This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa File: 7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa (raw, json) Hash identifier: 4yb0Y5BIYIK0NTI9p8an52ZQmjkqA4EDLUy2H0IKUGc= Subject key identifier: 2A:F8:E2:38:AD:6D:79:55:75:79:06:B9:1B:93:B6:C3:09:5B:A8:FA Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 04937F5B632A22D5DEA024D18521CE518BD54218 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa Signing time: Sat 06 Dec 2025 04:00:04 +0000 ROA not before: Sat 06 Dec 2025 04:00:04 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d035:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:93:7f:5b:63:2a:22:d5:de:a0:24:d1:85:21:ce:51:8b:d5:42:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:04 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=580e85fbdd725dccb0c0a07e59d0fcc9b05c7271971cf656e54aea5ee7cc443b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:3d:52:2e:93:95:e8:46:41:c7:37:e1:30: ee:01:34:32:66:b6:8f:bc:57:1d:f4:b5:cb:4b:ef: 70:3d:af:0c:a5:fc:8e:83:91:db:8c:d1:47:d8:5b: 6f:2f:3f:5f:c4:3e:0b:f5:f4:7a:37:6b:3d:e5:15: b2:e0:5a:87:9f:35:42:43:09:25:a6:da:8b:50:ec: f9:ce:f1:76:66:6d:57:ca:07:fa:76:36:5b:c8:35: 05:c4:3a:e5:f6:75:cb:b2:8f:b3:fb:34:2d:36:13: f8:83:bb:02:c7:e2:72:5a:98:9b:c0:cc:7c:1a:3e: e1:65:a7:d1:7e:cb:a2:01:78:5f:6e:e6:1f:56:79: 63:94:01:bf:e3:52:e9:21:59:0b:3d:28:34:3a:2c: 04:65:e9:99:64:75:52:da:cc:9b:c6:bc:1a:f3:a0: 60:c6:da:f8:ee:ff:a9:a3:2e:b7:25:fe:f0:67:57: 3b:ce:2e:08:6a:9f:46:7b:d5:98:b0:29:a4:b7:97: cb:fd:71:08:5e:ea:a4:79:ff:1e:44:fe:f3:aa:e3: 85:c6:e0:f8:9d:b1:5d:c1:1d:d0:b6:fe:d2:33:db: 68:fa:fe:19:8c:8f:e5:6e:de:14:7a:88:19:37:c2: 65:4d:34:cf:46:32:1a:56:fe:e6:cd:ab:61:a8:13: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F8:E2:38:AD:6D:79:55:75:79:06:B9:1B:93:B6:C3:09:5B:A8:FA X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fc80124-256d-4d3d-bffc-2fe5d82c477f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d035:4000::/40 Signature Algorithm: sha256WithRSAEncryption 62:8a:72:96:6e:21:37:3b:c5:f5:6c:2f:eb:44:50:cb:2b:e5: 58:a1:ca:14:00:ac:66:26:76:69:c0:3d:ec:8d:42:ca:8e:9b: 70:97:67:c4:de:72:32:1c:1d:41:b1:90:cc:b3:97:a0:a4:7e: fc:a2:03:9c:06:4b:a1:17:92:72:58:e6:b6:3a:b5:71:57:16: 8c:86:a1:dd:9a:7a:49:ce:18:9b:6c:2b:5c:8c:92:e2:4a:f9: 5a:60:9e:b6:81:32:30:d2:2a:65:9d:79:2a:c2:e4:dd:71:03: 0d:ca:8f:93:cf:28:24:57:e6:db:20:0f:55:c7:66:3e:73:dd: 5d:5e:b2:d5:85:21:96:6a:94:b8:45:6c:ff:ab:09:97:7a:9e: 60:59:72:d0:3a:d2:29:4c:f3:d4:d4:0c:35:9d:d5:8b:fd:41: 53:94:8f:fd:e1:dc:3f:ba:2f:be:fe:2e:54:ca:e5:c2:a9:59: 2a:9c:d3:22:38:6a:ba:20:18:eb:58:4f:cd:6d:8d:63:ef:d4: 27:c1:dd:df:a0:60:77:af:01:a1:94:d7:48:cf:41:be:34:b6: a5:58:21:f7:bc:a1:f8:31:9c:8f:cf:cd:a5:34:56:77:d4:b4: 67:7a:c8:00:c4:5e:75:e2:e3:40:6c:06:ca:96:96:c4:b6:65: 02:cb:32:3a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUBJN/W2MqItXeoCTRhSHOUYvVQhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMDRaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDU4MGU4NWZiZGQ3MjVkY2NiMGMwYTA3ZTU5ZDBmY2M5YjA1YzcyNzE5NzFj ZjY1NmU1NGFlYTVlZTdjYzQ0M2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuzPVIuk5XoRkHHN+Ew7gE0Mma2j7xXHfS1y0vvcD2vDKX8joOR24zRR9hb by8/X8Q+C/X0ejdrPeUVsuBah581QkMJJabai1Ds+c7xdmZtV8oH+nY2W8g1BcQ6 5fZ1y7KPs/s0LTYT+IO7AsficlqYm8DMfBo+4WWn0X7LogF4X27mH1Z5Y5QBv+NS 6SFZCz0oNDosBGXpmWR1UtrMm8a8GvOgYMba+O7/qaMutyX+8GdXO84uCGqfRnvV mLAppLeXy/1xCF7qpHn/HkT+86rjhcbg+J2xXcEd0Lb+0jPbaPr+GYyP5W7eFHqI GTfCZU00z0YyGlb+5s2rYagTt50CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQq+OI4 rW15VXV5Brkbk7bDCVuo+jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2ZjODAxMjQtMjU2ZC00ZDNkLWJmZmMtMmZlNWQ4MmM0NzdmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DVA MA0GCSqGSIb3DQEBCwUAA4IBAQBiinKWbiE3O8X1bC/rRFDLK+VYocoUAKxmJnZp wD3sjULKjptwl2fE3nIyHB1BsZDMs5egpH78ogOcBkuhF5JyWOa2OrVxVxaMhqHd mnpJzhibbCtcjJLiSvlaYJ62gTIw0iplnXkqwuTdcQMNyo+TzygkV+bbIA9Vx2Y+ c91dXrLVhSGWapS4RWz/qwmXep5gWXLQOtIpTPPU1Aw1ndWL/UFTlI/94dw/ui++ /i5UyuXCqVkqnNMiOGq6IBjrWE/NbY1j79Qnwd3foGB3rwGhlNdIz0G+NLalWCH3 vKH4MZyPz82lNFZ31LRnesgAxF514uNAbAbKlpbEtmUCyzI6 -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:56 2025 by rpki-client