This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa File: 787a0cca-ea85-49b8-8c0b-bef4512620de.roa (raw, json) Hash identifier: q5v+2WyZfoY+ZA7HCmmvFw/EgzRmwpCeFS/1awUTP/U= Subject key identifier: B6:04:BB:C9:20:67:BF:0D:F9:1D:F0:D5:C0:35:2C:BD:A4:7E:3A:39 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1932471A0CE4E0448DCD59B96DAC1F5EA9C85DDB Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa Signing time: Sat 29 Nov 2025 03:00:42 +0000 ROA not before: Sat 29 Nov 2025 03:00:42 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d074:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:32:47:1a:0c:e4:e0:44:8d:cd:59:b9:6d:ac:1f:5e:a9:c8:5d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:42 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=fcf7161372f57bfa756f5deb847351405cf393717b73745290edae636dd4fa59, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:65:cd:0d:b7:5c:38:2a:8e:5a:ea:1a:70: c8:8d:f2:4a:17:36:94:c7:3d:4c:61:4a:59:e2:09: 45:65:27:a4:1e:4e:fa:af:56:d4:3b:10:b7:f4:0b: c7:78:ef:dc:2e:b3:48:55:6c:ea:62:08:98:0e:a7: af:9b:0a:48:d2:7c:bb:2c:47:89:68:6c:0a:63:17: cd:20:04:be:7f:9f:b5:78:9c:c5:c8:3c:3c:6f:84: 19:ce:50:9f:14:c0:b6:22:ee:b7:f6:1a:79:fc:26: 7d:38:21:3a:d4:5b:d8:6f:65:88:8e:3e:58:e7:8f: b3:24:df:a2:a9:0c:bc:e0:da:31:ae:73:cf:49:39: 67:ab:7f:b1:81:8f:09:62:57:a9:a9:b5:8f:cc:5b: c2:a2:4e:3b:eb:71:19:18:50:ba:81:31:5a:1f:57: 7a:f7:a8:60:3e:2a:ab:d0:dd:90:66:3c:9a:ec:e9: be:15:93:83:af:49:de:f7:4d:74:6a:ef:f1:ea:4e: 67:85:23:53:6c:a6:6c:3d:15:02:33:b1:d6:f6:a5: b3:ab:2c:ab:e7:b4:3f:08:ac:f7:b1:0b:9d:42:bb: fb:57:a2:47:b5:a2:2f:b6:93:2b:b1:d2:1a:ce:44: 70:42:74:da:6d:73:94:e1:12:c1:d8:fb:28:17:94: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:04:BB:C9:20:67:BF:0D:F9:1D:F0:D5:C0:35:2C:BD:A4:7E:3A:39 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d074:9000::/40 Signature Algorithm: sha256WithRSAEncryption 18:cc:82:a4:cc:da:33:a5:3b:85:be:24:3f:81:2e:8c:a1:25: 10:b1:15:bc:dc:8c:c6:98:c5:80:e4:f6:83:6a:d4:2a:9c:c2: 59:2a:89:b9:bb:be:4a:42:c1:98:34:0e:92:f1:a3:3c:94:6f: af:21:f7:77:8d:c1:00:d8:ad:cc:31:b6:55:a0:95:dc:d0:8c: 5e:f9:4d:e5:9e:a0:12:8e:a9:a1:63:06:f7:b0:4f:4a:71:b7: d9:e5:e4:49:28:51:76:a8:79:c6:67:04:2f:bc:9c:c4:7f:15: c7:fc:e2:e2:57:0d:aa:0a:d0:46:ef:27:1d:c8:10:7a:36:e0: 22:61:2a:98:98:cc:3a:67:da:23:e0:6b:2a:fd:0a:98:85:a1: d5:f7:ee:6c:a4:86:ad:01:ac:4f:a2:24:b6:11:a9:ff:0a:86: bc:c6:08:54:f5:74:1d:71:2f:87:07:98:1d:df:59:e3:f5:7e: fe:ff:2f:fd:ca:1b:bb:fa:70:92:21:a4:ed:f5:77:d0:b8:ee: 0e:cd:05:f0:64:0e:34:dc:de:f2:8a:61:aa:36:a7:a6:96:38: 4f:09:f7:f7:1f:af:02:57:ad:40:96:ba:d9:40:ca:8e:ad:c6: 8a:78:ce:4b:a1:15:54:a9:1a:e9:88:a8:45:53:51:b5:94:f5: e1:fc:fc:ec -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUGTJHGgzk4ESNzVm5bawfXqnIXdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwNDJaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQGZjZjcxNjEzNzJmNTdiZmE3NTZmNWRlYjg0NzM1MTQwNWNmMzkzNzE3Yjcz NzQ1MjkwZWRhZTYzNmRkNGZhNTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4dZc0Nt1w4Ko5a6hpwyI3yShc2lMc9TGFKWeIJRWUnpB5O+q9W1DsQt/QL x3jv3C6zSFVs6mIImA6nr5sKSNJ8uyxHiWhsCmMXzSAEvn+ftXicxcg8PG+EGc5Q nxTAtiLut/YaefwmfTghOtRb2G9liI4+WOePsyTfoqkMvODaMa5zz0k5Z6t/sYGP CWJXqam1j8xbwqJOO+txGRhQuoExWh9XeveoYD4qq9DdkGY8muzpvhWTg69J3vdN dGrv8epOZ4UjU2ymbD0VAjOx1vals6ssq+e0Pwis97ELnUK7+1eiR7WiL7aTK7HS Gs5EcEJ02m1zlOESwdj7KBeUQbkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS2BLvJ IGe/Dfkd8NXANSy9pH46OTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Nzg3YTBjY2EtZWE4NS00OWI4LThjMGItYmVmNDUxMjYyMGRlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HSQ MA0GCSqGSIb3DQEBCwUAA4IBAQAYzIKkzNozpTuFviQ/gS6MoSUQsRW83IzGmMWA 5PaDatQqnMJZKom5u75KQsGYNA6S8aM8lG+vIfd3jcEA2K3MMbZVoJXc0Ixe+U3l nqASjqmhYwb3sE9KcbfZ5eRJKFF2qHnGZwQvvJzEfxXH/OLiVw2qCtBG7ycdyBB6 NuAiYSqYmMw6Z9oj4Gsq/QqYhaHV9+5spIatAaxPoiS2Ean/Coa8xghU9XQdcS+H B5gd31nj9X7+/y/9yhu7+nCSIaTt9XfQuO4OzQXwZA403N7yimGqNqemljhPCff3 H68CV61AlrrZQMqOrcaKeM5LoRVUqRrpiKhFU1G1lPXh/Pzs -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:27 2025 by rpki-client