This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77f2b0c8-c734-4ae5-a499-7037e76d0f03.roa File: 77f2b0c8-c734-4ae5-a499-7037e76d0f03.roa (raw, json) Hash identifier: nFonj3ww64C2ROVBUUhaIIGJm3CboGiWDfXH+cQlTdY= Subject key identifier: 36:50:BE:2D:EF:B6:6B:C0:9A:F1:BF:CA:E6:FC:75:52:76:5D:A6:E6 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0F96C4D056E197A77E833F412F56298D32708EDD Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77f2b0c8-c734-4ae5-a499-7037e76d0f03.roa Signing time: Tue 02 Dec 2025 01:51:26 +0000 ROA not before: Tue 02 Dec 2025 01:51:26 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d028:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:96:c4:d0:56:e1:97:a7:7e:83:3f:41:2f:56:29:8d:32:70:8e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:51:26 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=36ac6af235923ed11a0aa6f05162624181e140b3eed934c71510a69dd27deacb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:c2:19:ad:79:17:57:de:84:c0:d2:bd:c1: 09:41:bc:9b:63:46:a2:91:e2:b4:85:16:66:3c:13: 3c:73:b4:22:69:5f:93:cc:40:5c:c2:c2:b0:af:94: 25:ce:a5:90:69:92:dd:6a:a1:f0:72:b1:43:12:3a: 24:42:cf:8c:39:95:d3:16:c3:74:a7:e6:cb:71:31: 86:83:95:bb:ea:c5:37:70:10:88:c4:f0:63:35:ac: a5:6e:e7:0f:9b:19:e0:88:90:1a:bc:8c:96:53:71: e6:92:5d:1d:5c:30:2e:09:0d:15:1c:3a:1b:70:62: be:1c:84:68:44:ae:42:c9:4d:cc:b8:87:f3:17:43: a4:52:ec:9b:b5:ab:1f:bc:db:89:58:21:30:7b:dd: 7e:08:6c:ec:9b:70:8a:85:78:63:3e:f0:9c:a4:26: 48:9a:e6:92:97:78:3a:b9:60:02:6e:69:cb:fc:56: 4f:10:02:b9:a1:4f:53:19:46:ee:39:6c:88:30:8e: 55:07:c4:87:9e:bc:97:d4:e2:d7:4f:1a:94:7b:76: 18:cb:8d:d5:2b:15:98:03:5f:7c:2c:3e:00:32:fc: 3b:b7:5e:e6:c8:6a:47:25:f4:d8:b6:24:7a:14:f8: 9d:6b:a3:23:13:4f:c0:8a:a4:42:79:8a:aa:50:e8: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:50:BE:2D:EF:B6:6B:C0:9A:F1:BF:CA:E6:FC:75:52:76:5D:A6:E6 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77f2b0c8-c734-4ae5-a499-7037e76d0f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d028:8000::/36 Signature Algorithm: sha256WithRSAEncryption c3:77:38:ca:50:98:f0:db:c5:5a:69:55:f0:0f:fb:83:6b:f2: 33:3b:5f:76:ec:2b:dc:b2:76:a1:7b:4d:ca:05:fe:e0:6f:85: b7:f8:99:12:9d:9a:de:88:c9:86:55:ca:a7:8b:33:a0:86:a2: 01:73:8f:34:da:f4:b9:f9:02:7f:13:0c:cb:d0:cc:8c:d4:7b: 99:7b:03:fa:ef:eb:0a:c2:84:24:05:6c:5b:05:aa:38:00:e6: 2e:07:64:ef:82:ba:9e:9b:50:c2:4f:b5:18:c9:67:be:60:92: b7:92:e3:c9:6d:fb:52:1c:f7:85:f5:e4:cc:35:06:7d:d2:26: 52:7b:f5:0c:5b:31:a9:a0:0f:9c:24:c7:89:cf:28:a2:1d:a9: 9e:37:49:f8:49:30:55:cb:e0:b8:93:20:24:80:c4:53:65:64: 8d:41:64:35:8a:79:90:c5:bd:d1:be:5a:e4:b6:f8:f6:57:19: 88:ae:4c:06:95:0c:0d:32:53:ca:89:bd:ff:96:c5:82:ad:86: d2:d0:ed:50:8c:07:48:8d:fc:0f:5f:51:d6:13:fe:8e:44:4b: 19:f5:1c:69:4a:4a:47:11:0c:58:fb:f4:cc:b0:ad:01:2d:e8: 71:27:06:84:26:38:0f:5a:7a:b3:66:1d:65:51:10:38:44:2c: 9b:f8:80:9e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUD5bE0Fbhl6d+gz9BL1YpjTJwjt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUxMjZaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDM2YWM2YWYyMzU5MjNlZDExYTBhYTZmMDUxNjI2MjQxODFlMTQwYjNlZWQ5 MzRjNzE1MTBhNjlkZDI3ZGVhY2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLGwhmteRdX3oTA0r3BCUG8m2NGopHitIUWZjwTPHO0Imlfk8xAXMLCsK+U Jc6lkGmS3Wqh8HKxQxI6JELPjDmV0xbDdKfmy3ExhoOVu+rFN3AQiMTwYzWspW7n D5sZ4IiQGryMllNx5pJdHVwwLgkNFRw6G3BivhyEaESuQslNzLiH8xdDpFLsm7Wr H7zbiVghMHvdfghs7JtwioV4Yz7wnKQmSJrmkpd4OrlgAm5py/xWTxACuaFPUxlG 7jlsiDCOVQfEh568l9Ti108alHt2GMuN1SsVmANffCw+ADL8O7de5shqRyX02LYk ehT4nWujIxNPwIqkQnmKqlDo4ksCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ2UL4t 77ZrwJrxv8rm/HVSdl2m5jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzdmMmIwYzgtYzczNC00YWU1LWE0OTktNzAzN2U3NmQwZjAzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CiA MA0GCSqGSIb3DQEBCwUAA4IBAQDDdzjKUJjw28VaaVXwD/uDa/IzO1927Cvcsnah e03KBf7gb4W3+JkSnZreiMmGVcqnizOghqIBc4802vS5+QJ/EwzL0MyM1HuZewP6 7+sKwoQkBWxbBao4AOYuB2Tvgrqem1DCT7UYyWe+YJK3kuPJbftSHPeF9eTMNQZ9 0iZSe/UMWzGpoA+cJMeJzyiiHameN0n4STBVy+C4kyAkgMRTZWSNQWQ1inmQxb3R vlrktvj2VxmIrkwGlQwNMlPKib3/lsWCrYbS0O1QjAdIjfwPX1HWE/6OREsZ9Rxp SkpHEQxY+/TMsK0BLehxJwaEJjgPWnqzZh1lURA4RCyb+ICe -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:11 2025 by rpki-client