This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa File: 60b690d0-a362-4547-bf57-d14f49f40869.roa (raw, json) Hash identifier: zUJF2Nh5nT+Zk4LfVfaRX9axeW3wbkeQKNRScGL6Wr4= Subject key identifier: 48:20:5D:CB:1A:49:22:A6:BD:81:63:06:22:5B:53:43:BB:3F:32:54 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 389245FC1B33466A51105AA36E6736D6AD0B2AF8 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa Signing time: Sat 15 Nov 2025 05:41:03 +0000 ROA not before: Sat 15 Nov 2025 05:41:03 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d018:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:92:45:fc:1b:33:46:6a:51:10:5a:a3:6e:67:36:d6:ad:0b:2a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:41:03 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=0e7de8532d1648ce57eecb9179e57ac493aa6786d04c5c79e0a4be549bf10189, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:26:b3:5b:48:51:89:f8:2e:c1:57:96:df: 42:86:1f:cb:15:5f:e0:f2:bb:3a:b1:3a:a3:c7:28: d4:47:ba:15:f4:03:5a:8a:5a:c3:9e:13:3a:39:13: b5:72:13:aa:c7:54:aa:63:8d:66:31:f8:04:f2:77: 09:80:9b:17:c7:eb:0d:b2:34:96:6c:42:2a:56:08: 6c:15:9c:8f:4a:cc:18:2c:77:d3:94:cb:c1:8d:1d: e8:e4:80:17:78:47:37:6e:eb:c4:10:a0:d6:66:bc: 81:88:30:d0:27:72:bc:d6:ec:bd:07:7d:09:b7:b6: 40:c6:2c:48:63:eb:0e:2e:54:3f:4e:7b:37:c8:c5: f9:2b:7f:8a:e9:33:66:b9:8a:a5:cd:2d:e2:c8:6a: 06:27:ea:2c:87:a4:79:a6:04:fc:2d:a3:b5:6b:41: 83:10:e5:32:9d:82:27:1a:b3:98:3a:9a:fb:5a:6f: 83:31:4e:81:2f:fa:cc:ce:8b:90:19:e4:4e:4f:da: 63:2b:91:e0:e8:37:7c:85:84:8d:cc:01:19:b6:21: c7:e1:f3:52:71:58:8e:71:ce:d4:9f:f6:c0:36:ca: b3:eb:e9:bd:d2:19:b9:f2:ad:8b:7d:98:44:76:67: 56:db:4b:45:5d:6d:c7:61:bf:d3:73:a6:2a:bb:30: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:5D:CB:1A:49:22:A6:BD:81:63:06:22:5B:53:43:BB:3F:32:54 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d018:400::/38 Signature Algorithm: sha256WithRSAEncryption 66:5b:53:f3:9a:68:99:1e:95:2f:bf:23:81:08:05:e0:9f:9f: 3f:ad:6e:f1:eb:f4:d6:ce:88:e7:b0:fa:73:cb:b4:fe:3e:51: ed:dd:75:73:11:4d:44:b0:67:e2:2e:61:13:80:71:fb:c5:d8: db:bb:7a:e8:97:a3:b7:43:bf:fa:1f:ce:67:56:2f:99:b9:2b: b4:2c:f7:9d:ce:bc:b5:ed:6a:66:1f:9c:d9:56:a2:6e:ee:37: b5:60:67:46:4b:e4:4b:4a:f4:81:77:bf:d3:64:11:ed:c0:9b: 91:56:ba:2e:b2:ab:58:bc:c8:78:5f:4c:31:78:5a:55:20:67: c5:f8:fb:0d:fc:71:cf:62:e5:c0:41:3c:18:86:b1:b4:a1:ae: ed:77:17:60:7d:d8:44:df:39:95:74:f0:5e:c2:9e:fb:b8:34: 0d:0b:ac:ac:02:bb:1f:ef:97:87:59:50:59:c4:56:e0:ab:a2: fa:a3:f3:aa:5f:6a:a1:f3:59:2a:1f:be:09:1e:3b:ae:1e:b5: cf:70:75:52:b6:af:dd:ff:ac:40:96:2e:8d:1e:90:8b:af:91: 48:da:96:50:7b:d8:e8:70:c1:95:00:ca:87:04:0b:c3:0b:da: 3e:88:08:d8:c3:ea:7d:dc:ab:65:93:4a:8a:4d:e8:d0:c4:82: cd:5b:a3:78 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUOJJF/BszRmpREFqjbmc21q0LKvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTQxMDNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDBlN2RlODUzMmQxNjQ4Y2U1N2VlY2I5MTc5ZTU3YWM0OTNhYTY3ODZkMDRj NWM3OWUwYTRiZTU0OWJmMTAxODkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqYJrNbSFGJ+C7BV5bfQoYfyxVf4PK7OrE6o8co1Ee6FfQDWopaw54TOjkT tXITqsdUqmONZjH4BPJ3CYCbF8frDbI0lmxCKlYIbBWcj0rMGCx305TLwY0d6OSA F3hHN27rxBCg1ma8gYgw0CdyvNbsvQd9Cbe2QMYsSGPrDi5UP057N8jF+St/iukz ZrmKpc0t4shqBifqLIekeaYE/C2jtWtBgxDlMp2CJxqzmDqa+1pvgzFOgS/6zM6L kBnkTk/aYyuR4Og3fIWEjcwBGbYhx+HzUnFYjnHO1J/2wDbKs+vpvdIZufKti32Y RHZnVttLRV1tx2G/03OmKrswPVkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRIIF3L Gkkipr2BYwYiW1NDuz8yVDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NjBiNjkwZDAtYTM2Mi00NTQ3LWJmNTctZDE0ZjQ5ZjQwODY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BgE MA0GCSqGSIb3DQEBCwUAA4IBAQBmW1PzmmiZHpUvvyOBCAXgn58/rW7x6/TWzojn sPpzy7T+PlHt3XVzEU1EsGfiLmETgHH7xdjbu3rol6O3Q7/6H85nVi+ZuSu0LPed zry17WpmH5zZVqJu7je1YGdGS+RLSvSBd7/TZBHtwJuRVrousqtYvMh4X0wxeFpV IGfF+PsN/HHPYuXAQTwYhrG0oa7tdxdgfdhE3zmVdPBewp77uDQNC6ysArsf75eH WVBZxFbgq6L6o/OqX2qh81kqH74JHjuuHrXPcHVStq/d/6xAli6NHpCLr5FI2pZQ e9jocMGVAMqHBAvDC9o+iAjYw+p93Ktlk0qKTejQxILNW6N4 -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:15 2025 by rpki-client