This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa File: 56c31249-f32b-4fc4-a69f-07420913a101.roa (raw, json) Hash identifier: 1ojYF98t7UiyOhbH0+VIy35y2J24rMYGeW4mtL0ik30= Subject key identifier: 32:F7:EF:56:AF:B4:40:B9:10:50:81:79:36:63:78:54:3E:46:F6:85 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 280158857B13A9307117D90D2155BFB7948C3D74 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa Signing time: Tue 25 Nov 2025 20:01:05 +0000 ROA not before: Tue 25 Nov 2025 20:01:05 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:01:58:85:7b:13:a9:30:71:17:d9:0d:21:55:bf:b7:94:8c:3d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:01:05 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=90c8289e112863d39c1653deb3f37e2f68bfced60add8e04a7a6efb4eb58c0f5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:87:44:71:a4:52:4b:c6:88:97:2c:63:0f:25: 73:f1:ef:b5:49:d2:ba:66:ab:f6:2d:24:e4:ad:d6: 0a:4f:5d:a3:e6:e1:d6:51:e3:b4:31:da:65:1e:fb: 56:2f:0e:6c:04:cf:9f:7a:69:2c:74:bd:66:cc:c4: d4:bd:a6:18:17:8a:61:70:e0:74:bd:34:54:23:fe: d0:21:42:08:8d:67:90:92:6b:21:a3:40:8c:62:e2: 30:0d:6b:af:ab:85:d8:1d:92:4e:49:34:56:c3:59: 9d:0d:82:2a:7b:15:aa:60:59:4d:65:d1:7d:0e:9a: 0e:65:5d:1e:79:b5:d3:77:fb:e0:56:65:eb:54:c6: 15:b0:cb:7e:d2:19:27:32:ec:1d:e1:4a:0b:fd:fc: 30:1c:86:fa:bc:f5:96:aa:2a:6b:f6:c7:7e:49:52: 61:7f:50:a1:df:95:87:81:bb:7e:b3:0d:db:e8:ef: 87:a6:97:10:3f:64:93:c9:04:11:34:95:6f:34:d5: 13:01:11:72:f6:13:b0:a2:43:e3:6d:b7:d5:29:89: 10:8d:68:6a:05:77:8f:5d:f0:02:fd:e4:f9:4b:e0: 28:79:27:77:ed:28:9b:e6:0d:5c:92:c3:73:d6:92: 1b:b9:4b:6f:9d:1a:bf:96:49:6c:2b:00:e0:2d:c3: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:EF:56:AF:B4:40:B9:10:50:81:79:36:63:78:54:3E:46:F6:85 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:4000::/40 Signature Algorithm: sha256WithRSAEncryption 49:ad:6c:44:57:52:6a:46:f2:fa:90:42:7b:5b:e4:42:1a:5f: 30:ab:88:f3:06:ce:16:51:01:c2:64:5c:0a:a9:8f:5c:08:7f: fc:67:d1:73:85:4a:72:1f:55:8d:96:3b:bb:65:00:c0:89:30: 44:86:03:14:09:99:89:13:29:36:b5:d3:1d:56:e4:65:eb:7c: 2a:a6:7b:cc:9a:8a:f5:03:ed:59:4e:19:87:77:2b:2c:78:43: bd:cd:3c:43:b6:17:ec:03:c9:d0:56:9e:67:35:2b:ee:6f:74: 7d:b6:17:7d:6f:1a:9e:9c:c3:df:b9:cf:f5:7c:d2:04:0f:33: 33:ec:64:43:6d:51:c6:d6:d7:df:85:12:47:0c:12:6d:fc:de: c3:33:8a:2a:ef:05:00:da:7a:36:f4:c7:2a:2e:99:2d:9d:2b: 5f:f9:e3:18:eb:93:20:ad:7e:0a:e6:89:44:b3:65:d8:c8:e8: 04:ae:de:5e:43:73:f9:a4:e6:6e:c1:5a:04:76:b8:22:98:ec: 84:5c:53:9a:15:a6:fd:e6:5e:95:24:15:fd:2c:bc:c3:90:64: 9d:75:c9:1a:53:41:b7:88:1b:36:5f:fc:e0:c4:1d:7a:b8:cd: e9:37:86:8c:72:08:f6:79:9e:2f:87:e6:6c:6b:57:9c:6b:24: d7:e7:a0:26 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUKAFYhXsTqTBxF9kNIVW/t5SMPXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAxMDVaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDkwYzgyODllMTEyODYzZDM5YzE2NTNkZWIzZjM3ZTJmNjhiZmNlZDYwYWRk OGUwNGE3YTZlZmI0ZWI1OGMwZjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqHRHGkUkvGiJcsYw8lc/HvtUnSumar9i0k5K3WCk9do+bh1lHjtDHaZR77 Vi8ObATPn3ppLHS9ZszE1L2mGBeKYXDgdL00VCP+0CFCCI1nkJJrIaNAjGLiMA1r r6uF2B2STkk0VsNZnQ2CKnsVqmBZTWXRfQ6aDmVdHnm103f74FZl61TGFbDLftIZ JzLsHeFKC/38MByG+rz1lqoqa/bHfklSYX9Qod+Vh4G7frMN2+jvh6aXED9kk8kE ETSVbzTVEwERcvYTsKJD42231SmJEI1oagV3j13wAv3k+UvgKHknd+0om+YNXJLD c9aSG7lLb50av5ZJbCsA4C3DaYsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQy9+9W r7RAuRBQgXk2Y3hUPkb2hTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTZjMzEyNDktZjMyYi00ZmM0LWE2OWYtMDc0MjA5MTNhMTAxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HJA MA0GCSqGSIb3DQEBCwUAA4IBAQBJrWxEV1JqRvL6kEJ7W+RCGl8wq4jzBs4WUQHC ZFwKqY9cCH/8Z9FzhUpyH1WNlju7ZQDAiTBEhgMUCZmJEyk2tdMdVuRl63wqpnvM mor1A+1ZThmHdysseEO9zTxDthfsA8nQVp5nNSvub3R9thd9bxqenMPfuc/1fNIE DzMz7GRDbVHG1tffhRJHDBJt/N7DM4oq7wUA2no29McqLpktnStf+eMY65MgrX4K 5olEs2XYyOgErt5eQ3P5pOZuwVoEdrgimOyEXFOaFab95l6VJBX9LLzDkGSddcka U0G3iBs2X/zgxB16uM3pN4aMcgj2eZ4vh+Zsa1ecayTX56Am -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:01 2025 by rpki-client