This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa File: 5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa (raw, json) Hash identifier: AAqnMAZ/TTyPmEX4urd/EIobPNGjLd0vCXiJwv64kTw= Subject key identifier: 17:F7:D8:90:5F:77:6B:02:C6:DB:A6:BB:D5:F5:CA:C8:2E:14:93:20 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7B71D13A2B64CB7E5270059E607CBEA94AFD6866 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa Signing time: Sat 15 Nov 2025 06:20:09 +0000 ROA not before: Sat 15 Nov 2025 06:20:09 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d025:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:71:d1:3a:2b:64:cb:7e:52:70:05:9e:60:7c:be:a9:4a:fd:68:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:09 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=eb63d47e4e03986b65d8c68d2a49eeff4c2809f59551dfc82b77ad69e7d2596f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:c0:b9:4e:a1:91:64:92:63:77:fb:5b:86: 6c:13:bf:61:fd:d8:78:9a:42:6e:8e:85:8f:a1:de: 9b:e1:57:2e:b8:c7:91:8b:6b:fa:88:4a:cc:03:d7: f2:5c:e3:32:8b:a5:f3:a4:f9:7c:33:ab:42:23:6b: ba:45:d1:d7:e0:c6:f3:83:69:30:75:7b:58:ef:13: f4:73:d9:31:89:3d:82:90:43:5c:86:30:bd:23:b0: ab:df:0e:38:11:2d:c5:cc:7e:29:b0:25:c6:82:4f: 34:99:a1:b3:f4:91:1c:ee:d6:16:1a:68:e6:05:51: e5:b9:ba:99:2d:31:cd:56:76:04:69:5f:b3:e6:6a: 2a:e1:f3:af:64:c2:eb:9c:15:ad:76:2e:ec:29:c7: 1e:84:64:65:3a:f5:e8:13:06:57:4c:c5:e8:b6:c7: b0:43:6a:3b:6e:67:6f:79:72:cd:cc:a6:d9:98:54: 4d:c0:5e:7e:a5:15:0f:c0:d5:4a:17:e8:99:81:ee: 04:da:17:c1:ad:2e:94:3a:47:f1:34:ec:3a:cb:c6: 10:f6:b4:6c:a4:00:ee:1d:b8:87:0e:f1:71:81:ba: 17:1b:ff:65:ef:88:4b:99:cf:b4:59:c1:2b:c9:df: e3:70:56:cf:da:81:d1:fc:8a:aa:01:08:c4:34:af: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:D8:90:5F:77:6B:02:C6:DB:A6:BB:D5:F5:CA:C8:2E:14:93:20 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d025:1000::/36 Signature Algorithm: sha256WithRSAEncryption 61:00:2c:8f:e4:81:0f:69:69:69:df:59:0d:25:1d:57:ae:51: 20:06:74:34:f7:7a:76:9e:87:ec:82:2c:fe:e1:59:2c:89:89: 87:14:e5:37:8b:8c:95:84:3b:cb:63:17:ff:fb:31:18:2c:68: 00:8b:cb:20:2d:15:61:48:c4:a8:e9:7e:85:62:10:59:4e:89: fc:a5:f9:51:8a:7f:d7:7c:f4:31:37:05:77:b8:91:44:bc:14: b9:46:55:6f:eb:37:bf:48:9b:6d:53:9d:22:61:37:dd:60:cc: 5d:5e:9f:93:ff:5b:c5:11:42:d5:41:bc:c9:8d:44:35:c7:59: 58:9f:89:1a:79:c3:1d:e3:84:fd:60:1b:2a:d3:21:ee:5d:fc: 3c:14:bc:6f:5f:42:26:7a:da:1d:07:9c:b1:0a:13:2f:93:57: 88:98:d2:72:0a:53:dd:8d:2c:d8:38:91:12:e7:c8:f3:06:6d: 6b:9e:fd:9d:54:20:ec:4a:aa:fc:07:72:68:dd:04:d2:c8:15: 2b:d2:a7:0c:cd:d1:e9:57:9c:65:97:0b:85:f3:be:89:72:f9: 66:bc:45:04:9a:48:57:ac:cf:10:50:a7:fc:76:2b:da:a4:aa: 93:6d:53:2e:56:f9:85:af:a7:e3:26:e6:f7:9a:ad:08:13:6b: 04:8d:8a:40 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUe3HROitky35ScAWeYHy+qUr9aGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwMDlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGViNjNkNDdlNGUwMzk4NmI2NWQ4YzY4ZDJhNDllZWZmNGMyODA5ZjU5NTUx ZGZjODJiNzdhZDY5ZTdkMjU5NmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhdwLlOoZFkkmN3+1uGbBO/Yf3YeJpCbo6Fj6Hem+FXLrjHkYtr+ohKzAPX 8lzjMoul86T5fDOrQiNrukXR1+DG84NpMHV7WO8T9HPZMYk9gpBDXIYwvSOwq98O OBEtxcx+KbAlxoJPNJmhs/SRHO7WFhpo5gVR5bm6mS0xzVZ2BGlfs+ZqKuHzr2TC 65wVrXYu7CnHHoRkZTr16BMGV0zF6LbHsENqO25nb3lyzcym2ZhUTcBefqUVD8DV ShfomYHuBNoXwa0ulDpH8TTsOsvGEPa0bKQA7h24hw7xcYG6Fxv/Ze+IS5nPtFnB K8nf43BWz9qB0fyKqgEIxDSvI48CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQX99iQ X3drAsbbprvV9crILhSTIDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWE1ODVlOWQtOGJmMC00YmMxLWFkN2ItYjZjM2UwYmY5YjkzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CUQ MA0GCSqGSIb3DQEBCwUAA4IBAQBhACyP5IEPaWlp31kNJR1XrlEgBnQ093p2nofs giz+4VksiYmHFOU3i4yVhDvLYxf/+zEYLGgAi8sgLRVhSMSo6X6FYhBZTon8pflR in/XfPQxNwV3uJFEvBS5RlVv6ze/SJttU50iYTfdYMxdXp+T/1vFEULVQbzJjUQ1 x1lYn4kaecMd44T9YBsq0yHuXfw8FLxvX0ImetodB5yxChMvk1eImNJyClPdjSzY OJES58jzBm1rnv2dVCDsSqr8B3Jo3QTSyBUr0qcMzdHpV5xllwuF876JcvlmvEUE mkhXrM8QUKf8divapKqTbVMuVvmFr6fjJub3mq0IE2sEjYpA -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:09 2025 by rpki-client