This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa File: 91473fe5-f129-48d9-8d23-63d62cec663a.roa (raw, json) Hash identifier: dUlqhdjaROuYNbl0J4GFqj/mqmY8J2ZSWisCXqOKpSI= Subject key identifier: 01:12:22:1B:F3:5D:59:67:53:61:9F:11:B4:31:3C:A3:14:94:3E:A9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7558DADF2E9E771177281F7A49E6E09C0007398D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa Signing time: Thu 13 Nov 2025 02:00:14 +0000 ROA not before: Thu 13 Nov 2025 02:00:14 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d038:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:58:da:df:2e:9e:77:11:77:28:1f:7a:49:e6:e0:9c:00:07:39:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:14 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=2b398d6a16d727cadcd90d9b8ed054e707787773ee3c64d5ce8323a1a9a1d3b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:63:1d:85:90:c1:60:1b:84:5c:e6:e5:19: fa:73:f5:43:3d:f4:f4:6e:4b:72:76:8a:ba:0a:3f: ca:27:da:25:65:ed:87:51:2b:d4:fa:4c:ca:d0:56: 78:49:e9:c7:b0:39:1a:08:c0:8c:7a:81:09:ce:06: c9:2c:70:bf:00:6a:c8:f4:d6:3a:73:cc:e1:b5:20: 7b:4d:6a:12:30:2b:fe:d0:28:b4:64:c3:c5:5e:ed: 7e:3e:2a:ec:33:60:53:f0:bb:24:6f:91:15:ce:3f: a1:0f:59:cb:a8:d9:9f:a1:fb:65:d8:69:3f:d4:ca: 73:35:fb:39:0c:58:41:32:c2:bb:62:16:b0:80:88: de:06:4d:eb:9f:93:97:17:88:06:dc:a0:64:ff:89: 12:a6:64:7e:cf:e0:d3:7a:3e:17:7f:12:bf:ca:ba: c9:50:16:92:a0:d5:b1:b9:fc:f6:8c:8e:cf:ad:9e: 88:d4:25:51:17:ea:ee:45:f2:ba:e7:1d:32:c8:aa: 0a:8c:67:f8:91:10:88:24:36:ce:c1:40:87:00:a3: 4f:0c:7b:58:5d:25:d1:bd:d8:1c:f8:3c:8f:af:9d: 13:35:ff:f4:f4:ae:df:62:c3:36:4f:b3:39:ef:43: af:94:ad:4f:e1:57:ca:8f:d4:6f:0e:4b:7e:31:95: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:22:1B:F3:5D:59:67:53:61:9F:11:B4:31:3C:A3:14:94:3E:A9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/91473fe5-f129-48d9-8d23-63d62cec663a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d038:840::/48 Signature Algorithm: sha256WithRSAEncryption 5c:f3:e7:b2:6b:44:d9:ea:3d:2a:30:12:32:13:cf:3a:5b:c2: 4d:d0:cd:73:f6:9b:7a:99:08:6c:91:4f:3a:1d:56:a8:ab:4f: 87:1a:31:2e:43:0e:c6:38:ad:31:ee:35:71:2d:80:65:f8:5f: 30:ca:5f:c2:ea:08:a5:39:8d:5a:f1:67:a6:6f:40:20:8d:1b: 24:6d:a7:f0:34:da:6f:4d:9c:3c:34:1c:a1:a5:e3:32:b6:f2: ee:78:ea:43:b0:bb:27:88:3a:da:92:68:c8:b7:a0:9b:eb:2a: f8:32:e8:05:7a:7d:90:32:4a:14:64:cb:5f:fd:42:6d:f6:26: 3a:36:05:a4:cf:65:fb:6c:9d:3b:09:26:1c:5e:a7:ed:20:24: e3:48:48:09:c1:a0:a6:08:ca:da:aa:ba:35:75:7f:8d:e1:b8: a7:08:eb:dd:69:21:75:19:c5:ac:92:69:64:68:d8:33:90:c3: 56:a3:25:2b:e6:48:83:32:ef:98:b5:ec:06:42:98:cc:c1:e6: 7a:30:c6:3d:86:0b:97:2f:96:64:cb:84:0f:52:21:ce:6b:dd: 87:1e:55:24:35:ad:42:26:f1:2b:f4:b2:c9:cb:91:fb:9f:d3: 78:81:eb:27:b6:a7:c0:0c:9f:b7:b5:3b:a6:68:00:61:97:8e: e8:d8:b7:ac -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUdVja3y6edxF3KB96SebgnAAHOY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMTRaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQDJiMzk4ZDZhMTZkNzI3Y2FkY2Q5MGQ5YjhlZDA1NGU3MDc3ODc3NzNlZTNj NjRkNWNlODMyM2ExYTlhMWQzYjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlpYx2FkMFgG4Rc5uUZ+nP1Qz309G5LcnaKugo/yifaJWXth1Er1PpMytBW eEnpx7A5GgjAjHqBCc4GySxwvwBqyPTWOnPM4bUge01qEjAr/tAotGTDxV7tfj4q 7DNgU/C7JG+RFc4/oQ9Zy6jZn6H7ZdhpP9TKczX7OQxYQTLCu2IWsICI3gZN65+T lxeIBtygZP+JEqZkfs/g03o+F38Sv8q6yVAWkqDVsbn89oyOz62eiNQlURfq7kXy uucdMsiqCoxn+JEQiCQ2zsFAhwCjTwx7WF0l0b3YHPg8j6+dEzX/9PSu32LDNk+z Oe9Dr5StT+FXyo/Ubw5LfjGVEQECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQBEiIb 811ZZ1NhnxG0MTyjFJQ+qTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTE0NzNmZTUtZjEyOS00OGQ5LThkMjMtNjNkNjJjZWM2NjNhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DgI QDANBgkqhkiG9w0BAQsFAAOCAQEAXPPnsmtE2eo9KjASMhPPOlvCTdDNc/abepkI bJFPOh1WqKtPhxoxLkMOxjitMe41cS2AZfhfMMpfwuoIpTmNWvFnpm9AII0bJG2n 8DTab02cPDQcoaXjMrby7njqQ7C7J4g62pJoyLegm+sq+DLoBXp9kDJKFGTLX/1C bfYmOjYFpM9l+2ydOwkmHF6n7SAk40hICcGgpgjK2qq6NXV/jeG4pwjr3WkhdRnF rJJpZGjYM5DDVqMlK+ZIgzLvmLXsBkKYzMHmejDGPYYLly+WZMuED1Ihzmvdhx5V JDWtQibxK/SyycuR+5/TeIHrJ7anwAyft7U7pmgAYZeO6Ni3rA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:27 2025 by rpki-client