This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94da73c8-c1bb-4329-a141-1dcbab6b0213.roa File: 94da73c8-c1bb-4329-a141-1dcbab6b0213.roa (raw, json) Hash identifier: DmceiN++Nxzt3zc5Mnb41tbu+Unqj4Y2FN/x1TnaFYo= Subject key identifier: 34:D5:56:06:44:C3:AF:41:C7:92:05:0F:4C:EA:36:A9:98:23:4A:D9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 64B008E6EB8D1D40313FBB55DE724A0963426384 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94da73c8-c1bb-4329-a141-1dcbab6b0213.roa Signing time: Tue 25 Nov 2025 20:10:03 +0000 ROA not before: Tue 25 Nov 2025 20:10:03 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b0:08:e6:eb:8d:1d:40:31:3f:bb:55:de:72:4a:09:63:42:63:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:10:03 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=5a2e2bed1abfe6b68acf33b0ab65a5783ef53b5e622cd521452f23422e7d107f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:7f:08:5e:f6:18:6d:9c:09:40:32:f8:45: 9d:3b:fd:c7:58:97:9b:b6:04:08:e3:de:1d:c2:6c: f8:78:77:29:cc:6c:bd:6f:85:8a:92:ef:09:cc:e1: 9b:4c:21:51:54:a7:61:37:0a:1b:9c:11:bc:0a:04: 08:25:4b:2d:c3:0e:f3:06:ad:27:4d:ae:48:75:92: ea:56:24:c2:e7:7b:f8:96:25:17:7e:d2:dc:84:62: 61:59:7a:89:b6:a8:77:32:45:6c:c5:23:75:97:ad: 10:5b:28:ba:c0:2f:ae:b5:f0:5f:b9:75:c1:f7:6c: 51:73:33:56:a2:64:ab:82:15:e3:82:b6:f5:74:f0: 16:cf:ca:2d:08:9e:66:28:12:02:30:bc:60:71:da: a4:99:8d:1c:27:58:e8:7a:67:db:35:33:56:da:c6: ba:39:2a:ac:48:2c:b0:da:d0:af:72:5e:e5:c1:c7: f0:fe:b1:45:85:72:6b:5a:32:3f:9c:10:be:9e:df: 6a:1b:0c:be:f1:54:0f:46:bf:83:ab:9f:be:13:84: 9b:7b:8b:39:2c:e7:e8:75:f0:21:a2:e9:c5:66:ca: 07:4b:00:e2:83:97:4f:77:19:43:23:63:16:9d:62: 73:1c:c0:be:09:b6:7e:b4:f1:04:8f:58:e3:b6:a5: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:56:06:44:C3:AF:41:C7:92:05:0F:4C:EA:36:A9:98:23:4A:D9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94da73c8-c1bb-4329-a141-1dcbab6b0213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:4020::/48 Signature Algorithm: sha256WithRSAEncryption 5c:0d:94:95:ff:0c:2d:20:53:fe:3b:17:1a:90:0a:89:ee:a6: f3:df:d9:fe:8f:33:95:f9:7b:90:a5:0d:03:a5:28:ba:3d:51: 99:b5:9d:27:9c:e2:57:43:61:88:9b:c8:43:18:a9:d5:96:c7: 65:52:07:e1:35:a1:09:a6:40:87:e7:b5:1f:5d:1f:c7:23:d7: 57:2e:3e:92:e8:f7:c6:46:c6:be:0d:fb:0c:66:3c:35:37:d0: f4:08:07:d1:5f:dd:c7:8c:91:86:84:ee:8c:23:7e:69:94:e7: 77:8c:4a:21:17:ac:f6:0c:5e:d2:ec:1a:8b:f0:3b:fa:5e:83: 52:64:0f:3d:22:e3:8c:29:b8:60:3c:9c:c9:50:f1:d8:d3:a5: 4e:d8:40:30:ad:3f:05:c3:d0:d2:09:f6:71:53:a8:7b:8f:ac: f2:6a:6d:f5:84:ad:c3:d4:e4:12:b9:4a:a2:91:75:84:52:30: 73:fa:69:21:41:ed:73:d6:dc:f4:53:04:d7:78:0c:27:71:69: e1:85:55:22:ad:6c:03:b3:d3:b3:85:c8:82:43:5e:7d:d1:9d: e0:45:5d:4d:fe:7b:0f:90:f6:77:b2:b2:6f:93:db:8d:75:5a: ca:dd:be:2c:0c:b4:0b:c3:d7:ec:93:3d:20:39:fe:b2:f1:61: d1:65:b2:a4 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUZLAI5uuNHUAxP7tV3nJKCWNCY4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDEwMDNaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDVhMmUyYmVkMWFiZmU2YjY4YWNmMzNiMGFiNjVhNTc4M2VmNTNiNWU2MjJj ZDUyMTQ1MmYyMzQyMmU3ZDEwN2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJD9fwhe9hhtnAlAMvhFnTv9x1iXm7YECOPeHcJs+Hh3KcxsvW+FipLvCczh m0whUVSnYTcKG5wRvAoECCVLLcMO8watJ02uSHWS6lYkwud7+JYlF37S3IRiYVl6 ibaodzJFbMUjdZetEFsousAvrrXwX7l1wfdsUXMzVqJkq4IV44K29XTwFs/KLQie ZigSAjC8YHHapJmNHCdY6Hpn2zUzVtrGujkqrEgssNrQr3Je5cHH8P6xRYVya1oy P5wQvp7fahsMvvFUD0a/g6ufvhOEm3uLOSzn6HXwIaLpxWbKB0sA4oOXT3cZQyNj Fp1icxzAvgm2frTxBI9Y47alcNECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ01VYG RMOvQceSBQ9M6japmCNK2TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTRkYTczYzgtYzFiYi00MzI5LWExNDEtMWRjYmFiNmIwMjEzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFA IDANBgkqhkiG9w0BAQsFAAOCAQEAXA2Ulf8MLSBT/jsXGpAKie6m89/Z/o8zlfl7 kKUNA6Uouj1RmbWdJ5ziV0NhiJvIQxip1ZbHZVIH4TWhCaZAh+e1H10fxyPXVy4+ kuj3xkbGvg37DGY8NTfQ9AgH0V/dx4yRhoTujCN+aZTnd4xKIRes9gxe0uwai/A7 +l6DUmQPPSLjjCm4YDycyVDx2NOlTthAMK0/BcPQ0gn2cVOoe4+s8mpt9YStw9Tk ErlKopF1hFIwc/ppIUHtc9bc9FME13gMJ3Fp4YVVIq1sA7PTs4XIgkNefdGd4EVd Tf57D5D2d7Kyb5PbjXVayt2+LAy0C8PX7JM9IDn+svFh0WWypA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:46 2025 by rpki-client