This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa File: 75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa (raw, json) Hash identifier: /L7aLdMyvb8DF0/zWYUuC4b5LWRnYOAHdUtY32+Q9zs= Subject key identifier: 97:A8:70:D7:25:14:84:85:E4:41:1C:AB:82:3F:39:9E:6F:48:52:B7 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2EB4ABA0F70D553A1B058B05B2795275A9E72DD6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa Signing time: Wed 10 Dec 2025 05:20:05 +0000 ROA not before: Wed 10 Dec 2025 05:20:05 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b4:ab:a0:f7:0d:55:3a:1b:05:8b:05:b2:79:52:75:a9:e7:2d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:20:05 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a3c307e5ab64e959bcc7d60f45d43c5521cedb2e2d297d023a7f0d9abafff055, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:df:70:81:df:15:17:3b:de:36:f6:c1:82: ad:5f:81:86:80:83:54:90:0f:8a:3e:37:8d:c9:6a: 43:be:1b:a6:b5:69:cf:66:77:0a:3e:ce:72:a4:bd: d9:d5:af:87:36:cb:b9:19:b5:0a:f6:7b:97:37:49: dc:bd:62:a3:dd:64:9d:76:54:c9:75:50:cf:3e:94: 92:c8:e0:57:55:d4:ca:74:f1:83:8d:05:45:c1:2f: df:a8:a8:43:be:d5:4b:d7:98:24:d2:c6:2c:dd:21: 00:c2:4f:77:59:cb:ab:78:de:42:bb:ab:0e:c4:7c: 11:79:d8:ea:71:11:70:0b:f6:51:a7:17:09:3f:70: cc:bd:ec:d4:1d:ec:e9:b4:9e:7c:f4:4a:98:d2:45: 4a:1b:60:3c:3c:da:9e:6b:a1:de:d4:85:df:88:c3: dc:09:aa:02:34:9a:63:ec:8d:c3:04:55:54:30:3d: a3:2b:0e:f0:a3:db:f6:e9:85:7e:7f:00:43:48:3e: 86:1d:2f:c6:fb:69:e7:a2:ab:43:ca:65:e5:7f:dd: 1d:94:e1:95:b9:1e:ef:8b:4b:fd:3d:e7:ad:b4:5a: 2e:d3:5c:8d:6c:51:db:5f:bf:ff:49:63:03:5c:d1: 98:dc:be:7b:28:c0:09:fb:9e:f6:c3:d8:16:f7:2e: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A8:70:D7:25:14:84:85:E4:41:1C:AB:82:3F:39:9E:6F:48:52:B7 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:6040::/48 Signature Algorithm: sha256WithRSAEncryption 8e:91:75:0f:95:d7:38:8c:14:0a:a7:66:c6:37:0e:57:6d:d4: 74:a2:05:59:0c:2e:02:f2:8f:10:f1:07:61:77:51:65:77:5c: 11:91:46:c6:94:10:e7:f4:1b:00:3b:be:fc:22:c6:be:4f:8c: ed:ad:66:67:07:d1:57:3e:fb:2e:4a:c8:1b:e3:14:8e:cc:82: 3a:ac:de:c9:21:4a:2b:75:02:77:5c:96:fb:d3:fd:23:da:0e: e9:c1:e6:6e:31:08:dc:09:01:27:2e:2f:2b:99:74:e9:2f:64: 34:eb:ce:f0:d0:b0:b5:e0:28:13:d9:e7:08:33:16:91:10:dd: 63:94:c0:23:f2:18:d9:64:ce:0a:35:c2:b9:31:42:b5:89:94: 1c:13:e3:9b:3e:75:47:ed:58:03:c0:b0:d2:90:f2:5a:c8:38: 01:ef:3a:f1:19:4b:e4:e5:82:6d:26:d8:b7:65:97:9d:14:81: 5b:87:ba:60:cc:a4:b6:04:bc:84:d4:9c:67:15:b1:93:af:63: 9c:42:06:17:01:c3:fc:c0:0a:36:70:1e:13:8a:6e:96:69:bc: d4:54:ff:fd:de:58:f4:25:dc:87:75:c2:34:d5:63:dc:9e:7b: 73:69:8b:df:9a:69:ab:76:cb:0b:79:ee:7e:9c:13:b6:4b:68: 86:cc:ce:40 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIULrSroPcNVTobBYsFsnlSdannLdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTIwMDVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGEzYzMwN2U1YWI2NGU5NTliY2M3ZDYwZjQ1ZDQzYzU1MjFjZWRiMmUyZDI5 N2QwMjNhN2YwZDlhYmFmZmYwNTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4v33CB3xUXO9429sGCrV+BhoCDVJAPij43jclqQ74bprVpz2Z3Cj7OcqS9 2dWvhzbLuRm1CvZ7lzdJ3L1io91knXZUyXVQzz6UksjgV1XUynTxg40FRcEv36io Q77VS9eYJNLGLN0hAMJPd1nLq3jeQrurDsR8EXnY6nERcAv2UacXCT9wzL3s1B3s 6bSefPRKmNJFShtgPDzanmuh3tSF34jD3AmqAjSaY+yNwwRVVDA9oysO8KPb9umF fn8AQ0g+hh0vxvtp56KrQ8pl5X/dHZThlbke74tL/T3nrbRaLtNcjWxR21+//0lj A1zRmNy+eyjACfue9sPYFvcujIcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSXqHDX JRSEheRBHKuCPzmeb0hStzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzVkMGI1ZDktMjQ3Ny00ZDM4LWFiN2EtMGM2MGEzM2Q4MjQ2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFg QDANBgkqhkiG9w0BAQsFAAOCAQEAjpF1D5XXOIwUCqdmxjcOV23UdKIFWQwuAvKP EPEHYXdRZXdcEZFGxpQQ5/QbADu+/CLGvk+M7a1mZwfRVz77LkrIG+MUjsyCOqze ySFKK3UCd1yW+9P9I9oO6cHmbjEI3AkBJy4vK5l06S9kNOvO8NCwteAoE9nnCDMW kRDdY5TAI/IY2WTOCjXCuTFCtYmUHBPjmz51R+1YA8Cw0pDyWsg4Ae868RlL5OWC bSbYt2WXnRSBW4e6YMyktgS8hNScZxWxk69jnEIGFwHD/MAKNnAeE4pulmm81FT/ /d5Y9CXch3XCNNVj3J57c2mL35ppq3bLC3nufpwTtktohszOQA== -----END CERTIFICATE-----Generated at Mon Dec 15 17:09:02 2025 by rpki-client