This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa File: 834ff2b2-55b6-4011-9d9b-451a7311335d.roa (raw, json) Hash identifier: zmGqfOlATZ2cqqXaKoxx8DXa7lwGTr6IGbe0mXyMKPU= Subject key identifier: 0A:93:F0:4B:CC:32:6E:29:C7:31:66:59:3C:FD:25:16:A7:9C:8D:03 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5B807149C4B2F609B5AB2BE16A906874A6F20230 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa Signing time: Sat 15 Nov 2025 05:31:10 +0000 ROA not before: Sat 15 Nov 2025 05:31:10 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:80:71:49:c4:b2:f6:09:b5:ab:2b:e1:6a:90:68:74:a6:f2:02:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:31:10 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=ecd93b71bb3ce85c2ae429c728d8130e012298f6b9d4947c86027ff2472a236c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:7a:64:43:58:c3:58:fa:d2:f9:2c:73:29: f6:23:dd:bc:a8:4e:4e:f6:e1:ae:eb:11:c1:e6:aa: 8e:4f:7a:d6:7e:75:d4:de:d2:ac:4c:bd:2f:3d:3d: 4c:9a:b8:1e:68:71:72:07:d3:b9:35:02:a9:01:b6: fd:94:9b:17:b0:ca:5c:e6:36:e7:2b:22:fc:e2:ac: 94:a3:c4:87:ad:7e:cd:70:7d:dd:57:a3:0c:df:37: a1:1e:94:46:42:53:cc:66:89:28:1e:e3:c6:e7:d0: ad:08:bc:be:ba:5d:e5:4e:88:2a:a9:fe:78:f5:df: 09:58:0d:59:60:5e:c4:3f:24:85:de:f1:90:9e:7f: ea:dd:9e:06:46:ca:b2:6b:e3:11:98:4a:32:d5:38: 5b:14:bd:62:6a:25:e3:1d:4e:b0:9a:6a:ff:5d:42: 33:a7:6a:66:06:f0:e1:59:e6:ef:f2:b1:ae:e2:2f: 20:9f:66:28:5b:e7:0e:86:85:1b:87:92:0b:a1:8b: 51:ff:03:ba:bf:de:56:f4:fc:d1:9a:43:13:fa:5d: 82:4b:56:ed:40:45:7e:a7:9f:8d:7d:48:e9:b9:a5: 93:3d:df:38:10:aa:9f:31:43:4b:ca:89:9a:b8:61: 27:7d:c1:8c:79:90:5c:96:96:b0:f1:c8:de:35:d8: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:93:F0:4B:CC:32:6E:29:C7:31:66:59:3C:FD:25:16:A7:9C:8D:03 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036:b000::/40 Signature Algorithm: sha256WithRSAEncryption c1:14:ee:b6:51:92:9c:c8:14:83:fa:40:e5:22:7c:7b:c6:d8: f6:fd:2c:a4:32:ca:7b:68:a5:e7:68:a5:d2:cb:41:73:45:fc: 6b:3a:e0:16:e4:da:22:be:ee:ff:50:0f:ea:38:53:e7:98:7c: fb:8e:6a:ab:9a:23:05:e5:51:85:b2:f2:26:1d:41:ca:ec:ac: ab:31:e9:23:21:fd:61:3d:45:8c:92:98:bb:e4:f2:31:8e:37: 88:23:1f:2d:67:3d:62:8e:de:84:b1:9a:89:bf:ec:40:5f:b5: 18:90:c5:87:58:6e:e0:71:38:43:24:fb:0b:bd:34:1d:bf:dd: 74:d3:7e:b8:28:9e:28:00:7c:10:1f:38:a5:9b:0f:60:d3:8c: b2:55:9b:20:1d:0a:73:45:92:23:aa:ea:7f:a2:47:93:0d:91: 38:d5:cc:70:52:da:68:b0:99:15:66:63:f6:bf:2f:1e:7c:42: 5c:89:c9:57:84:4d:82:59:cf:63:e0:b6:f5:ea:4f:3b:44:40: a6:88:bc:9c:67:e6:a4:37:d1:12:a7:5a:65:67:44:d3:b2:00: ca:7a:fa:24:b4:bd:f5:a7:81:b9:a7:49:76:37:7e:56:79:c3: ab:6c:05:0c:ea:31:85:b5:7c:85:0c:f3:93:61:db:51:72:38: 26:cf:54:ad -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUW4BxScSy9gm1qyvhapBodKbyAjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMxMTBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGVjZDkzYjcxYmIzY2U4NWMyYWU0MjljNzI4ZDgxMzBlMDEyMjk4ZjZiOWQ0 OTQ3Yzg2MDI3ZmYyNDcyYTIzNmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIVTemRDWMNY+tL5LHMp9iPdvKhOTvbhrusRweaqjk961n511N7SrEy9Lz09 TJq4HmhxcgfTuTUCqQG2/ZSbF7DKXOY25ysi/OKslKPEh61+zXB93VejDN83oR6U RkJTzGaJKB7jxufQrQi8vrpd5U6IKqn+ePXfCVgNWWBexD8khd7xkJ5/6t2eBkbK smvjEZhKMtU4WxS9Ymol4x1OsJpq/11CM6dqZgbw4Vnm7/KxruIvIJ9mKFvnDoaF G4eSC6GLUf8Dur/eVvT80ZpDE/pdgktW7UBFfqefjX1I6bmlkz3fOBCqnzFDS8qJ mrhhJ33BjHmQXJaWsPHI3jXY5GcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQKk/BL zDJuKccxZlk8/SUWp5yNAzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODM0ZmYyYjItNTViNi00MDExLTlkOWItNDUxYTczMTEzMzVkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Daw MA0GCSqGSIb3DQEBCwUAA4IBAQDBFO62UZKcyBSD+kDlInx7xtj2/SykMsp7aKXn aKXSy0FzRfxrOuAW5Noivu7/UA/qOFPnmHz7jmqrmiMF5VGFsvImHUHK7KyrMekj If1hPUWMkpi75PIxjjeIIx8tZz1ijt6EsZqJv+xAX7UYkMWHWG7gcThDJPsLvTQd v9100364KJ4oAHwQHzilmw9g04yyVZsgHQpzRZIjqup/okeTDZE41cxwUtposJkV ZmP2vy8efEJciclXhE2CWc9j4Lb16k87RECmiLycZ+akN9ESp1plZ0TTsgDKevok tL31p4G5p0l2N35WecOrbAUM6jGFtXyFDPOTYdtRcjgmz1St -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:34 2025 by rpki-client