00:76:57:eb:fa:06:4c:6f:0b:38:69:2d:05:55: 42:5e:54:f7:ae:5b:a8:31:c1:64:45:90:32:c9:92:f6:c0:51: b1:8a:63:e7 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUS1XS9+VM02cNN2ZW2W6boCEjByAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDEwMzNaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDYzYWM2NDc3YjE1MDk0ZGM4ZmNiMDVkNjE4ODJhZDc0MDZjN2QzMDc3YTdl M2JhN2EzNjAyYTg0N2Q1YzdjM2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALr3nOmNyzRJUGGMwBaG9DNIPsZeO7q5w1psRl+pPHrNgMoeqMxpDCMrS9gn TjZEPoFfQmMuyhdFhveLGUx/T+17G9+WctOJ58Q5NUPgYdGQQfaSjxHUQSbjeFp+ cNeDRlMWass2ZZFAFAt9TX/F3TDs4fa4BlIGUOhAWHz9q8fkCzM+KvZgI0DpK6/2 CMN1b2FoBeq6CcSo1H9ApM2usnpn6gSZ6808EJJCEOHJdP1hvR6W+C2iMORSlNpz iL4zlhP90HRUBdmCIRCVI9U7gff6JKJuVH4tV84Esf8cZ6YXXbQNekqnb6/SJwBT KI3wnArcN6AClZkEX+3+woVQpeUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRy/IiI BC8qRQbVNFsnDcnAKEBfDzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTNmNzFmZWItNzdmZi00MzhmLThkMWYtZTU1MzE5NDE0NGQyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJA IDANBgkqhkiG9w0BAQsFAAOCAQEAP6D+H7XGvZZqEzHu3u3S+iVEHz6Z5QCxaJg3 4dMxPWnDQqkTKOHUK2nYhAxjgIknTOy8tGxv+Vs0PLZYqHV/v2bwaqUx8f1C1XG7 aCILgm7We3rxBTRPSh8zBeEv45A1SjwKqUnMypJORc/Rh+Os/qBh7wNm+jaM4O/7 t9vV5wQsQttz+RAd7F4SkxtLE5kjfPXKIEyj97omPEe1Ee3Diw/vUyT9lvahFxpE W5TefuniPt6OJ4xP1iBSwulmMWEbE2oJs62RmPZyRTJ9wvaXVfoD9LJVP5/KBu1z cgB2V+v6BkxvCzhpLQVVQl5U965bqDHBZEWQMsmS9sBRsYpj5w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:35 2025 by rpki-client