This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa File: 773f4606-0d98-4350-9ccd-3aba599136ef.roa (raw, json) Hash identifier: 66QU8gRlb3Cwf7zp2hPdowZseKyt6rHJG00BN0FYsA8= Subject key identifier: B6:83:42:FB:B3:B8:EA:35:00:33:CB:CB:71:A2:23:6E:87:A7:2B:A4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7D4E6ADA7E3924D092128F5907462D8E526B158E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa Signing time: Thu 13 Nov 2025 02:00:11 +0000 ROA not before: Thu 13 Nov 2025 02:00:11 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d038:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4e:6a:da:7e:39:24:d0:92:12:8f:59:07:46:2d:8e:52:6b:15:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:11 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=6347fed024ec493432461b62ac1b430392ddd35699fbb94ed2d7627ba33a6cf5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:a1:e4:b7:a5:b8:59:23:d7:2a:f3:b9:25: 51:fb:a6:d3:2e:b2:58:90:63:e2:2a:06:9d:83:a5: a6:50:a2:82:12:e2:83:c3:a9:5e:06:da:87:5f:d9: 7b:01:fc:ac:b4:8e:62:ec:be:1a:fe:83:5b:f8:1e: 14:a8:25:33:ef:21:fb:dd:31:fb:eb:64:8b:21:86: ee:5f:ab:68:8f:c5:65:af:c4:b0:e5:91:fc:aa:40: 81:e3:3a:dd:20:b8:5d:e6:ab:77:3e:14:b7:69:0d: 97:03:2c:d3:23:c9:b3:4b:fb:37:c3:cf:d5:41:b3: 40:13:ce:4b:e8:36:52:38:80:b9:77:d7:8d:9b:68: 30:c6:91:ab:92:fb:98:e4:13:1b:5a:4d:84:a2:a7: 6c:58:76:c6:0d:0f:50:da:e6:1f:69:b4:8e:1f:09: 95:90:21:05:d1:bb:75:d9:20:87:5d:d5:a3:7d:d0: 37:5e:5e:3d:2b:56:54:45:fd:34:ba:a0:31:df:56: cd:71:81:2b:04:67:67:3e:f6:cf:3b:f3:14:b0:49: 2f:df:0a:26:de:b3:dd:b7:09:29:2a:d2:05:40:74: 5f:5a:4d:fa:34:3d:5d:4d:28:38:0f:54:e7:1b:00: 72:3e:ff:3d:9b:f0:f1:41:4a:0d:98:7a:18:b3:82: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:83:42:FB:B3:B8:EA:35:00:33:CB:CB:71:A2:23:6E:87:A7:2B:A4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d038:800::/40 Signature Algorithm: sha256WithRSAEncryption 52:07:9f:35:b5:39:0f:71:cf:de:52:da:0b:b5:72:ab:3b:e0: 27:f8:52:9c:91:28:5b:64:2e:99:73:e9:d3:93:86:1b:af:70: c5:61:df:92:aa:05:66:43:6e:1c:24:bd:82:20:49:0c:b2:26: 27:ee:02:62:f7:f5:20:37:42:e1:d3:96:ae:54:0e:df:2c:14: e1:3b:ae:62:ff:63:a3:f5:49:a2:f2:bf:9c:e5:16:b3:8b:3d: 66:0b:6b:84:0b:03:34:1d:67:95:b7:be:f2:a2:ac:fd:57:a4: e6:7f:22:2b:18:af:52:a9:a1:58:51:45:32:b4:f8:c2:ff:b6: e0:d4:19:c6:ae:59:77:19:bd:20:8a:6c:52:ab:6f:3c:8f:aa: 0e:4e:24:46:f5:65:4b:31:21:bd:b6:dc:64:36:18:39:8b:ba: 24:6b:96:79:25:7e:f5:af:a7:14:b8:c6:a5:4e:6e:7e:32:04: 8d:69:1c:e6:20:12:b3:fd:68:94:30:4d:63:45:91:57:9d:80: a8:e3:76:78:aa:32:8b:b2:a7:67:77:3b:49:52:67:bc:7d:16: 72:62:f2:e5:f1:7a:69:84:a9:0d:01:2a:4b:16:78:27:02:f5: ab:f9:1d:d0:c9:de:25:b6:23:a1:dc:0b:72:b4:ae:d1:8b:fc: 7e:bf:78:aa -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUfU5q2n45JNCSEo9ZB0YtjlJrFY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMTFaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQDYzNDdmZWQwMjRlYzQ5MzQzMjQ2MWI2MmFjMWI0MzAzOTJkZGQzNTY5OWZi Yjk0ZWQyZDc2MjdiYTMzYTZjZjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK25oeS3pbhZI9cq87klUfum0y6yWJBj4ioGnYOlplCighLig8OpXgbah1/Z ewH8rLSOYuy+Gv6DW/geFKglM+8h+90x++tkiyGG7l+raI/FZa/EsOWR/KpAgeM6 3SC4Xeardz4Ut2kNlwMs0yPJs0v7N8PP1UGzQBPOS+g2UjiAuXfXjZtoMMaRq5L7 mOQTG1pNhKKnbFh2xg0PUNrmH2m0jh8JlZAhBdG7ddkgh13Vo33QN15ePStWVEX9 NLqgMd9WzXGBKwRnZz72zzvzFLBJL98KJt6z3bcJKSrSBUB0X1pN+jQ9XU0oOA9U 5xsAcj7/PZvw8UFKDZh6GLOCQwsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS2g0L7 s7jqNQAzy8txoiNuh6crpDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzczZjQ2MDYtMGQ5OC00MzUwLTljY2QtM2FiYTU5OTEzNmVmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DgI MA0GCSqGSIb3DQEBCwUAA4IBAQBSB581tTkPcc/eUtoLtXKrO+An+FKckShbZC6Z c+nTk4Ybr3DFYd+SqgVmQ24cJL2CIEkMsiYn7gJi9/UgN0Lh05auVA7fLBThO65i /2Oj9Umi8r+c5Raziz1mC2uECwM0HWeVt77yoqz9V6TmfyIrGK9SqaFYUUUytPjC /7bg1BnGrll3Gb0gimxSq288j6oOTiRG9WVLMSG9ttxkNhg5i7oka5Z5JX71r6cU uMalTm5+MgSNaRzmIBKz/WiUME1jRZFXnYCo43Z4qjKLsqdndztJUme8fRZyYvLl 8XpphKkNASpLFngnAvWr+R3Qyd4ltiOh3AtytK7Ri/x+v3iq -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:13 2025 by rpki-client