This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa File: 64f0a197-0057-458b-924a-0b7079fbd04c.roa (raw, json) Hash identifier: tZmOYvyEwAVn+K4YrkK0wja8y+8tbMDdPYoQB4AZe+8= Subject key identifier: 1E:86:CD:5D:EA:AF:5F:DF:87:14:1D:CB:E0:8F:E1:39:2C:43:84:17 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 362415D800B03C13BDDCD8938A36129BA0BD1F81 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa Signing time: Thu 13 Nov 2025 02:00:08 +0000 ROA not before: Thu 13 Nov 2025 02:00:08 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:24:15:d8:00:b0:3c:13:bd:dc:d8:93:8a:36:12:9b:a0:bd:1f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:08 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=d9b2d5760557224654b39a38c83a118d0e541895f8e41b0cad2c5f5585d61861, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:12:33:01:db:12:a8:1b:27:b3:b3:88:0e: fa:7c:26:d5:ba:8d:8d:16:5d:37:15:9d:ec:66:e3: c8:4e:82:af:2b:14:80:04:e8:2e:48:82:b9:0c:6d: f8:ec:4c:7c:d9:a0:8e:8e:dd:df:e6:4b:1d:b7:94: 00:40:f9:af:bc:d2:65:39:0e:81:68:eb:43:40:11: 3c:99:ad:1a:e8:91:d4:f3:ea:8d:bd:96:57:d4:cc: 24:d0:a1:6d:4d:d1:65:f0:12:16:f6:49:3b:ea:18: a1:f9:a3:c9:f3:55:f1:8f:0b:ee:4a:fa:52:ef:ff: a1:5b:de:e6:5b:97:c2:06:3b:23:d1:83:61:8a:90: df:ec:cf:34:06:dc:79:ef:43:85:99:02:56:27:9c: 38:4e:48:b1:c3:52:0c:02:44:b9:de:87:be:82:28: 72:82:27:4b:2d:cf:8c:54:9c:b6:d9:ee:d6:18:a1: 90:72:7d:a5:ff:d2:7c:7a:0f:c9:1c:9c:7d:f4:4b: 5f:c2:f2:45:fb:af:36:26:01:4d:98:fc:11:80:7e: fc:a6:da:41:c5:d4:ac:4f:30:ea:4a:4d:9c:2f:45: 9d:7e:a7:ea:e5:07:12:7b:f0:dc:f5:bd:a5:c6:5b: 95:97:fe:44:e1:1e:3e:12:56:c0:c4:46:97:20:2c: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:86:CD:5D:EA:AF:5F:DF:87:14:1D:CB:E0:8F:E1:39:2C:43:84:17 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:840::/48 Signature Algorithm: sha256WithRSAEncryption 92:38:69:73:00:92:71:f4:c4:e7:6c:bb:dc:39:07:53:9f:a9: 8b:fb:b9:5d:3f:83:4f:3d:42:98:66:00:a5:93:5c:50:f9:eb: 13:33:87:cc:88:f2:e6:96:e2:44:97:ac:5a:2f:75:a3:82:18: cf:d8:e6:e1:2a:42:3a:64:bf:85:b9:09:08:1a:32:86:80:62: ac:58:4a:a0:d8:69:d7:45:1e:b6:18:26:a2:ec:c4:5b:4b:77: fc:03:de:4f:37:e0:07:76:c8:51:d1:e3:f3:f3:74:3b:8f:c7: 38:70:73:88:39:4d:2f:ab:4a:19:ce:30:90:1c:c1:1f:a2:1a: 44:c3:d5:1d:0b:5f:1b:57:f8:76:ff:ab:eb:d3:17:c5:fb:4d: 19:2b:ce:25:ee:0d:5a:68:1e:a3:27:3d:34:ad:09:cc:38:a0: 9e:cc:11:bc:8f:90:f3:8b:83:7e:d9:25:74:ce:94:61:a9:c1: 10:92:be:bb:85:66:14:c0:74:ba:11:a2:13:f7:1e:36:41:4e: 5e:72:c3:f2:d6:5c:77:56:a7:b5:6c:c7:82:e0:32:d7:28:8b: da:46:f7:67:e2:5f:92:46:cb:ed:d8:3c:29:d9:aa:d5:10:cd: 9c:30:28:30:e1:c9:d2:30:75:4e:3b:e5:94:d7:51:df:cb:f5: e4:5c:e5:a0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUNiQV2ACwPBO93NiTijYSm6C9H4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMDhaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQGQ5YjJkNTc2MDU1NzIyNDY1NGIzOWEzOGM4M2ExMThkMGU1NDE4OTVmOGU0 MWIwY2FkMmM1ZjU1ODVkNjE4NjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfSEjMB2xKoGyezs4gO+nwm1bqNjRZdNxWd7GbjyE6CrysUgAToLkiCuQxt +OxMfNmgjo7d3+ZLHbeUAED5r7zSZTkOgWjrQ0ARPJmtGuiR1PPqjb2WV9TMJNCh bU3RZfASFvZJO+oYofmjyfNV8Y8L7kr6Uu//oVve5luXwgY7I9GDYYqQ3+zPNAbc ee9DhZkCViecOE5IscNSDAJEud6HvoIocoInSy3PjFScttnu1hihkHJ9pf/SfHoP yRycffRLX8LyRfuvNiYBTZj8EYB+/KbaQcXUrE8w6kpNnC9FnX6n6uUHEnvw3PW9 pcZblZf+ROEePhJWwMRGlyAsQckCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQehs1d 6q9f34cUHcvgj+E5LEOEFzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NjRmMGExOTctMDA1Ny00NThiLTkyNGEtMGI3MDc5ZmJkMDRjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEI QDANBgkqhkiG9w0BAQsFAAOCAQEAkjhpcwCScfTE52y73DkHU5+pi/u5XT+DTz1C mGYApZNcUPnrEzOHzIjy5pbiRJesWi91o4IYz9jm4SpCOmS/hbkJCBoyhoBirFhK oNhp10UethgmouzEW0t3/APeTzfgB3bIUdHj8/N0O4/HOHBziDlNL6tKGc4wkBzB H6IaRMPVHQtfG1f4dv+r69MXxftNGSvOJe4NWmgeoyc9NK0JzDignswRvI+Q84uD ftkldM6UYanBEJK+u4VmFMB0uhGiE/ceNkFOXnLD8tZcd1antWzHguAy1yiL2kb3 Z+JfkkbL7dg8Kdmq1RDNnDAoMOHJ0jB1TjvllNdR38v15FzloA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:52 2025 by rpki-client