This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa File: 7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa (raw, json) Hash identifier: W6/CuSNi5tc9hfKJ3FK4h+vrQMMxYFbcXCWAVaoiw64= Subject key identifier: E3:46:1C:0B:B9:EF:6A:96:23:8D:D5:D3:8B:56:26:CA:7D:80:58:9C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 30500B16F27AAB310F546C15C6009DFF32B7E4B9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa Signing time: Sat 15 Nov 2025 05:30:37 +0000 ROA not before: Sat 15 Nov 2025 05:30:37 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d027::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:50:0b:16:f2:7a:ab:31:0f:54:6c:15:c6:00:9d:ff:32:b7:e4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:30:37 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=62adc237089213f0cec0891c94d86150f39c40d8178bc9265f50a8538f5dbd68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a4:29:9f:13:f1:15:cf:2e:71:d6:a9:21:78: 2e:5c:f2:ca:84:fc:b3:d2:0e:74:f2:34:56:b2:d2: fd:b5:12:90:7c:75:a2:80:df:3a:11:40:31:c1:51: f1:a7:9e:7b:97:41:bf:3a:fd:5b:c9:af:ab:48:df: ee:4e:5c:91:76:82:ee:3c:f7:36:48:a4:6e:04:00: 2f:ff:28:2f:7f:85:9c:08:2e:d6:45:88:1b:0f:ff: 00:4b:b3:9c:b8:15:6b:2e:7a:c5:d0:5f:2f:49:77: 63:71:6b:1a:49:4a:d7:2b:ea:56:5c:9f:58:ba:4d: 32:7d:f4:e9:e3:9b:a2:07:20:dc:3f:b6:a4:0b:fc: ef:00:3b:1e:29:25:a4:f5:7a:61:29:78:08:91:6c: f2:dc:f7:ff:5c:45:1b:fb:64:bf:0c:3e:5b:58:4f: ad:76:e5:56:68:c3:a2:2b:bb:2c:66:14:6a:8c:5f: 1c:76:ba:3c:78:74:06:8d:08:e8:6f:99:0d:2c:a2: 6f:5d:0f:f6:68:20:3c:ec:dc:4a:81:50:47:d8:85: dc:ea:3b:b2:a8:5b:1d:d8:75:55:e8:fa:e2:3e:71: f1:fb:fa:dc:39:0e:cc:16:6f:6e:3c:0f:2f:27:11: ea:4d:30:7b:b5:d3:18:2a:68:9c:ec:75:9f:99:55: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:46:1C:0B:B9:EF:6A:96:23:8D:D5:D3:8B:56:26:CA:7D:80:58:9C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d027::/36 Signature Algorithm: sha256WithRSAEncryption 70:37:23:25:d6:7f:e6:eb:b1:87:b7:02:54:4b:56:6a:94:eb: 13:24:0b:4f:3e:9d:13:00:dd:e6:19:46:aa:de:65:0c:56:09: b9:48:f9:50:66:fe:32:4d:62:41:b4:c9:39:ec:da:95:75:5f: 7e:bc:0d:a0:09:46:70:ed:e9:fe:26:8c:ac:34:b9:55:a7:f3: f8:c8:d3:dc:91:64:34:ea:b2:e4:82:6d:d1:a6:b6:c2:80:a1: 83:98:f7:f7:00:f7:40:27:5a:3b:3b:32:35:5c:e2:87:f5:79: 5b:01:7d:e3:4d:21:3d:73:3c:35:30:6b:3a:8f:6c:6d:0c:5d: 3a:c8:d4:66:03:fc:81:a6:58:b2:39:e6:76:9e:a4:d3:b9:5b: 5c:8b:6c:e7:a2:b8:1b:8f:a5:5d:89:94:01:d3:14:9d:67:53: d3:71:8d:14:a0:ee:59:00:29:95:22:52:6d:0a:88:70:d3:c6: e7:f4:10:21:51:e6:f4:41:23:75:62:19:f0:43:d0:0d:8b:e2: 3c:f0:c2:b5:39:46:af:a2:f9:b7:e4:4a:bd:e2:2e:95:38:87: 6e:5b:2b:ad:62:0d:17:98:a2:96:df:d0:11:90:82:a8:ec:c3: 2c:b6:72:a3:ab:c7:e1:cf:c2:7c:f0:74:72:fb:7f:de:09:d1: 3c:ff:37:c7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUMFALFvJ6qzEPVGwVxgCd/zK35LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMwMzdaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDYyYWRjMjM3MDg5MjEzZjBjZWMwODkxYzk0ZDg2MTUwZjM5YzQwZDgxNzhi YzkyNjVmNTBhODUzOGY1ZGJkNjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJekKZ8T8RXPLnHWqSF4LlzyyoT8s9IOdPI0VrLS/bUSkHx1ooDfOhFAMcFR 8aeee5dBvzr9W8mvq0jf7k5ckXaC7jz3NkikbgQAL/8oL3+FnAgu1kWIGw//AEuz nLgVay56xdBfL0l3Y3FrGklK1yvqVlyfWLpNMn306eObogcg3D+2pAv87wA7Hikl pPV6YSl4CJFs8tz3/1xFG/tkvww+W1hPrXblVmjDoiu7LGYUaoxfHHa6PHh0Bo0I 6G+ZDSyib10P9mggPOzcSoFQR9iF3Oo7sqhbHdh1Vej64j5x8fv63DkOzBZvbjwP LycR6k0we7XTGCponOx1n5lVGkkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTjRhwL ue9qliON1dOLVibKfYBYnDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2JjYmY5ZjMtN2E2My00MmEyLTliNTgtNGMwYzEwZmMzNGRjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CcA MA0GCSqGSIb3DQEBCwUAA4IBAQBwNyMl1n/m67GHtwJUS1ZqlOsTJAtPPp0TAN3m GUaq3mUMVgm5SPlQZv4yTWJBtMk57NqVdV9+vA2gCUZw7en+JoysNLlVp/P4yNPc kWQ06rLkgm3RprbCgKGDmPf3APdAJ1o7OzI1XOKH9XlbAX3jTSE9czw1MGs6j2xt DF06yNRmA/yBpliyOeZ2nqTTuVtci2znorgbj6VdiZQB0xSdZ1PTcY0UoO5ZACmV IlJtCohw08bn9BAhUeb0QSN1YhnwQ9ANi+I88MK1OUavovm35Eq94i6VOIduWyut Yg0XmKKW39ARkIKo7MMstnKjq8fhz8J88HRy+3/eCdE8/zfH -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:40 2025 by rpki-client