This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa File: a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa (raw, json) Hash identifier: 2XS++DS14ozcdU2usTfT9PzxiXrUU4/nH5X+kCkL694= Subject key identifier: BD:37:61:42:33:2E:48:44:57:F7:2C:BA:68:F7:45:56:85:42:3A:FA Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 38F09D80E07D9F600AE155776A3E511A0237F305 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa Signing time: Sat 15 Nov 2025 05:41:23 +0000 ROA not before: Sat 15 Nov 2025 05:41:23 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d03a:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f0:9d:80:e0:7d:9f:60:0a:e1:55:77:6a:3e:51:1a:02:37:f3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:41:23 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=88a9475e0451e1f57774b0c06ac9d2eb1837a00aa73696a9e80bd9f984aad4c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:e3:97:6f:10:e7:fd:f3:06:52:e2:cc:dc: 05:51:b0:2b:77:f8:ac:df:cc:a1:7a:be:39:dd:b3: e8:cf:f6:84:1a:2f:09:87:e1:c7:7e:c0:19:e9:53: cb:8c:16:44:9b:68:e7:ac:0a:9d:ac:96:bc:ae:e9: 6e:74:ad:b6:60:13:5e:c8:bc:0f:3b:3e:ec:24:2a: 92:9f:7d:37:cf:de:ae:0a:f7:a4:a1:ef:bf:48:05: 82:cd:82:e4:2b:a1:d0:78:12:50:57:29:7a:de:f0: 72:54:71:43:48:4c:23:ce:1b:fe:78:7c:c0:ca:79: 42:6c:a3:75:02:5d:76:29:75:57:e4:5c:b7:d6:81: 5c:6a:9f:17:cd:c0:42:78:30:f3:71:1a:8a:c3:e9: f3:73:59:8b:d5:30:62:5f:0b:dd:af:1a:ec:66:85: 76:b1:56:57:4f:4a:73:65:df:7b:9c:9e:d9:b7:cc: de:05:ee:10:9c:57:40:18:cc:f0:81:86:3a:11:20: d0:ee:72:98:7f:41:7b:40:1d:54:9d:4b:92:51:ae: 69:b2:39:87:f8:ba:c0:3b:0c:b6:5d:aa:ec:e0:f0: 52:0f:82:c0:04:bd:70:2d:b1:d9:88:f7:46:1a:ee: b7:f9:a3:e2:f7:41:b0:ba:b4:b4:f4:c8:e4:a3:73: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:37:61:42:33:2E:48:44:57:F7:2C:BA:68:F7:45:56:85:42:3A:FA X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d03a:4000::/40 Signature Algorithm: sha256WithRSAEncryption a0:8c:49:bd:14:71:be:ec:ad:93:62:f5:04:d2:ab:55:c5:4f: 07:e0:e6:4a:46:9a:25:2f:a4:e5:1c:9d:5c:b7:88:eb:7a:0b: c4:d5:10:61:f2:de:fd:eb:11:96:d2:9f:9e:e4:96:05:93:29: 14:75:91:cc:2e:df:db:cb:74:3b:f1:02:76:ea:85:4a:b9:1b: ef:c5:6d:54:a4:90:0e:05:dd:83:56:f8:52:75:21:e9:43:f4: 37:da:c0:05:c9:99:a3:5d:01:2d:81:b6:1c:55:ab:f2:ab:78: d5:a0:af:05:33:ad:35:5f:a3:a7:e6:41:fa:f4:7c:f8:0c:56: 89:85:f4:09:4b:c4:2e:ec:04:83:76:69:75:51:bd:c8:cb:06: a5:fd:fa:cf:1a:39:db:6a:1f:a3:6c:7c:a4:40:61:b1:95:7d: 13:84:6f:73:29:79:99:ac:f0:1b:63:24:7f:35:0f:c8:5a:77: 1e:73:c3:82:7f:30:97:96:e7:97:2b:2c:d5:26:18:72:6a:c3: be:5e:e9:83:fe:41:ce:6d:9b:6c:00:53:5f:b8:67:50:fb:19: b0:34:cb:21:28:ea:5a:6c:fb:5f:32:9b:41:dc:e1:bd:03:d3: b9:1a:80:fd:27:9a:c5:92:0f:13:3f:5c:4a:90:20:b2:2d:9e: e4:d7:36:8a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUOPCdgOB9n2AK4VV3aj5RGgI38wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTQxMjNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDg4YTk0NzVlMDQ1MWUxZjU3Nzc0YjBjMDZhYzlkMmViMTgzN2EwMGFhNzM2 OTZhOWU4MGJkOWY5ODRhYWQ0YzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcr45dvEOf98wZS4szcBVGwK3f4rN/MoXq+Od2z6M/2hBovCYfhx37AGelT y4wWRJto56wKnayWvK7pbnSttmATXsi8Dzs+7CQqkp99N8/ergr3pKHvv0gFgs2C 5Cuh0HgSUFcpet7wclRxQ0hMI84b/nh8wMp5QmyjdQJddil1V+Rct9aBXGqfF83A Qngw83EaisPp83NZi9UwYl8L3a8a7GaFdrFWV09Kc2Xfe5ye2bfM3gXuEJxXQBjM 8IGGOhEg0O5ymH9Be0AdVJ1LklGuabI5h/i6wDsMtl2q7ODwUg+CwAS9cC2x2Yj3 Rhrut/mj4vdBsLq0tPTI5KNzt3cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS9N2FC My5IRFf3LLpo90VWhUI6+jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTJjNGMyOGMtMGRmOS00MGQ0LWJmNGQtOTI2MTA0YjY5MWY0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DpA MA0GCSqGSIb3DQEBCwUAA4IBAQCgjEm9FHG+7K2TYvUE0qtVxU8H4OZKRpolL6Tl HJ1ct4jregvE1RBh8t796xGW0p+e5JYFkykUdZHMLt/by3Q78QJ26oVKuRvvxW1U pJAOBd2DVvhSdSHpQ/Q32sAFyZmjXQEtgbYcVavyq3jVoK8FM601X6On5kH69Hz4 DFaJhfQJS8Qu7ASDdml1Ub3Iywal/frPGjnbah+jbHykQGGxlX0ThG9zKXmZrPAb YyR/NQ/IWncec8OCfzCXlueXKyzVJhhyasO+XumD/kHObZtsAFNfuGdQ+xmwNMsh KOpabPtfMptB3OG9A9O5GoD9J5rFkg8TP1xKkCCyLZ7k1zaK -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:56 2025 by rpki-client