This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa File: 8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa (raw, json) Hash identifier: dleYitAItUpXTJvyGQxInEXecHDJYXDhNlxnzUnktAc= Subject key identifier: B0:5F:E1:3A:6A:E2:0C:24:EA:FC:B2:0B:CD:65:12:92:74:33:5E:B2 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 47884BA7E40273D8057865B5ACA22D5D604B5719 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa Signing time: Sun 23 Nov 2025 01:30:16 +0000 ROA not before: Sun 23 Nov 2025 01:30:16 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:88:4b:a7:e4:02:73:d8:05:78:65:b5:ac:a2:2d:5d:60:4b:57:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:16 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=63537be4f2bcd93b76420f3b4ec4f6036ca0d8ece8df24aebd77a2ee8dc05da9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:1b:96:b0:c7:b3:68:6e:69:6f:a1:09:03: c2:c6:78:14:7e:39:a2:94:2f:86:b0:24:3e:f8:12: a8:b8:6b:b3:e5:3b:1e:2d:a7:32:0e:23:8f:28:14: b0:32:9c:d9:08:ee:81:c3:ae:08:f0:03:1a:78:3c: 87:50:37:3d:b0:65:3e:65:47:08:2b:54:2f:0c:88: 3e:3a:52:34:df:8a:9b:d7:e7:f7:6b:74:b5:d7:7a: 64:7c:5d:ea:d5:88:46:0b:73:75:b6:14:d8:b4:5f: 31:33:8e:f5:51:ad:e7:2f:b4:e9:d2:cd:74:86:27: 12:5e:41:1f:12:0e:8b:18:8a:5c:ea:b2:e4:f1:c1: e4:70:63:49:a8:b2:4d:e9:ee:6e:d3:99:61:7a:54: 9b:2c:c6:e8:e3:60:ed:6c:50:60:14:69:96:67:87: 65:fa:83:83:b4:a0:10:f3:32:e6:a3:62:fe:93:b6: 2e:83:f9:2a:34:53:f7:bd:26:b3:3b:d2:6c:e4:41: de:37:62:73:15:f2:b4:5d:4c:e5:a1:79:fd:26:d7: ea:79:a7:d6:f1:b5:65:db:2a:ce:0e:d5:f4:ea:4c: 49:d2:1c:97:bd:72:11:d4:95:5e:6b:8d:e3:d3:b4: 9b:80:55:f9:9c:fe:80:85:8f:73:90:43:ba:0c:e4: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5F:E1:3A:6A:E2:0C:24:EA:FC:B2:0B:CD:65:12:92:74:33:5E:B2 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e3fdaff-455c-48d5-bbad-e4e6f2efcd8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:c040::/48 Signature Algorithm: sha256WithRSAEncryption 87:ed:05:d7:d3:99:83:f4:20:29:0d:b8:82:e1:db:d2:03:27: a7:22:9b:1e:13:5a:86:d3:e5:99:1b:3b:98:9e:76:0d:d2:b8: 36:dc:33:34:b8:f7:27:99:79:1d:fd:59:2e:33:25:5f:02:ce: 8b:e2:91:41:1d:9e:fe:b1:dd:fe:ef:ce:9c:26:4a:34:a4:b3: 38:3c:38:90:c6:8b:61:36:b3:3c:16:43:67:12:39:4d:87:1b: b5:f3:78:69:cc:6f:9f:7c:a2:17:25:b4:2b:97:86:62:50:a8: a7:2d:cf:7c:71:8e:2f:c4:f0:14:d6:98:ba:2a:3b:65:0a:56: aa:0a:0d:b0:72:4f:a6:f8:72:8c:69:ac:bb:62:54:6c:1c:7d: 18:ce:dd:49:14:1c:1d:ca:f1:37:1e:c1:e1:46:87:cf:02:f2: 10:5a:bf:c4:41:c1:c4:fe:34:ac:1b:c4:e5:cf:bb:ac:c3:5b: a3:66:b8:33:0f:d4:de:83:9f:3f:c7:ff:80:74:1d:a0:b4:ca: 20:ee:a7:04:4f:b3:f1:1c:25:a2:59:c2:e0:38:0f:17:e1:73: 4a:b3:2f:7b:e3:2b:98:1a:a4:11:74:fb:9f:57:49:a0:ad:47: 0b:b9:dc:78:d5:3f:ec:db:f3:5f:b6:07:46:21:f1:94:21:a9: 7e:4f:cb:d2 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUR4hLp+QCc9gFeGW1rKItXWBLVxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMTZaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDYzNTM3YmU0ZjJiY2Q5M2I3NjQyMGYzYjRlYzRmNjAzNmNhMGQ4ZWNlOGRm MjRhZWJkNzdhMmVlOGRjMDVkYTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9kG5awx7NobmlvoQkDwsZ4FH45opQvhrAkPvgSqLhrs+U7Hi2nMg4jjygU sDKc2QjugcOuCPADGng8h1A3PbBlPmVHCCtULwyIPjpSNN+Km9fn92t0tdd6ZHxd 6tWIRgtzdbYU2LRfMTOO9VGt5y+06dLNdIYnEl5BHxIOixiKXOqy5PHB5HBjSaiy TenubtOZYXpUmyzG6ONg7WxQYBRplmeHZfqDg7SgEPMy5qNi/pO2LoP5KjRT970m szvSbORB3jdicxXytF1M5aF5/SbX6nmn1vG1Zdsqzg7V9OpMSdIcl71yEdSVXmuN 49O0m4BV+Zz+gIWPc5BDugzkc90CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSwX+E6 auIMJOr8sgvNZRKSdDNesjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OGUzZmRhZmYtNDU1Yy00OGQ1LWJiYWQtZTRlNmYyZWZjZDhjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GrA QDANBgkqhkiG9w0BAQsFAAOCAQEAh+0F19OZg/QgKQ24guHb0gMnpyKbHhNahtPl mRs7mJ52DdK4NtwzNLj3J5l5Hf1ZLjMlXwLOi+KRQR2e/rHd/u/OnCZKNKSzODw4 kMaLYTazPBZDZxI5TYcbtfN4acxvn3yiFyW0K5eGYlCopy3PfHGOL8TwFNaYuio7 ZQpWqgoNsHJPpvhyjGmsu2JUbBx9GM7dSRQcHcrxNx7B4UaHzwLyEFq/xEHBxP40 rBvE5c+7rMNbo2a4Mw/U3oOfP8f/gHQdoLTKIO6nBE+z8RwlolnC4DgPF+FzSrMv e+MrmBqkEXT7n1dJoK1HC7nceNU/7NvzX7YHRiHxlCGpfk/L0g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:27:39 2025 by rpki-client