This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa File: 581266ac-af97-4864-a566-36693b593269.roa (raw, json) Hash identifier: tC53YcQrALk+K1XLjjMwAy+vd2hwdosrj5nMHOkL2rg= Subject key identifier: 59:04:54:28:7D:34:E6:0E:45:4D:FF:34:3E:96:2A:FA:5E:52:DC:F7 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5B10EFC47048D47AF6CC55CF07CDFE2E69AF73FF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa Signing time: Sat 15 Nov 2025 05:41:07 +0000 ROA not before: Sat 15 Nov 2025 05:41:07 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:10:ef:c4:70:48:d4:7a:f6:cc:55:cf:07:cd:fe:2e:69:af:73:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:41:07 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=d0e985fb4329484f16335211b019afeb99ff0fa94091ee716fcad225caffee0a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:6c:b8:57:1b:14:c1:ab:38:e2:3f:89:ca: 85:c1:73:34:db:07:30:43:ce:c8:c9:98:a8:11:80: a0:44:73:8c:07:de:3b:a8:25:86:04:8a:6d:a5:cd: 19:63:c4:1a:6a:ad:83:21:1e:2d:7a:f8:dd:67:1d: a1:81:82:9e:14:79:fa:3f:07:a2:b9:3a:d8:24:1b: bc:90:c1:8b:9c:74:1e:ed:70:bd:b5:de:7a:ae:1b: 3b:78:a2:1a:af:bb:30:fc:b4:89:ab:31:f0:64:e0: 1f:b2:fa:3c:d7:62:fe:6e:a8:6d:53:8a:a9:52:58: 98:96:9d:22:94:51:c6:60:c2:1b:04:3a:df:62:27: cf:cc:eb:90:05:a2:9a:dd:ad:a8:9f:cd:10:81:92: 62:18:0f:3d:65:ca:c6:e6:a3:cb:a5:0d:9c:b8:57: ae:80:df:81:26:e1:d3:6e:a6:95:af:5f:db:5e:40: 1b:61:32:8a:4b:e4:4a:78:ba:d8:f2:77:28:c4:10: ff:7c:03:d6:af:3e:8f:89:09:58:90:4e:45:77:2e: 6b:0d:9e:f5:08:7f:b8:c8:cf:65:49:30:c4:0b:3b: 3c:df:dd:55:94:f6:fb:52:72:bd:7b:19:a5:ff:32: c5:1f:07:9c:1a:c8:ca:97:2d:94:2e:12:b8:89:1a: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:04:54:28:7D:34:E6:0E:45:4D:FF:34:3E:96:2A:FA:5E:52:DC:F7 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:8000::/40 Signature Algorithm: sha256WithRSAEncryption 8b:ce:b1:a6:7f:c6:33:0a:89:11:5c:e3:ad:e1:9c:09:ad:46: 52:18:d1:9f:34:08:58:b4:8b:f9:56:c8:18:5b:23:66:78:46: 6e:6b:2f:8a:86:03:97:ad:c3:54:65:f3:f9:96:b8:15:48:88: 95:a3:26:c1:a6:6e:6f:46:68:b0:a9:c7:ea:d7:3a:fe:ec:88: d7:93:0d:eb:05:04:bb:44:2f:ff:2b:c1:32:35:d0:30:46:35: f8:8a:ca:29:dc:75:ef:b0:8d:f5:cb:8f:8b:73:e8:ac:e1:7b: ad:b8:e0:a3:37:a7:a7:2a:4b:19:85:48:56:04:e9:fb:d5:12: ab:76:e3:10:1d:43:37:ad:a5:a2:e1:71:a7:a4:10:fc:b2:bd: 67:b7:0a:58:d5:ae:4b:d9:59:88:52:56:1c:2e:98:74:48:79: 62:78:25:60:05:bc:f0:ff:e4:05:26:2e:d9:61:e0:2b:43:4f: 82:23:4a:c6:76:71:93:30:c3:d8:6f:b0:4d:03:2d:c9:f6:d6: e7:c1:55:22:ef:46:0a:a1:bd:db:6d:cb:33:c5:0b:32:c2:25: 21:24:13:2c:47:8b:47:a4:0a:db:44:da:1e:5a:d0:c4:21:a8: 20:e3:6c:17:98:81:d3:68:84:87:cb:1d:16:51:48:da:3c:b4: 61:ef:47:59 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUWxDvxHBI1Hr2zFXPB83+Lmmvc/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTQxMDdaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGQwZTk4NWZiNDMyOTQ4NGYxNjMzNTIxMWIwMTlhZmViOTlmZjBmYTk0MDkx ZWU3MTZmY2FkMjI1Y2FmZmVlMGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBtbLhXGxTBqzjiP4nKhcFzNNsHMEPOyMmYqBGAoERzjAfeO6glhgSKbaXN GWPEGmqtgyEeLXr43WcdoYGCnhR5+j8Hork62CQbvJDBi5x0Hu1wvbXeeq4bO3ii Gq+7MPy0iasx8GTgH7L6PNdi/m6obVOKqVJYmJadIpRRxmDCGwQ632Inz8zrkAWi mt2tqJ/NEIGSYhgPPWXKxuajy6UNnLhXroDfgSbh026mla9f215AG2EyikvkSni6 2PJ3KMQQ/3wD1q8+j4kJWJBORXcuaw2e9Qh/uMjPZUkwxAs7PN/dVZT2+1JyvXsZ pf8yxR8HnBrIypctlC4SuIka3csCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRZBFQo fTTmDkVN/zQ+lir6XlLc9zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTgxMjY2YWMtYWY5Ny00ODY0LWE1NjYtMzY2OTNiNTkzMjY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H+A MA0GCSqGSIb3DQEBCwUAA4IBAQCLzrGmf8YzCokRXOOt4ZwJrUZSGNGfNAhYtIv5 VsgYWyNmeEZuay+KhgOXrcNUZfP5lrgVSIiVoybBpm5vRmiwqcfq1zr+7IjXkw3r BQS7RC//K8EyNdAwRjX4isop3HXvsI31y4+Lc+is4XutuOCjN6enKksZhUhWBOn7 1RKrduMQHUM3raWi4XGnpBD8sr1ntwpY1a5L2VmIUlYcLph0SHlieCVgBbzw/+QF Ji7ZYeArQ0+CI0rGdnGTMMPYb7BNAy3J9tbnwVUi70YKob3bbcszxQsywiUhJBMs R4tHpArbRNoeWtDEIagg42wXmIHTaISHyx0WUUjaPLRh70dZ -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:40 2025 by rpki-client