This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa File: 786da755-a3b1-48c5-b605-b8cfe294d18b.roa (raw, json) Hash identifier: N1ud8z5VfQn7INZnQDQdJ2QWO9Ztfs/mAx2orKDz4dc= Subject key identifier: FE:38:75:E8:45:BF:30:91:7E:5D:20:74:8F:DB:1C:64:A4:CC:EE:C1 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2294777006049FD9EAD54D1C8703E0748DAEC964 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa Signing time: Tue 25 Nov 2025 20:01:00 +0000 ROA not before: Tue 25 Nov 2025 20:01:00 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:94:77:70:06:04:9f:d9:ea:d5:4d:1c:87:03:e0:74:8d:ae:c9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:01:00 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=8349b778e57482740dcbe6551155348131f752e247b5343409edc8c5f14eac32, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:b7:5e:9f:09:54:34:23:3a:60:6b:c9:bd: ac:6f:5d:b2:b9:b1:9e:00:21:dc:77:f7:cc:5f:a3: 21:98:2d:17:dc:fb:b4:32:aa:cb:d5:f9:6b:ed:54: 86:70:b8:3d:73:df:45:06:af:13:db:c1:0f:3e:60: 07:61:7e:e8:c4:61:7a:0a:3e:60:e1:b3:91:94:8f: f1:35:a5:10:6e:a4:12:31:7b:25:1b:78:2c:bd:d4: 0d:c6:70:96:8f:2c:2b:a3:52:af:e6:30:45:3e:00: 0f:63:c7:99:f2:84:3c:da:c0:c3:71:0a:1e:56:e7: 97:50:34:f9:32:0c:6a:0c:3d:95:28:d9:27:3b:af: 54:9b:33:81:99:6d:4c:f4:07:e6:ea:5b:ae:00:56: cd:1d:e4:a3:79:a2:74:4c:63:c5:91:8f:3f:35:ad: ce:44:3a:81:b7:2a:94:f3:cc:71:bf:62:61:8f:57: ef:91:3a:5f:57:c2:54:b7:d5:8a:10:55:4b:78:41: 64:33:63:29:cd:07:92:93:04:83:df:36:7d:87:1a: 64:4a:91:31:38:01:98:3a:34:4e:0c:91:71:2d:36: 17:0c:9d:45:be:ea:be:b4:84:e7:e0:ef:bd:67:4a: ff:de:af:8a:c9:a1:3f:b7:dd:45:e8:0c:80:62:30: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:38:75:E8:45:BF:30:91:7E:5D:20:74:8F:DB:1C:64:A4:CC:EE:C1 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d040::/32 Signature Algorithm: sha256WithRSAEncryption ab:5e:8b:0b:51:2d:46:ac:77:51:99:f0:3d:b6:7e:d6:0b:34: 03:33:f4:53:dc:22:e4:30:c0:c6:8c:61:fb:fd:32:a8:7a:5c: 28:2a:5d:30:88:e5:c2:28:cf:49:f7:57:79:36:a3:f7:b0:77: 77:45:de:67:9f:83:b3:92:8f:96:87:e1:15:af:6d:39:5f:e4: b7:a4:b8:34:ae:7d:bd:a1:fe:4b:20:4c:cf:f3:ec:fc:64:e6: dc:30:30:d3:a3:af:16:6c:7a:7a:ca:19:cf:55:d7:d2:6a:92: 5e:c4:56:bb:f0:14:f7:d2:c7:00:fa:df:ee:ae:63:2d:1a:6a: c4:a2:43:1e:35:f8:eb:97:8a:80:b5:64:e8:f0:10:d0:d8:a6: 13:6a:6d:22:ec:0b:d3:69:1c:22:f9:79:f1:0e:d5:f3:f9:e1: 0d:7b:b7:5c:e2:3c:74:9c:ef:bc:4c:53:d8:80:0d:d8:37:89: 8b:16:89:05:57:93:52:34:95:9a:67:7d:ee:24:78:42:da:08: 92:01:74:55:36:32:9b:9a:61:98:da:79:12:de:a3:42:a0:84: d4:63:8f:42:a6:38:b6:ad:ad:04:24:21:57:38:21:e5:b4:fb: 0f:9b:82:60:bd:64:4e:4f:a1:aa:29:b8:f0:bc:7a:e3:98:a1: f0:48:86:42 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUIpR3cAYEn9nq1U0chwPgdI2uyWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAxMDBaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDgzNDliNzc4ZTU3NDgyNzQwZGNiZTY1NTExNTUzNDgxMzFmNzUyZTI0N2I1 MzQzNDA5ZWRjOGM1ZjE0ZWFjMzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdht16fCVQ0Izpga8m9rG9dsrmxngAh3Hf3zF+jIZgtF9z7tDKqy9X5a+1U hnC4PXPfRQavE9vBDz5gB2F+6MRhego+YOGzkZSP8TWlEG6kEjF7JRt4LL3UDcZw lo8sK6NSr+YwRT4AD2PHmfKEPNrAw3EKHlbnl1A0+TIMagw9lSjZJzuvVJszgZlt TPQH5upbrgBWzR3ko3midExjxZGPPzWtzkQ6gbcqlPPMcb9iYY9X75E6X1fCVLfV ihBVS3hBZDNjKc0HkpMEg982fYcaZEqRMTgBmDo0TgyRcS02FwydRb7qvrSE5+Dv vWdK/96vismhP7fdRegMgGIw+j0CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBT+OHXo Rb8wkX5dIHSP2xxkpMzuwTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Nzg2ZGE3NTUtYTNiMS00OGM1LWI2MDUtYjhjZmUyOTRkMThiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0EAw DQYJKoZIhvcNAQELBQADggEBAKteiwtRLUasd1GZ8D22ftYLNAMz9FPcIuQwwMaM Yfv9Mqh6XCgqXTCI5cIoz0n3V3k2o/ewd3dF3mefg7OSj5aH4RWvbTlf5LekuDSu fb2h/ksgTM/z7Pxk5twwMNOjrxZsenrKGc9V19Jqkl7EVrvwFPfSxwD63+6uYy0a asSiQx41+OuXioC1ZOjwENDYphNqbSLsC9NpHCL5efEO1fP54Q17t1ziPHSc77xM U9iADdg3iYsWiQVXk1I0lZpnfe4keELaCJIBdFU2MpuaYZjaeRLeo0KghNRjj0Km OLatrQQkIVc4IeW0+w+bgmC9ZE5PoaopuPC8euOYofBIhkI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:54 2025 by rpki-client