This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa File: 75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa (raw, json) Hash identifier: zJvyjPuIakwZk9Mo5ro5am2Zu9atBqkO6o4Y0U0ytMY= Subject key identifier: 0A:D8:7E:59:0A:55:FE:80:DA:EA:5F:D1:1D:CD:CF:D5:D2:C7:B0:47 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 75EF4A98131A7BD90CD09C963E94927453A4D0A1 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa Signing time: Sat 15 Nov 2025 05:30:33 +0000 ROA not before: Sat 15 Nov 2025 05:30:33 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ef:4a:98:13:1a:7b:d9:0c:d0:9c:96:3e:94:92:74:53:a4:d0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:30:33 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=556b56bc6acf00775ca8bb67ffa1c0174fc1518e7f3a4ba33a9d50fd73e8546d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:12:c0:99:2f:9e:e2:22:e9:8e:d9:f2:99: ff:a5:f6:40:d6:43:de:75:17:9a:ec:dc:31:f5:37: c5:f7:ab:6b:62:a8:13:92:79:e8:00:fa:4f:c4:14: 16:50:fe:ae:cb:98:52:a1:23:2f:92:82:4b:59:ca: ad:46:98:2b:f9:4d:9c:af:e1:a2:b9:b7:00:fb:aa: 02:5d:d3:38:b1:b6:df:09:63:05:03:12:cb:a2:34: 67:51:83:84:7f:19:21:86:83:ee:67:12:89:f0:b9: f9:0a:98:8a:71:21:7d:e9:2e:21:59:1f:56:18:50: 52:77:08:21:1b:08:1e:03:a5:04:d7:c8:d7:60:5d: 89:79:4a:72:9c:cf:e8:34:b8:53:12:6c:fd:7c:62: 67:07:04:62:8c:fd:85:81:33:56:c7:cc:b1:9d:7a: fd:49:21:d1:99:3c:76:93:50:79:9f:1e:b9:8e:f4: 6b:ea:04:70:a5:f4:4f:78:a5:de:3f:43:96:b5:b1: b7:cd:b9:ca:c2:d2:5e:8c:5b:8f:16:30:b1:15:df: 66:61:af:12:40:30:04:dd:05:0f:de:bb:d8:ba:f9: 0f:12:c7:88:5a:1c:c4:3d:f8:0f:1a:d4:46:47:5c: 68:7a:1c:02:1a:dd:da:e6:87:8e:b6:51:74:02:ec: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D8:7E:59:0A:55:FE:80:DA:EA:5F:D1:1D:CD:CF:D5:D2:C7:B0:47 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:6040::/48 Signature Algorithm: sha256WithRSAEncryption af:aa:04:07:33:2c:e3:17:7f:f5:4b:2a:bd:46:07:bf:d9:de: ca:ca:ef:ab:ef:61:f7:7c:67:ff:a8:a0:4a:47:be:6f:02:89: 27:50:83:09:f6:03:d3:0c:de:1a:c3:e0:e8:8d:49:ee:ad:8c: be:e6:77:69:40:7c:65:10:01:fb:f1:b1:ee:6b:8b:31:85:72: fa:e7:09:7b:a3:5b:13:a7:06:ca:f8:40:be:98:fa:ad:7e:75: df:3d:43:55:a1:4e:88:6b:7c:5e:ef:25:87:d4:33:a9:d9:21: 71:a5:e2:e6:bc:70:0e:c5:ae:43:10:c4:79:ef:61:ee:ba:c5: d3:47:c3:6b:db:39:19:77:b0:cb:4e:0c:fe:ae:2c:03:6f:3e: 45:06:5d:04:d1:43:66:d5:a8:ef:49:17:59:44:41:2b:e2:da: 83:80:9d:7f:4a:16:c3:d5:41:66:2c:02:ea:b9:ff:a3:36:5d: 7e:32:0a:5b:c9:dd:83:dd:43:f8:bd:f3:30:5b:dc:66:fe:5e: 8b:08:ba:b7:8e:7c:03:c0:fd:e1:94:33:28:44:fb:ef:4f:1d: c3:d0:03:f7:0a:cb:98:3a:5d:69:31:ac:e8:0f:1d:fd:05:78: 44:16:e7:e4:38:1f:5e:1d:31:fd:d1:dc:25:23:4d:e9:9d:db: ea:cb:17:4f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUde9KmBMae9kM0JyWPpSSdFOk0KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMwMzNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDU1NmI1NmJjNmFjZjAwNzc1Y2E4YmI2N2ZmYTFjMDE3NGZjMTUxOGU3ZjNh NGJhMzNhOWQ1MGZkNzNlODU0NmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALogEsCZL57iIumO2fKZ/6X2QNZD3nUXmuzcMfU3xfera2KoE5J56AD6T8QU FlD+rsuYUqEjL5KCS1nKrUaYK/lNnK/horm3APuqAl3TOLG23wljBQMSy6I0Z1GD hH8ZIYaD7mcSifC5+QqYinEhfekuIVkfVhhQUncIIRsIHgOlBNfI12BdiXlKcpzP 6DS4UxJs/XxiZwcEYoz9hYEzVsfMsZ16/Ukh0Zk8dpNQeZ8euY70a+oEcKX0T3il 3j9DlrWxt825ysLSXoxbjxYwsRXfZmGvEkAwBN0FD9672Lr5DxLHiFocxD34DxrU RkdcaHocAhrd2uaHjrZRdALsGXkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQK2H5Z ClX+gNrqX9Edzc/V0sewRzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzVkMGI1ZDktMjQ3Ny00ZDM4LWFiN2EtMGM2MGEzM2Q4MjQ2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFg QDANBgkqhkiG9w0BAQsFAAOCAQEAr6oEBzMs4xd/9UsqvUYHv9neysrvq+9h93xn /6igSke+bwKJJ1CDCfYD0wzeGsPg6I1J7q2MvuZ3aUB8ZRAB+/Gx7muLMYVy+ucJ e6NbE6cGyvhAvpj6rX513z1DVaFOiGt8Xu8lh9QzqdkhcaXi5rxwDsWuQxDEee9h 7rrF00fDa9s5GXewy04M/q4sA28+RQZdBNFDZtWo70kXWURBK+Lag4Cdf0oWw9VB ZiwC6rn/ozZdfjIKW8ndg91D+L3zMFvcZv5eiwi6t458A8D94ZQzKET7708dw9AD 9wrLmDpdaTGs6A8d/QV4RBbn5DgfXh0x/dHcJSNN6Z3b6ssXTw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:52 2025 by rpki-client