This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa File: a103a3a0-ff03-4978-a976-55516478c88b.roa (raw, json) Hash identifier: zJIpR401LEKwK61ePjH5L+aPzOa5DcTBsUuiIL5a6q0= Subject key identifier: 87:1D:3D:17:C2:B5:FD:13:15:48:94:DC:9A:B5:46:72:35:D8:30:9C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 126E14889EF8F5B6A99F92A51F4C34469AEA3A1F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa Signing time: Sun 23 Nov 2025 01:30:12 +0000 ROA not before: Sun 23 Nov 2025 01:30:12 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6e:14:88:9e:f8:f5:b6:a9:9f:92:a5:1f:4c:34:46:9a:ea:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:12 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=e7a3e40a31fa23b60663371e2f7f925af26221777c478ef5be403e8e4c915af0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c7:d2:27:6c:32:30:c2:a6:2a:a4:e4:52:21: b0:0a:b9:05:ae:46:e4:f5:4a:21:db:21:c3:c5:14: e9:ed:18:e9:19:05:50:d0:d4:43:cb:30:5b:05:41: f0:c9:b9:85:5d:3e:d7:2d:e7:f6:8f:5b:d7:1c:8d: 5f:48:52:0b:79:63:fa:5b:f6:ce:4b:67:52:f2:a9: 7e:27:c6:41:bf:ea:42:45:48:a0:b4:a2:7f:e9:57: 24:99:f3:fa:1d:90:5a:e3:d5:71:4e:cb:b2:28:e1: 6f:95:00:65:f5:14:f2:c1:eb:d5:0c:d9:ee:fe:38: c3:10:56:68:ef:22:16:8b:fb:d9:c8:ee:35:2c:78: d8:dc:ee:c2:6d:02:8e:71:e2:70:b4:9e:7e:d1:af: 8c:a1:b9:0b:9d:8c:ad:ce:bc:b4:f2:17:1b:0e:9d: d9:70:48:46:78:2e:4e:a1:a6:f2:78:ad:19:32:82: db:ad:e2:71:1d:13:be:e6:15:07:7c:c3:1b:63:73: fe:5e:01:56:0b:cf:99:dd:e6:69:9a:5a:05:a7:20: a5:1a:fe:96:fe:c2:10:77:c3:9a:66:93:89:33:d0: 85:9f:9e:05:89:84:ac:05:40:74:35:03:e2:9c:d2: 50:28:d5:4a:c3:cf:c6:82:f4:6d:a6:d4:34:cc:79: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:3D:17:C2:B5:FD:13:15:48:94:DC:9A:B5:46:72:35:D8:30:9C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:6040::/48 Signature Algorithm: sha256WithRSAEncryption 5f:d1:2e:5a:ec:68:8e:e4:6f:51:73:a0:48:5d:cc:52:09:b8: 39:ef:15:c1:ec:1a:ab:ed:ec:2d:f1:98:ed:80:60:b1:86:d1: 16:bf:4f:ad:22:51:84:33:fd:1e:e7:8f:e2:5e:3b:ed:0b:e5: f9:ae:d1:94:54:9d:1e:d7:49:4b:eb:52:c0:0c:70:11:07:38: b0:ca:96:53:6f:d5:a7:5d:08:a4:95:21:99:a8:f6:e0:9d:5a: 86:1f:48:02:f6:0a:bf:b8:26:d3:16:09:4a:84:a8:58:d1:81: ad:c2:07:cd:66:63:d4:98:93:c0:0d:9f:9e:69:4a:c9:df:8d: 80:dc:5f:6c:b9:fc:d6:62:ba:17:9a:45:e7:5b:8a:de:ca:de: cc:3a:9b:51:c8:24:cc:bb:9c:2b:62:9e:ee:af:30:5a:51:2b: 33:f3:e4:c4:77:55:bf:2c:74:83:83:fd:e3:02:8a:59:94:d5: a0:55:62:3a:82:3f:19:0c:1d:c0:1b:08:33:1c:37:df:19:2e: ef:f5:38:56:9e:bc:47:e0:7b:63:6b:e8:9b:43:80:b7:c4:3f: 83:cf:5f:0e:85:32:3d:3e:ab:f9:bc:31:af:09:07:6b:cd:6b: af:33:48:f8:dc:91:10:f6:f7:95:94:e5:c8:32:04:c5:7f:99: 73:05:1e:51 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUEm4UiJ749bapn5KlH0w0RprqOh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMTJaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGU3YTNlNDBhMzFmYTIzYjYwNjYzMzcxZTJmN2Y5MjVhZjI2MjIxNzc3YzQ3 OGVmNWJlNDAzZThlNGM5MTVhZjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTH0idsMjDCpiqk5FIhsAq5Ba5G5PVKIdshw8UU6e0Y6RkFUNDUQ8swWwVB 8Mm5hV0+1y3n9o9b1xyNX0hSC3lj+lv2zktnUvKpfifGQb/qQkVIoLSif+lXJJnz +h2QWuPVcU7Lsijhb5UAZfUU8sHr1QzZ7v44wxBWaO8iFov72cjuNSx42Nzuwm0C jnHicLSeftGvjKG5C52Mrc68tPIXGw6d2XBIRnguTqGm8nitGTKC263icR0TvuYV B3zDG2Nz/l4BVgvPmd3maZpaBacgpRr+lv7CEHfDmmaTiTPQhZ+eBYmErAVAdDUD 4pzSUCjVSsPPxoL0babUNMx5gXkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSHHT0X wrX9ExVIlNyatUZyNdgwnDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTEwM2EzYTAtZmYwMy00OTc4LWE5NzYtNTU1MTY0NzhjODhiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gpg QDANBgkqhkiG9w0BAQsFAAOCAQEAX9EuWuxojuRvUXOgSF3MUgm4Oe8Vwewaq+3s LfGY7YBgsYbRFr9PrSJRhDP9HueP4l477Qvl+a7RlFSdHtdJS+tSwAxwEQc4sMqW U2/Vp10IpJUhmaj24J1ahh9IAvYKv7gm0xYJSoSoWNGBrcIHzWZj1JiTwA2fnmlK yd+NgNxfbLn81mK6F5pF51uK3srezDqbUcgkzLucK2Ke7q8wWlErM/PkxHdVvyx0 g4P94wKKWZTVoFViOoI/GQwdwBsIMxw33xku7/U4Vp68R+B7Y2vom0OAt8Q/g89f DoUyPT6r+bwxrwkHa81rrzNI+NyREPb3lZTlyDIExX+ZcwUeUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:03 2025 by rpki-client