This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json) Hash identifier: 2Aq5rB7IaPaHclMDxZLRdLpJutfu24SHvFutKS8yuf8= Subject key identifier: DD:5D:CF:5D:FA:7D:8A:CA:B6:01:EE:F9:B4:02:2B:15:3E:E9:4B:DF Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0D625F80D05C7FFED1BEF640800BD001C66E7C4A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa Signing time: Sat 15 Nov 2025 06:11:00 +0000 ROA not before: Sat 15 Nov 2025 06:11:00 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:62:5f:80:d0:5c:7f:fe:d1:be:f6:40:80:0b:d0:01:c6:6e:7c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:11:00 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=74259e47520439638a7820bf8e78f42f264366275db5322e8f1008bb81d7982d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:8a:8f:7b:5e:4d:37:6d:46:42:3f:81:23: 10:37:7f:03:8b:78:30:ce:40:fc:d8:88:a1:4e:2a: ac:70:20:4e:87:3c:51:ad:f1:7c:db:45:5a:9b:b2: e1:a9:c3:96:83:24:fb:e3:94:a3:28:54:d3:24:dc: f1:3f:6e:dd:3c:33:c6:5e:47:df:cb:04:0e:3f:02: 99:93:a5:04:58:81:90:e5:3d:a5:1a:fd:cf:35:b1: 95:02:4f:e8:17:b1:51:e8:06:f9:77:ee:41:df:41: dc:6e:ac:ab:a2:69:72:80:4c:46:fe:d0:1f:a9:40: cd:30:d1:f1:52:c4:b6:3e:f2:1e:11:7b:0a:cb:41: 4a:3c:36:ad:a1:2f:14:ff:67:e0:72:b4:52:a7:72: 86:f0:e0:0b:da:a8:2c:80:56:d2:69:95:be:57:d6: 4e:33:5d:d0:f3:de:65:9c:12:87:fc:da:c7:67:58: 60:97:ef:50:22:4b:b1:59:54:02:05:7a:4b:55:5a: 89:d2:fa:8f:b2:75:65:ab:12:a1:e3:10:9d:c2:f9: 77:18:81:11:fb:ae:b9:12:bb:b0:8c:10:44:18:e5: b2:3e:ba:7b:b0:3c:7e:26:0e:b8:41:f7:41:b0:ad: 9d:f8:48:cc:fb:63:51:3d:fd:63:55:1b:bb:1f:47: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5D:CF:5D:FA:7D:8A:CA:B6:01:EE:F9:B4:02:2B:15:3E:E9:4B:DF X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:6040::/48 Signature Algorithm: sha256WithRSAEncryption 85:69:84:89:08:d0:8e:df:12:49:28:f5:d5:a6:b6:15:92:57: be:23:af:e3:5c:26:03:7b:36:f4:91:f5:48:17:30:18:22:3b: b3:e2:37:09:40:13:5c:f0:86:c6:9a:2c:ac:b7:57:9f:d5:18: 47:62:2c:8a:e4:c0:0a:51:e4:2f:a7:3d:59:f4:c1:9c:ff:43: 4f:04:4d:cd:2c:a5:3a:38:2e:d8:ab:6d:67:96:4d:3c:01:52: 8a:cf:dd:4f:df:a6:ef:ff:88:10:d1:3c:a1:85:bb:ef:ab:00: 9f:4f:b9:fa:da:a8:9b:44:67:27:95:b5:d8:ce:79:83:eb:f1: af:29:c8:61:0b:7d:38:85:29:20:62:8b:f9:cc:fd:02:ef:5a: 2f:c5:3b:37:54:e8:4b:29:d4:52:42:5d:45:ce:46:2b:d7:2b: 91:5d:9f:4c:74:a3:0b:0e:4d:36:f5:73:62:89:2b:07:fd:07: 0a:3b:f5:9c:56:31:92:2a:fa:4f:70:10:59:0e:50:ee:64:c5: fa:46:3d:67:52:b0:fe:cc:0f:ff:6d:fd:d8:e8:2c:5b:4c:32: 21:79:b6:e5:c2:e1:25:15:a9:35:7c:b0:b2:a2:f6:db:7e:cd: 5e:d9:b0:4e:39:6d:71:95:6c:95:f4:a6:05:64:1f:87:bc:4b: 75:33:d7:ba -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUDWJfgNBcf/7RvvZAgAvQAcZufEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjExMDBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDc0MjU5ZTQ3NTIwNDM5NjM4YTc4MjBiZjhlNzhmNDJmMjY0MzY2Mjc1ZGI1 MzIyZThmMTAwOGJiODFkNzk4MmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmbio97Xk03bUZCP4EjEDd/A4t4MM5A/NiIoU4qrHAgToc8Ua3xfNtFWpuy 4anDloMk++OUoyhU0yTc8T9u3Twzxl5H38sEDj8CmZOlBFiBkOU9pRr9zzWxlQJP 6BexUegG+XfuQd9B3G6sq6JpcoBMRv7QH6lAzTDR8VLEtj7yHhF7CstBSjw2raEv FP9n4HK0UqdyhvDgC9qoLIBW0mmVvlfWTjNd0PPeZZwSh/zax2dYYJfvUCJLsVlU AgV6S1VaidL6j7J1ZasSoeMQncL5dxiBEfuuuRK7sIwQRBjlsj66e7A8fiYOuEH3 QbCtnfhIzPtjUT39Y1Ubux9HFFECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTdXc9d +n2KyrYB7vm0AisVPulL3zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTRlMDhkOGQtMTNmYS00MDYwLThjZTAtMGEyNzU3YTFmYTVkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9g QDANBgkqhkiG9w0BAQsFAAOCAQEAhWmEiQjQjt8SSSj11aa2FZJXviOv41wmA3s2 9JH1SBcwGCI7s+I3CUATXPCGxposrLdXn9UYR2IsiuTAClHkL6c9WfTBnP9DTwRN zSylOjgu2KttZ5ZNPAFSis/dT9+m7/+IENE8oYW776sAn0+5+tqom0RnJ5W12M55 g+vxrynIYQt9OIUpIGKL+cz9Au9aL8U7N1ToSynUUkJdRc5GK9crkV2fTHSjCw5N NvVzYokrB/0HCjv1nFYxkir6T3AQWQ5Q7mTF+kY9Z1Kw/swP/2392OgsW0wyIXm2 5cLhJRWpNXywsqL2237NXtmwTjltcZVslfSmBWQfh7xLdTPXug== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:03 2025 by rpki-client