This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa File: 99404275-57dd-4a36-8c29-529ab06d1d00.roa (raw, json) Hash identifier: raMx9Gjn+aYoP7tJ47A+7rZOMTvogdURE78WrwzjI+E= Subject key identifier: DD:CA:5A:6F:B8:D6:D8:3B:13:15:70:10:73:68:E2:FA:C0:AC:4B:84 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6FC2589E76FCFC173C96AE6C88E0E104F3734666 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa Signing time: Sat 15 Nov 2025 06:20:53 +0000 ROA not before: Sat 15 Nov 2025 06:20:53 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d03a:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c2:58:9e:76:fc:fc:17:3c:96:ae:6c:88:e0:e1:04:f3:73:46:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:53 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=71c78b34250ee965f123d8f4bc193b7a76b8c0cafa61caf9d3574f4af7482bb1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:2b:9e:e5:a2:da:d7:f9:55:4d:dd:00:ac: c8:4c:09:f2:72:0d:8e:99:b9:67:d6:f3:d9:80:a5: f5:b3:a2:2b:57:7d:ff:a1:6d:ed:54:a1:11:32:f7: 6e:15:b4:a3:9f:45:e2:32:b2:a9:84:ed:5d:0f:63: 15:6e:55:bb:a7:06:a9:02:b7:2b:89:a3:d1:70:14: e9:a7:9f:1e:f6:6b:fd:00:c4:72:ae:a2:6d:da:97: 99:03:f0:d7:70:59:6a:17:ed:e2:b6:b2:2d:85:03: 70:09:8a:2a:86:fb:43:19:da:20:66:b4:7b:0e:df: 2a:41:23:ee:2a:80:ae:ba:0f:35:35:d5:3a:d1:5b: 5b:33:76:c8:c3:82:eb:6f:a2:da:8c:5d:dd:bc:a2: 5d:df:2d:d3:5c:a4:f8:6c:43:f1:e2:13:3c:14:a0: 57:5c:92:7f:48:47:6c:f1:2b:05:ef:54:70:8f:03: dd:47:ae:19:88:67:64:22:a5:01:c6:37:cd:27:c4: be:f6:51:29:d5:25:24:bc:e3:0f:70:57:f9:b4:a3: 68:58:f4:5f:76:f1:00:a0:b1:90:c5:d4:1b:b2:d4: 16:32:c8:02:0f:4f:48:bb:47:cc:a0:fe:60:3f:d7: 7e:fb:aa:29:dd:b1:e9:4b:fa:1d:9d:54:d3:f9:52: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CA:5A:6F:B8:D6:D8:3B:13:15:70:10:73:68:E2:FA:C0:AC:4B:84 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d03a:b000::/40 Signature Algorithm: sha256WithRSAEncryption 73:9c:f5:9d:65:30:99:86:ff:f5:3d:ed:9d:eb:ca:cf:fa:f9: c3:e4:47:2f:48:9c:3d:23:e9:e6:23:3b:a0:0a:1e:5e:f6:e6: e8:58:bc:bf:79:29:b6:41:9e:36:5a:ab:5b:63:8a:bb:cd:6b: 86:a0:e9:79:a9:63:ff:d3:12:b2:ff:e8:1d:8c:62:4d:cf:a9: f8:0b:a1:54:84:ce:94:51:0c:04:a3:85:47:cb:60:a8:f0:4d: 59:3f:f9:61:d3:c8:b2:f8:a7:60:0d:f5:7c:fc:0d:b3:4a:52: 31:69:93:df:46:3a:48:64:1e:d3:15:a5:48:11:97:2c:17:83: 58:74:06:cb:df:51:8e:5e:71:8a:d8:c4:e8:5c:03:b0:5d:c8: d2:f5:e3:5e:48:67:1c:fe:92:e1:07:7e:3a:91:24:bb:11:fa: 49:e9:46:09:34:e8:e2:37:39:e1:8f:77:68:58:88:7c:e9:9d: 98:98:a2:aa:a1:fb:c5:cd:40:b5:66:68:b8:cc:42:38:a6:b5: 36:fe:e6:e6:cf:89:5b:89:a5:3a:72:f2:86:8f:c1:34:22:b1: ea:87:69:a5:62:a0:c0:de:ab:ce:05:01:df:e5:f4:34:b5:60: 6e:50:e2:70:9c:78:1b:27:1f:21:2c:f7:ed:73:9f:6c:94:6c: 0a:bc:dd:0e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUb8JYnnb8/Bc8lq5siODhBPNzRmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwNTNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDcxYzc4YjM0MjUwZWU5NjVmMTIzZDhmNGJjMTkzYjdhNzZiOGMwY2FmYTYx Y2FmOWQzNTc0ZjRhZjc0ODJiYjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJXFK57lotrX+VVN3QCsyEwJ8nINjpm5Z9bz2YCl9bOiK1d9/6Ft7VShETL3 bhW0o59F4jKyqYTtXQ9jFW5Vu6cGqQK3K4mj0XAU6aefHvZr/QDEcq6ibdqXmQPw 13BZahft4rayLYUDcAmKKob7QxnaIGa0ew7fKkEj7iqArroPNTXVOtFbWzN2yMOC 62+i2oxd3byiXd8t01yk+GxD8eITPBSgV1ySf0hHbPErBe9UcI8D3UeuGYhnZCKl AcY3zSfEvvZRKdUlJLzjD3BX+bSjaFj0X3bxAKCxkMXUG7LUFjLIAg9PSLtHzKD+ YD/XfvuqKd2x6Uv6HZ1U0/lSkj8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTdylpv uNbYOxMVcBBzaOL6wKxLhDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTk0MDQyNzUtNTdkZC00YTM2LThjMjktNTI5YWIwNmQxZDAwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dqw MA0GCSqGSIb3DQEBCwUAA4IBAQBznPWdZTCZhv/1Pe2d68rP+vnD5EcvSJw9I+nm IzugCh5e9uboWLy/eSm2QZ42WqtbY4q7zWuGoOl5qWP/0xKy/+gdjGJNz6n4C6FU hM6UUQwEo4VHy2Co8E1ZP/lh08iy+KdgDfV8/A2zSlIxaZPfRjpIZB7TFaVIEZcs F4NYdAbL31GOXnGK2MToXAOwXcjS9eNeSGcc/pLhB346kSS7EfpJ6UYJNOjiNznh j3doWIh86Z2YmKKqofvFzUC1Zmi4zEI4prU2/ubmz4lbiaU6cvKGj8E0IrHqh2ml YqDA3qvOBQHf5fQ0tWBuUOJwnHgbJx8hLPftc59slGwKvN0O -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:32 2025 by rpki-client