This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa File: 71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa (raw, json) Hash identifier: boNV65yGpg9nCmqRUMDgUQyupVRDq4wVJ6nzcH7iQB8= Subject key identifier: 41:4A:AC:23:D4:04:35:F8:0A:C8:BA:5E:CD:FB:16:FA:82:8F:77:D5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7DD53544A4AE9D2B99F7DECDA2E3ED955EC132E2 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa Signing time: Tue 18 Nov 2025 00:30:15 +0000 ROA not before: Tue 18 Nov 2025 00:30:15 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06d:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d5:35:44:a4:ae:9d:2b:99:f7:de:cd:a2:e3:ed:95:5e:c1:32:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:30:15 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=63f285c1431b2e7d4efa5b39684e40ed839507ddc58d10624b64aefcec748860, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:04:eb:0f:eb:44:a7:e8:f6:14:90:e3:10: b3:92:7e:c9:0a:ee:b6:77:d4:32:65:24:99:8e:2b: 59:01:57:15:75:fb:22:04:2b:d9:54:56:18:dd:95: 79:58:ab:61:2e:b9:e9:d2:e7:d3:d0:d0:53:4a:29: e9:9a:37:03:d8:1a:7e:24:f7:27:05:d9:1e:6c:4d: 57:44:09:2e:2f:5e:55:4e:3f:dd:13:6e:7a:90:bb: 20:09:ac:c7:58:c3:ea:b1:a9:60:08:f6:29:2f:96: 77:62:ad:5c:04:4b:1a:8c:26:b9:3b:0d:d4:b0:90: 68:eb:79:bb:be:12:8f:b9:de:1d:1f:09:f5:4a:6b: 90:4f:a1:2b:88:05:da:3b:c0:48:ae:a8:c6:b6:72: c3:21:d4:a5:78:21:a4:9a:c1:7d:a1:33:53:a9:b4: 5f:82:f0:b1:a6:cf:bd:ef:c6:83:30:a8:02:bc:9c: 2e:12:e9:c7:8f:82:5a:c8:56:09:88:d8:1f:cc:4c: 9b:59:f9:df:73:5e:9a:42:6b:68:d4:3b:8e:e7:a6: 69:3e:97:c5:4c:05:8d:b0:b9:8a:b6:11:47:95:d9: 08:b7:06:f5:52:52:b0:76:80:81:36:df:7e:b7:1f: 55:1e:b7:ff:be:5a:62:55:bf:b8:bf:1d:51:68:be: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4A:AC:23:D4:04:35:F8:0A:C8:BA:5E:CD:FB:16:FA:82:8F:77:D5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/71d12ef8-96b3-4cc1-9b5b-b9b598cd18a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06d:6080::/48 Signature Algorithm: sha256WithRSAEncryption be:ee:f5:b3:e3:d0:45:5e:ce:32:93:91:c7:f4:55:19:3a:84: b5:4b:fd:f3:71:25:70:35:46:f5:3e:34:94:b4:9b:20:af:d0: bd:f0:8c:b1:ff:fa:e8:60:b2:04:e5:0b:43:79:6f:81:a2:10: 67:e1:3e:9e:13:0b:e6:05:1c:25:60:58:89:f8:cc:ad:c9:3b: 37:31:3c:2b:5a:28:08:c7:fd:78:b9:64:3f:07:25:a3:01:f9: 64:01:b1:a2:7e:f7:c2:22:26:84:2c:12:90:1e:2e:b4:ed:51: 38:d7:59:4c:91:f0:06:8a:ad:8f:59:f7:61:b1:dd:3e:73:0b: d2:c7:ea:72:8d:6a:7b:ed:9a:a1:56:4c:10:19:20:d2:4f:2b: 4c:21:e2:67:3d:d2:b5:37:f9:c6:e0:28:ec:ad:fa:c0:3a:9e: ba:11:a1:df:b1:4e:2e:0c:7e:11:07:02:d2:c2:6d:46:40:be: 5b:6d:ed:f3:54:04:93:86:2a:97:3b:a2:de:b0:bf:b9:5b:f0: 37:f5:5a:40:e0:fe:19:48:f2:9e:df:e8:62:16:df:f1:a9:73: 44:e2:e8:db:42:27:51:c0:5b:e2:59:c9:ad:ff:22:82:b9:c0: c3:2d:57:f4:95:3c:c6:3a:f6:0d:87:c5:dc:36:15:dd:d9:35: 4e:e2:76:bb -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUfdU1RKSunSuZ997NouPtlV7BMuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDMwMTVaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDYzZjI4NWMxNDMxYjJlN2Q0ZWZhNWIzOTY4NGU0MGVkODM5NTA3ZGRjNThk MTA2MjRiNjRhZWZjZWM3NDg4NjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0cBOsP60Sn6PYUkOMQs5J+yQrutnfUMmUkmY4rWQFXFXX7IgQr2VRWGN2V eVirYS656dLn09DQU0op6Zo3A9gafiT3JwXZHmxNV0QJLi9eVU4/3RNuepC7IAms x1jD6rGpYAj2KS+Wd2KtXARLGowmuTsN1LCQaOt5u74Sj7neHR8J9UprkE+hK4gF 2jvASK6oxrZywyHUpXghpJrBfaEzU6m0X4LwsabPve/GgzCoArycLhLpx4+CWshW CYjYH8xMm1n533NemkJraNQ7juemaT6XxUwFjbC5irYRR5XZCLcG9VJSsHaAgTbf frcfVR63/75aYlW/uL8dUWi+gnkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRBSqwj 1AQ1+ArIul7N+xb6go931TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzFkMTJlZjgtOTZiMy00Y2MxLTliNWItYjliNTk4Y2QxOGExLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G1g gDANBgkqhkiG9w0BAQsFAAOCAQEAvu71s+PQRV7OMpORx/RVGTqEtUv983ElcDVG 9T40lLSbIK/QvfCMsf/66GCyBOULQ3lvgaIQZ+E+nhML5gUcJWBYifjMrck7NzE8 K1ooCMf9eLlkPwclowH5ZAGxon73wiImhCwSkB4utO1RONdZTJHwBoqtj1n3YbHd PnML0sfqco1qe+2aoVZMEBkg0k8rTCHiZz3StTf5xuAo7K36wDqeuhGh37FOLgx+ EQcC0sJtRkC+W23t81QEk4Yqlzui3rC/uVvwN/VaQOD+GUjynt/oYhbf8alzROLo 20InUcBb4lnJrf8igrnAwy1X9JU8xjr2DYfF3DYV3dk1TuJ2uw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:38 2025 by rpki-client