This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74742853-5675-46ac-b956-8fe64ff098f9.roa File: 74742853-5675-46ac-b956-8fe64ff098f9.roa (raw, json) Hash identifier: 87YRobWWemHE+KEWHcrKKfD/4YsB3NBCKeqwmQYzOeo= Subject key identifier: C3:C9:2B:C0:C1:E7:0E:AD:61:90:39:B2:6E:48:46:CC:2F:7E:7B:78 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 360E9FBEDDD2BB01DF40AFDD657E6DCA5C56CFD1 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74742853-5675-46ac-b956-8fe64ff098f9.roa Signing time: Tue 02 Dec 2025 01:51:25 +0000 ROA not before: Tue 02 Dec 2025 01:51:25 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d018:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0e:9f:be:dd:d2:bb:01:df:40:af:dd:65:7e:6d:ca:5c:56:cf:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:51:25 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=e3ba1c9416352b6516d9b672d56a42ce7bd81605588f2a05774995b20c9656d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:bf:f5:6c:70:40:f1:b6:9c:ac:52:5c:3e: 61:ee:70:ff:14:50:00:91:6f:90:05:d8:42:05:b2: d9:47:52:19:89:86:d1:33:25:8a:f4:6f:38:6c:a3: 1c:14:9d:19:b0:0f:37:1a:41:d9:43:b7:d7:79:3e: fd:fc:81:9e:f1:e6:a8:29:1a:bb:24:18:8a:a1:56: 76:3a:c3:ac:fa:b1:57:76:31:0c:f3:2f:e9:41:c3: fd:72:88:18:cc:80:26:cf:8b:f4:8a:bb:b2:23:bf: 5f:c0:a4:ac:96:2d:75:03:5b:c2:99:19:57:58:b2: 9e:69:aa:fd:bb:22:38:41:57:e7:89:26:85:f2:5d: bd:6c:7c:73:64:88:87:27:fb:ce:19:16:49:8e:33: 12:52:69:84:65:63:a2:e0:d5:3b:6a:5b:fb:87:d2: 85:02:64:2a:ee:a9:90:c5:18:e8:1d:06:e2:c2:5d: 49:5f:f4:71:be:23:07:cd:ba:85:c3:cd:c8:e0:17: 31:a9:25:b1:c1:a2:a0:c4:f3:c1:2e:cd:77:c1:61: ee:c9:27:44:95:3c:93:f4:0c:09:2b:0a:0c:39:ec: 23:b2:83:c1:cd:b1:0d:24:d3:16:3a:2f:5b:1b:db: 09:36:86:74:fb:29:de:36:b1:21:ec:16:4f:f3:40: 94:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C9:2B:C0:C1:E7:0E:AD:61:90:39:B2:6E:48:46:CC:2F:7E:7B:78 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74742853-5675-46ac-b956-8fe64ff098f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d018:8000::/36 Signature Algorithm: sha256WithRSAEncryption 6a:ff:03:32:2d:8f:8a:d7:7f:b9:51:e4:c1:19:80:48:a3:a4: a9:fd:cc:d8:1e:49:61:cd:d7:9b:d0:bb:ff:2b:14:23:97:ab: 28:09:72:e6:e7:b0:49:40:3c:bf:39:a3:3c:12:53:31:bd:9d: 1d:11:a5:0a:fd:74:11:ae:cd:06:1a:d4:f1:5b:d7:a9:32:a7: ff:0a:f3:f9:50:eb:00:d1:70:71:ed:9a:57:d2:75:54:cf:ef: 8a:ba:e1:22:e1:93:3f:0d:bc:9e:21:7c:08:5f:75:9a:9f:59: 47:64:57:e3:aa:86:1b:04:89:96:6c:90:fc:e6:30:b8:ac:88: 06:1f:70:21:08:2c:96:98:0e:da:3d:aa:b8:33:6e:ab:57:66: 7a:ac:fb:f8:33:f1:e8:28:70:66:fa:4b:99:b9:f9:ea:48:97: a1:bb:3a:d6:ac:f7:96:e3:9d:5c:16:27:12:25:88:6e:4e:f6: 81:f6:0f:f0:19:14:16:1d:8b:b4:de:d5:0a:64:eb:d0:c7:6c: a9:35:b3:22:aa:74:c0:2c:1a:6a:07:6e:4c:0c:74:c1:b7:b9: 1f:1b:59:a1:9d:0c:9e:60:17:fe:61:2b:30:e9:63:2f:87:24: 71:87:56:61:cc:87:93:7a:29:56:e9:c2:53:86:83:4e:a0:01: f4:ee:11:e5 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUNg6fvt3SuwHfQK/dZX5tylxWz9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUxMjVaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGUzYmExYzk0MTYzNTJiNjUxNmQ5YjY3MmQ1NmE0MmNlN2JkODE2MDU1ODhm MmEwNTc3NDk5NWIyMGM5NjU2ZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALR+v/VscEDxtpysUlw+Ye5w/xRQAJFvkAXYQgWy2UdSGYmG0TMlivRvOGyj HBSdGbAPNxpB2UO313k+/fyBnvHmqCkauyQYiqFWdjrDrPqxV3YxDPMv6UHD/XKI GMyAJs+L9Iq7siO/X8CkrJYtdQNbwpkZV1iynmmq/bsiOEFX54kmhfJdvWx8c2SI hyf7zhkWSY4zElJphGVjouDVO2pb+4fShQJkKu6pkMUY6B0G4sJdSV/0cb4jB826 hcPNyOAXMaklscGioMTzwS7Nd8Fh7sknRJU8k/QMCSsKDDnsI7KDwc2xDSTTFjov WxvbCTaGdPsp3jaxIewWT/NAlBcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTDySvA wecOrWGQObJuSEbML357eDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzQ3NDI4NTMtNTY3NS00NmFjLWI5NTYtOGZlNjRmZjA5OGY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BiA MA0GCSqGSIb3DQEBCwUAA4IBAQBq/wMyLY+K13+5UeTBGYBIo6Sp/czYHklhzdeb 0Lv/KxQjl6soCXLm57BJQDy/OaM8ElMxvZ0dEaUK/XQRrs0GGtTxW9epMqf/CvP5 UOsA0XBx7ZpX0nVUz++KuuEi4ZM/DbyeIXwIX3Wan1lHZFfjqoYbBImWbJD85jC4 rIgGH3AhCCyWmA7aPaq4M26rV2Z6rPv4M/HoKHBm+kuZufnqSJehuzrWrPeW451c FicSJYhuTvaB9g/wGRQWHYu03tUKZOvQx2ypNbMiqnTALBpqB25MDHTBt7kfG1mh nQyeYBf+YSsw6WMvhyRxh1ZhzIeTeilW6cJThoNOoAH07hHl -----END CERTIFICATE-----Generated at Sat Dec 6 10:48:39 2025 by rpki-client