This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa File: 975dfb4d-ef39-4371-9678-ff7909080d1e.roa (raw, json) Hash identifier: doKHSnWj7CDRCG1gIJLLuwXT9qO5RltmcKL0Gbj55Zk= Subject key identifier: AC:53:82:14:A9:0D:2D:69:6E:79:DC:90:D5:03:81:3E:A1:A1:36:DA Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2D960EF705EB64F4E54E6155A241AC73DC7272F1 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa Signing time: Sat 15 Nov 2025 05:51:08 +0000 ROA not before: Sat 15 Nov 2025 05:51:08 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:96:0e:f7:05:eb:64:f4:e5:4e:61:55:a2:41:ac:73:dc:72:72:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:51:08 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=d548b5b0dbb8a715ff0d0f466874c50cfcd50053a395d4c5c89a7be78fccc94a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:99:5f:c5:50:4b:3f:5c:6c:dc:60:03:bf: 33:6a:02:48:6b:f4:18:ad:6e:3b:7d:25:64:cb:df: 57:ff:f4:55:3a:21:8a:13:9d:31:ba:e5:03:44:d4: f9:79:3a:29:1d:6f:60:b1:ac:97:fe:d8:14:05:3d: 91:a8:3f:e0:24:af:4e:09:32:b8:2d:98:30:22:06: 15:1d:02:17:af:22:59:35:09:1c:22:06:b8:fe:d0: 97:df:f7:51:b5:88:23:ff:01:5f:be:e1:1e:55:61: 99:fe:1f:fb:73:d1:a6:01:b5:0d:19:ea:45:58:34: 47:7f:54:97:ef:9c:f2:e6:d8:9d:7b:59:11:a3:0d: 27:55:b7:3e:d9:4a:83:4a:07:a2:c9:f9:fd:aa:be: f8:c7:9f:ca:7d:3a:50:33:7d:2d:b4:5f:4d:5f:9e: 4c:f0:87:40:e0:ce:b1:93:a1:62:12:2c:0f:98:50: 69:42:65:39:6d:b9:3c:a9:12:ef:99:52:b4:a1:fe: aa:6f:ec:6d:3f:bc:66:7e:66:68:25:1c:db:fc:c4: 00:9b:17:8c:d2:59:f0:c3:91:f4:0a:3a:cd:5c:69: f6:86:0e:c4:4e:4c:3b:ed:f3:15:e2:9c:b9:0e:0c: ed:9d:03:86:b4:5a:7b:aa:0e:dd:4a:83:4f:cb:88: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:53:82:14:A9:0D:2D:69:6E:79:DC:90:D5:03:81:3E:A1:A1:36:DA X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:b080::/48 Signature Algorithm: sha256WithRSAEncryption 79:27:04:12:c3:72:95:18:7b:4e:80:95:5e:71:33:f7:86:b3: d6:ad:72:69:95:28:9e:33:32:73:f8:4d:50:1a:c8:d7:4e:56: 60:3e:3d:5e:90:3d:9f:90:e0:4a:46:c3:16:2c:8b:ce:3c:df: c1:c7:d4:f9:18:5c:d0:03:17:7b:8b:7a:e4:e3:46:f3:d8:c8: fe:02:73:ab:9b:8e:59:54:8c:59:6e:5d:8e:96:8b:a9:0c:13: ba:6d:70:67:0a:de:86:7a:c6:80:f2:cb:c2:44:48:8e:06:ea: 21:09:7e:e2:16:31:1c:05:25:99:b8:af:b9:98:93:45:6b:e8: 8a:f3:38:a3:46:0d:fd:6e:5d:94:56:04:79:93:c7:9f:86:8b: fd:6a:5f:e6:b7:17:60:a5:a3:89:b7:9c:5f:cf:3e:89:45:9c: 5c:45:63:57:53:65:ac:b8:14:21:2e:67:97:ca:2b:71:40:ff: 57:4d:7e:dc:ea:8c:68:ed:c3:bb:8d:53:3f:a6:9e:2c:82:5f: c3:dd:62:68:85:c4:6f:c0:34:36:7e:09:b0:ef:2d:72:08:fa: ad:07:14:d0:9f:e4:10:68:41:92:3c:a7:dc:06:75:b7:8d:5a: 7b:49:d9:10:fd:cc:43:39:c3:b1:39:89:45:98:33:e0:a9:22: 2b:74:77:c7 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIULZYO9wXrZPTlTmFVokGsc9xycvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTUxMDhaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGQ1NDhiNWIwZGJiOGE3MTVmZjBkMGY0NjY4NzRjNTBjZmNkNTAwNTNhMzk1 ZDRjNWM4OWE3YmU3OGZjY2M5NGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFWmV/FUEs/XGzcYAO/M2oCSGv0GK1uO30lZMvfV//0VTohihOdMbrlA0TU +Xk6KR1vYLGsl/7YFAU9kag/4CSvTgkyuC2YMCIGFR0CF68iWTUJHCIGuP7Ql9/3 UbWII/8BX77hHlVhmf4f+3PRpgG1DRnqRVg0R39Ul++c8ubYnXtZEaMNJ1W3PtlK g0oHosn5/aq++Mefyn06UDN9LbRfTV+eTPCHQODOsZOhYhIsD5hQaUJlOW25PKkS 75lStKH+qm/sbT+8Zn5maCUc2/zEAJsXjNJZ8MOR9Ao6zVxp9oYOxE5MO+3zFeKc uQ4M7Z0DhrRae6oO3UqDT8uIXdECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSsU4IU qQ0taW553JDVA4E+oaE22jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTc1ZGZiNGQtZWYzOS00MzcxLTk2NzgtZmY3OTA5MDgwZDFlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKw gDANBgkqhkiG9w0BAQsFAAOCAQEAeScEEsNylRh7ToCVXnEz94az1q1yaZUonjMy c/hNUBrI105WYD49XpA9n5DgSkbDFiyLzjzfwcfU+Rhc0AMXe4t65ONG89jI/gJz q5uOWVSMWW5djpaLqQwTum1wZwrehnrGgPLLwkRIjgbqIQl+4hYxHAUlmbivuZiT RWvoivM4o0YN/W5dlFYEeZPHn4aL/Wpf5rcXYKWjibecX88+iUWcXEVjV1NlrLgU IS5nl8orcUD/V01+3OqMaO3Du41TP6aeLIJfw91iaIXEb8A0Nn4JsO8tcgj6rQcU 0J/kEGhBkjyn3AZ1t41ae0nZEP3MQznDsTmJRZgz4KkiK3R3xw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:38 2025 by rpki-client