This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa File: 5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa (raw, json) Hash identifier: 4knZjlG77Npaik0FhT4LyZUrC28GDLYbEr0IeHBgxGM= Subject key identifier: 82:17:2D:F5:2C:A5:83:89:30:56:2B:5B:FA:B4:A3:8B:88:5C:CB:E8 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 13D61B5975FFDA355E465F469F7ADEF62319FC24 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa Signing time: Sat 15 Nov 2025 05:41:04 +0000 ROA not before: Sat 15 Nov 2025 05:41:04 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d016:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d6:1b:59:75:ff:da:35:5e:46:5f:46:9f:7a:de:f6:23:19:fc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:41:04 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=f7d84d0b786884fde09016011cefff049793d995418cc91c733f4af7beaeb31a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:ee:1d:c6:13:6a:17:1b:2f:01:54:36:3b: 6e:87:76:85:95:fe:c2:86:a8:8e:fe:83:9e:06:7d: b1:71:f8:71:db:5f:da:b5:79:6b:2a:67:cf:c7:1b: e1:4b:58:1c:e4:31:9a:0e:bc:ee:6d:b9:ac:dc:bf: 88:c8:0e:a2:a0:3c:dc:ab:0b:f1:70:66:51:59:9e: b1:22:82:68:3b:90:27:58:1c:95:79:5e:51:16:db: 29:12:79:7a:3e:db:65:f0:71:68:7b:5f:d7:7b:bb: 21:e5:fa:d9:15:d7:a3:17:2d:1d:81:d4:53:c1:a1: bb:0c:26:89:82:8a:de:cb:5b:8c:10:9c:08:11:d9: c8:f5:e8:22:da:29:08:03:95:65:80:7a:ef:7d:b9: c9:33:fe:33:54:ba:60:93:23:04:63:73:51:f9:06: b8:70:91:f2:95:b0:c2:f6:4d:f7:68:dd:8b:5e:1a: d7:7d:c5:88:b8:03:ca:c7:bc:a8:32:df:8b:49:40: 01:3f:fc:9e:68:d8:85:e6:11:0c:42:83:80:60:ac: 5d:a7:cb:c5:db:5e:10:a1:18:bb:f1:9d:ad:4a:f1: f5:31:40:42:00:44:66:e9:c7:45:cc:39:37:de:25: a6:14:be:1c:e7:f8:23:c7:cb:ce:bb:59:ef:45:0d: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:17:2D:F5:2C:A5:83:89:30:56:2B:5B:FA:B4:A3:8B:88:5C:CB:E8 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d016:c00::/38 Signature Algorithm: sha256WithRSAEncryption be:bc:7a:55:a9:d1:05:47:df:5e:05:0a:af:c5:62:35:e9:7c: e9:3d:6e:98:c3:74:fe:33:08:1e:74:ec:64:e8:48:0f:5d:76: 09:70:9b:9a:c0:85:e8:12:2d:7f:a9:75:ef:b3:2b:b7:be:1a: 27:98:f5:65:cc:36:f7:23:d4:94:00:46:62:09:5e:fc:44:77: b3:a1:e4:a9:24:56:49:a0:af:63:d7:9a:7b:13:30:e1:f5:6a: 9f:e9:30:e4:0d:5c:5d:74:4d:14:b7:95:64:42:08:24:82:1f: fc:d0:cc:1f:2f:22:0f:a9:1d:dc:54:df:7d:4a:21:fc:15:e9: d8:53:35:61:75:c5:c3:0c:22:cd:c4:20:c0:bc:44:86:51:ec: 55:44:61:1f:8a:27:cc:2a:55:a1:4b:c9:b8:b1:cd:ea:ab:ae: 82:71:81:1d:a7:86:71:01:a2:04:8c:5f:f9:79:38:4d:ca:8f: ff:03:b3:b0:3b:1d:65:59:69:1e:3b:40:1a:2b:a9:0d:23:2a: e8:8e:b3:2b:c3:be:43:4d:9b:68:31:a1:4c:c5:93:9f:c7:3d: 6a:e7:e3:b4:43:50:4b:33:77:92:09:11:f9:b7:d1:cb:8f:e2: 5d:ca:a8:fb:97:76:00:d2:09:f0:f7:ad:e2:76:3e:9d:97:0c: 23:4b:ae:f3 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUE9YbWXX/2jVeRl9Gn3re9iMZ/CQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTQxMDRaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGY3ZDg0ZDBiNzg2ODg0ZmRlMDkwMTYwMTFjZWZmZjA0OTc5M2Q5OTU0MThj YzkxYzczM2Y0YWY3YmVhZWIzMWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHK7h3GE2oXGy8BVDY7bod2hZX+woaojv6DngZ9sXH4cdtf2rV5aypnz8cb 4UtYHOQxmg687m25rNy/iMgOoqA83KsL8XBmUVmesSKCaDuQJ1gclXleURbbKRJ5 ej7bZfBxaHtf13u7IeX62RXXoxctHYHUU8GhuwwmiYKK3stbjBCcCBHZyPXoItop CAOVZYB67325yTP+M1S6YJMjBGNzUfkGuHCR8pWwwvZN92jdi14a133FiLgDyse8 qDLfi0lAAT/8nmjYheYRDEKDgGCsXafLxdteEKEYu/GdrUrx9TFAQgBEZunHRcw5 N94lphS+HOf4I8fLzrtZ70UNlrsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSCFy31 LKWDiTBWK1v6tKOLiFzL6DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTg1NGUwNmEtYzgyNS00MGZlLWJmNTEtNWI3N2QzYmE0ZDAyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYM MA0GCSqGSIb3DQEBCwUAA4IBAQC+vHpVqdEFR99eBQqvxWI16XzpPW6Yw3T+Mwge dOxk6EgPXXYJcJuawIXoEi1/qXXvsyu3vhonmPVlzDb3I9SUAEZiCV78RHezoeSp JFZJoK9j15p7EzDh9Wqf6TDkDVxddE0Ut5VkQggkgh/80MwfLyIPqR3cVN99SiH8 FenYUzVhdcXDDCLNxCDAvESGUexVRGEfiifMKlWhS8m4sc3qq66CcYEdp4ZxAaIE jF/5eThNyo//A7OwOx1lWWkeO0AaK6kNIyrojrMrw75DTZtoMaFMxZOfxz1q5+O0 Q1BLM3eSCRH5t9HLj+Jdyqj7l3YA0gnw963idj6dlwwjS67z -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:44 2025 by rpki-client