This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa File: 7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa (raw, json) Hash identifier: y1W+lMOU7bCo/NrwzDP3rR+uVc1UVL4aHQ7GCd1v7kY= Subject key identifier: 96:D2:11:23:76:EF:1A:E4:EF:81:73:DC:6D:D6:83:8E:0E:00:24:98 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 10F5CA424D34885562E012E5F0892B1738E95094 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa Signing time: Sat 15 Nov 2025 05:40:43 +0000 ROA not before: Sat 15 Nov 2025 05:40:43 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d038::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f5:ca:42:4d:34:88:55:62:e0:12:e5:f0:89:2b:17:38:e9:50:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:40:43 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=2f04810d840207aa8fa015ae74a94e0e9b754b8020e9d8d5e3e737719845d38a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3c:fe:ec:ab:b0:34:15:77:c1:cf:08:3a:af: 49:db:5d:d7:21:44:cf:b0:2e:c3:9e:76:0e:08:78: 58:2a:39:88:aa:01:64:ef:63:42:17:1c:0d:19:a3: 4b:d2:a4:9f:da:31:9c:91:ea:e4:d8:f2:f9:54:0f: 66:98:f6:c0:0a:9c:61:f2:0f:cf:e6:73:8b:11:c6: 1b:af:95:14:9a:81:34:86:f5:62:4e:fa:93:57:75: fa:bb:40:1c:13:4c:fb:1f:c8:7c:56:34:8c:f8:c6: d4:8a:01:3f:24:c6:51:47:f1:45:18:e1:c0:4a:d6: aa:2b:c4:21:d4:4e:19:b0:18:9c:0a:a2:4e:01:c7: c3:b2:b6:77:8a:18:8f:66:72:51:a3:3c:39:48:52: 16:29:6e:3b:f3:c4:5f:9c:4e:48:c0:4f:0e:a7:34: 51:d6:26:71:82:10:08:e6:cc:3c:ea:8e:6b:88:21: e7:24:b2:74:27:46:ab:f3:cc:30:ca:a0:d4:d4:13: 22:08:2d:00:b4:25:fb:c2:92:04:10:dd:25:05:3a: 90:5e:70:1b:91:cd:ec:6c:95:a0:36:2c:d4:83:24: fc:69:64:63:7d:ef:32:7f:77:17:5e:26:37:1d:a6: 41:03:05:dc:53:0e:65:11:d9:87:56:1a:9a:4c:f2: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D2:11:23:76:EF:1A:E4:EF:81:73:DC:6D:D6:83:8E:0E:00:24:98 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d038::/32 Signature Algorithm: sha256WithRSAEncryption 20:9d:fd:d5:7b:29:28:32:1d:10:33:e3:b8:50:41:dd:0e:65: 08:16:bb:18:8e:27:89:ae:d2:79:a2:ae:62:f5:9c:96:ea:ae: 80:40:f5:41:a6:a7:35:bd:1d:f5:cc:ac:5b:cb:16:e3:7b:e7: a2:7a:91:80:d0:dc:40:f8:ad:1b:db:b9:84:87:94:e7:49:62: a8:46:43:32:82:22:c7:6a:09:8b:dc:3c:70:63:46:15:f8:65: 7d:08:ca:dc:dd:b9:53:a3:12:9b:a7:26:b7:c7:14:fa:04:d3: 5d:5b:09:eb:8d:c3:ba:77:e0:bf:4f:db:ba:ae:5c:6c:ec:4d: 74:af:cf:46:d3:f0:32:6f:44:f2:50:33:22:2c:26:16:78:31: 74:6b:d7:51:5a:8a:a7:f8:c0:57:ff:d3:c6:7d:20:a7:aa:cf: c6:68:12:84:7f:41:48:60:84:74:26:89:d5:e6:e1:d7:40:dd: a9:d2:00:db:40:6d:aa:cf:31:80:c9:bd:41:92:d6:a3:8d:68: 73:07:a8:f8:c6:4a:46:a5:a0:82:8f:ee:1b:ad:ab:fa:38:df: 9d:ee:14:84:0c:d6:4d:a0:31:a7:fe:c9:82:aa:51:c8:7f:a5: b6:13:79:15:92:36:ff:cf:1a:a7:50:0e:4c:c8:7d:f8:f2:3d: 6b:96:b9:01 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUEPXKQk00iFVi4BLl8IkrFzjpUJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTQwNDNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDJmMDQ4MTBkODQwMjA3YWE4ZmEwMTVhZTc0YTk0ZTBlOWI3NTRiODAyMGU5 ZDhkNWUzZTczNzcxOTg0NWQzOGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQ8/uyrsDQVd8HPCDqvSdtd1yFEz7Auw552Dgh4WCo5iKoBZO9jQhccDRmj S9Kkn9oxnJHq5Njy+VQPZpj2wAqcYfIPz+ZzixHGG6+VFJqBNIb1Yk76k1d1+rtA HBNM+x/IfFY0jPjG1IoBPyTGUUfxRRjhwErWqivEIdROGbAYnAqiTgHHw7K2d4oY j2ZyUaM8OUhSFiluO/PEX5xOSMBPDqc0UdYmcYIQCObMPOqOa4gh5ySydCdGq/PM MMqg1NQTIggtALQl+8KSBBDdJQU6kF5wG5HN7GyVoDYs1IMk/GlkY33vMn93F14m Nx2mQQMF3FMOZRHZh1YamkzygOUCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBSW0hEj du8a5O+Bc9xt1oOODgAkmDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2RjZjAxNGYtYWY4OC00YWI5LTk5NzYtNzQ2ZWQ4ZGVjMWE2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Dgw DQYJKoZIhvcNAQELBQADggEBACCd/dV7KSgyHRAz47hQQd0OZQgWuxiOJ4mu0nmi rmL1nJbqroBA9UGmpzW9HfXMrFvLFuN756J6kYDQ3ED4rRvbuYSHlOdJYqhGQzKC IsdqCYvcPHBjRhX4ZX0IytzduVOjEpunJrfHFPoE011bCeuNw7p34L9P27quXGzs TXSvz0bT8DJvRPJQMyIsJhZ4MXRr11Faiqf4wFf/08Z9IKeqz8ZoEoR/QUhghHQm idXm4ddA3anSANtAbarPMYDJvUGS1qONaHMHqPjGSkaloIKP7hutq/o4353uFIQM 1k2gMaf+yYKqUch/pbYTeRWSNv/PGqdQDkzIffjyPWuWuQE= -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:31 2025 by rpki-client