This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa File: 75900e8f-9582-4f56-8b92-09a50d5110f8.roa (raw, json) Hash identifier: tQ/YS2S3LAl9/p+KKRIh3cBG4SuZi1dof2GH8StXVHo= Subject key identifier: 39:C3:79:FC:51:30:34:BD:64:77:92:64:19:4B:E3:F3:CE:BE:4E:B4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3DC2C806BA94A27577E5920F53FE68A15116A50F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa Signing time: Tue 25 Nov 2025 20:00:43 +0000 ROA not before: Tue 25 Nov 2025 20:00:43 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c2:c8:06:ba:94:a2:75:77:e5:92:0f:53:fe:68:a1:51:16:a5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:43 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=cd61d9285d55348c7b8ba41ba983a2f5c2c8e2b84e4c0e39af678ce6285e4706, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:06:f5:83:c5:cb:1c:eb:30:2b:30:4d:53: 27:85:4f:d2:c0:00:d5:c0:a8:6b:2e:91:8d:05:b5: 74:5b:33:e2:dd:67:47:e6:b3:3e:db:43:ea:70:4e: 7f:16:0f:bd:a4:e6:a3:f5:27:40:11:3d:89:78:6b: da:eb:0e:a4:07:d9:23:e5:dc:07:1a:19:9f:7b:1c: 15:e6:71:fe:15:a0:77:e9:8c:de:92:69:b9:db:dc: a7:27:e7:a3:fc:96:47:0d:e2:ff:75:c4:57:6a:1e: 09:05:69:6d:c5:09:4d:45:eb:99:06:ba:d0:75:b7: 43:fe:f3:a6:c5:5d:e7:cf:00:b5:71:ff:19:aa:ae: c7:54:ed:c6:11:d7:79:af:46:f4:de:44:29:2b:04: 96:a4:f2:21:17:e0:a6:69:cd:04:3f:32:2e:54:64: 0e:0c:f0:f7:f1:71:74:3d:38:ed:98:11:03:ba:3f: 80:d4:e8:ea:6b:67:95:19:fa:ee:d5:0c:59:c7:cd: 86:c9:92:7b:49:be:83:80:a3:17:7f:83:d2:6c:66: b8:83:c9:57:54:0e:6b:b8:5f:dd:96:53:e7:9c:01: ab:79:47:78:21:5d:77:05:24:d1:e4:6c:87:28:63: a9:d2:77:dd:ef:22:08:a3:cd:bc:71:0e:1f:fe:66: 26:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:79:FC:51:30:34:BD:64:77:92:64:19:4B:E3:F3:CE:BE:4E:B4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75900e8f-9582-4f56-8b92-09a50d5110f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:a000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:7b:83:d4:d9:15:f3:3a:b0:76:3f:95:dd:57:bf:cb:9e:39: 01:19:fe:43:bb:8e:eb:96:96:dd:ec:4a:30:79:35:53:06:d2: c5:ea:e9:d5:a9:ff:58:de:7d:b2:74:0f:44:92:b2:e3:ca:94: d5:90:04:31:69:f8:6e:8f:93:23:ad:2f:79:61:23:cd:9f:ca: f1:0d:21:be:5d:68:8b:57:ab:86:d9:d2:b3:76:0e:3d:9d:7e: 7d:75:bb:83:43:1d:4e:e0:69:75:a5:70:ab:3a:8c:99:94:f5: c9:2a:ee:c0:2e:6e:02:0f:2a:af:36:b2:e6:5a:70:d3:72:59: 1e:c1:47:d8:92:21:56:87:de:cd:b7:4d:b0:86:ae:33:db:89: 83:2b:bd:6a:98:1b:b7:3d:ad:73:cc:db:a6:40:e9:8e:8e:c1: ab:cf:c2:79:8f:8f:e4:0d:0c:2c:1a:8c:0f:a7:1e:65:69:9c: 10:f7:d2:de:e4:39:aa:c0:6f:32:82:14:db:d2:d2:0e:81:ae: 08:c9:40:e0:a3:e4:40:98:12:c2:51:fe:eb:23:06:e4:ac:c0: 52:56:d0:59:46:77:47:c5:64:96:c6:ad:60:c4:62:2b:8d:11: 81:4e:35:9c:7c:68:62:b4:c3:75:6e:dd:3c:80:1e:71:7e:53: a3:dd:73:05 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUPcLIBrqUonV35ZIPU/5ooVEWpQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwNDNaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQGNkNjFkOTI4NWQ1NTM0OGM3YjhiYTQxYmE5ODNhMmY1YzJjOGUyYjg0ZTRj MGUzOWFmNjc4Y2U2Mjg1ZTQ3MDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnWBvWDxcsc6zArME1TJ4VP0sAA1cCoay6RjQW1dFsz4t1nR+azPttD6nBO fxYPvaTmo/UnQBE9iXhr2usOpAfZI+XcBxoZn3scFeZx/hWgd+mM3pJpudvcpyfn o/yWRw3i/3XEV2oeCQVpbcUJTUXrmQa60HW3Q/7zpsVd588AtXH/Gaqux1TtxhHX ea9G9N5EKSsElqTyIRfgpmnNBD8yLlRkDgzw9/FxdD047ZgRA7o/gNTo6mtnlRn6 7tUMWcfNhsmSe0m+g4CjF3+D0mxmuIPJV1QOa7hf3ZZT55wBq3lHeCFddwUk0eRs hyhjqdJ33e8iCKPNvHEOH/5mJoUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ5w3n8 UTA0vWR3kmQZS+Pzzr5OtDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzU5MDBlOGYtOTU4Mi00ZjU2LThiOTItMDlhNTBkNTExMGY4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HOg MA0GCSqGSIb3DQEBCwUAA4IBAQBce4PU2RXzOrB2P5XdV7/LnjkBGf5Du47rlpbd 7EoweTVTBtLF6unVqf9Y3n2ydA9EkrLjypTVkAQxafhuj5MjrS95YSPNn8rxDSG+ XWiLV6uG2dKzdg49nX59dbuDQx1O4Gl1pXCrOoyZlPXJKu7ALm4CDyqvNrLmWnDT clkewUfYkiFWh97Nt02whq4z24mDK71qmBu3Pa1zzNumQOmOjsGrz8J5j4/kDQws GowPpx5laZwQ99Le5DmqwG8yghTb0tIOga4IyUDgo+RAmBLCUf7rIwbkrMBSVtBZ RndHxWSWxq1gxGIrjRGBTjWcfGhitMN1bt08gB5xflOj3XMF -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:28 2025 by rpki-client