This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa File: 9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa (raw, json) Hash identifier: zU4eVPogCn/m5SOtHA9ORUIWmLIKqNeBf2DhncSYeKE= Subject key identifier: 72:23:A2:A9:D4:79:06:15:9F:C1:37:00:F6:36:5F:E4:04:38:4A:D0 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 453B6A74221B1177B7A59C785CB2DECA009984CB Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa Signing time: Sat 15 Nov 2025 05:20:40 +0000 ROA not before: Sat 15 Nov 2025 05:20:40 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3b:6a:74:22:1b:11:77:b7:a5:9c:78:5c:b2:de:ca:00:99:84:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:20:40 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=a8f12fb37888660922d537acc03b831f630db2c0a9ad84af5f54781fe232e90d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:68:47:8f:8b:1b:fa:d9:c4:8c:54:6b:e1: 05:6c:37:48:0e:84:d2:d0:57:d6:76:dd:1c:00:f1: 1c:f5:3b:b2:92:85:4b:c9:41:6d:7f:5c:3e:8d:41: d7:cc:10:cb:94:f3:80:2f:1a:66:5a:fe:ad:98:b6: c1:c8:bd:5d:a3:c7:a7:79:45:0d:b1:2b:8f:1a:bf: 2d:fc:de:9e:72:29:76:de:44:2f:43:4c:b1:90:46: ea:cd:46:c6:88:bf:80:38:13:fc:b1:0d:dd:c6:cd: 3a:6d:b5:97:6c:0d:fd:65:a6:71:e1:f7:7e:c7:38: 53:09:18:85:c1:a5:cb:d2:f3:32:cf:a2:ad:bb:31: 86:a0:8d:1b:87:b9:c6:44:d1:2e:64:3f:8c:1e:5c: f3:4d:88:79:43:12:73:78:fc:d8:52:a1:1a:05:e6: 64:79:9b:96:15:b4:67:f5:2f:70:3b:45:4e:a2:b4: 1d:aa:72:64:50:f1:02:d0:dc:59:03:52:81:4f:03: 89:99:91:8a:97:6a:7d:49:82:76:e4:f1:52:9a:44: 15:24:3d:18:8b:4a:98:9e:5c:ad:73:d7:9d:df:a7: f3:96:84:2c:7e:49:e3:9b:87:5a:8a:ba:8b:aa:dd: 95:6e:74:b7:96:39:c2:84:e0:3d:d2:15:d9:20:27: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:23:A2:A9:D4:79:06:15:9F:C1:37:00:F6:36:5F:E4:04:38:4A:D0 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:9080::/48 Signature Algorithm: sha256WithRSAEncryption 29:a7:88:d6:c9:9a:ac:6e:8f:37:20:2c:b2:bb:46:16:ad:ab: 9a:a5:94:d1:b4:60:8f:f8:1c:15:9c:ea:98:68:20:02:65:bb: 07:61:53:77:03:c5:ad:09:48:1f:d0:d8:21:43:72:f0:0b:b0: 30:0d:1b:d5:12:05:9f:a5:05:cc:df:c3:1f:eb:e8:6a:a1:42: d2:91:f9:74:59:82:08:98:51:e3:d1:ac:fc:f3:19:d8:da:a0: 43:59:47:57:57:52:85:77:1a:b5:7d:b3:f8:90:4b:62:92:1c: 27:90:43:a7:40:8f:f3:d0:9e:5f:7f:67:91:9f:5b:3c:48:8f: 8d:2f:93:01:00:5a:68:a7:53:c0:b1:a8:d1:77:52:ce:15:52: 64:ed:3e:00:44:0e:89:f3:2d:2a:e7:d8:36:03:8d:8f:3a:06: 42:d7:0b:2d:23:51:21:64:2f:fa:42:eb:9f:69:97:b4:d2:4a: e6:15:aa:91:3e:d9:26:72:c4:44:4c:1c:2d:77:f5:31:73:43: 43:d8:78:09:a3:4b:56:ab:e0:be:fa:81:eb:a0:32:aa:16:bf: 53:7f:29:d1:66:e6:e8:58:23:24:70:a5:96:2b:f5:ac:42:02: ef:a6:b6:25:13:47:b5:4b:8b:db:ef:b5:6a:bf:31:5b:ec:05: 4d:47:fe:9c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIURTtqdCIbEXe3pZx4XLLeygCZhMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTIwNDBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGE4ZjEyZmIzNzg4ODY2MDkyMmQ1MzdhY2MwM2I4MzFmNjMwZGIyYzBhOWFk ODRhZjVmNTQ3ODFmZTIzMmU5MGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANylaEePixv62cSMVGvhBWw3SA6E0tBX1nbdHADxHPU7spKFS8lBbX9cPo1B 18wQy5TzgC8aZlr+rZi2wci9XaPHp3lFDbErjxq/LfzennIpdt5EL0NMsZBG6s1G xoi/gDgT/LEN3cbNOm21l2wN/WWmceH3fsc4UwkYhcGly9LzMs+irbsxhqCNG4e5 xkTRLmQ/jB5c802IeUMSc3j82FKhGgXmZHmblhW0Z/UvcDtFTqK0HapyZFDxAtDc WQNSgU8DiZmRipdqfUmCduTxUppEFSQ9GItKmJ5crXPXnd+n85aELH5J45uHWoq6 i6rdlW50t5Y5woTgPdIV2SAnJY8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRyI6Kp 1HkGFZ/BNwD2Nl/kBDhK0DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTkyNmExNWUtZDdmZC00ZDdiLWFkMWUtZDBkZjk4ZjU0NmNiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+Q gDANBgkqhkiG9w0BAQsFAAOCAQEAKaeI1smarG6PNyAssrtGFq2rmqWU0bRgj/gc FZzqmGggAmW7B2FTdwPFrQlIH9DYIUNy8AuwMA0b1RIFn6UFzN/DH+voaqFC0pH5 dFmCCJhR49Gs/PMZ2NqgQ1lHV1dShXcatX2z+JBLYpIcJ5BDp0CP89CeX39nkZ9b PEiPjS+TAQBaaKdTwLGo0XdSzhVSZO0+AEQOifMtKufYNgONjzoGQtcLLSNRIWQv +kLrn2mXtNJK5hWqkT7ZJnLEREwcLXf1MXNDQ9h4CaNLVqvgvvqB66Ayqha/U38p 0Wbm6FgjJHClliv1rEIC76a2JRNHtUuL2++1ar8xW+wFTUf+nA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:22 2025 by rpki-client