This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa File: a33fb27e-b368-403f-89e6-08d05302535f.roa (raw, json) Hash identifier: IAoh9LyAEUOWubz7Ztb9rGJ3QBiOL+4JMvORAS8OzZM= Subject key identifier: E3:2E:41:30:21:76:30:90:19:D5:BA:CA:9D:06:50:03:77:B2:E0:DE Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 368AB304B69B0A830F979D1771A48F044EF49B94 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa Signing time: Sat 15 Nov 2025 06:40:09 +0000 ROA not before: Sat 15 Nov 2025 06:40:09 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:40e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8a:b3:04:b6:9b:0a:83:0f:97:9d:17:71:a4:8f:04:4e:f4:9b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:40:09 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=4458cb2d9e2429abe3e3ce00dc55dd9b227f00d5b548b3381b631c5c6f2ca24c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:f3:b1:bf:35:8b:c2:80:7f:51:4b:c6:3c: c1:f1:91:59:a3:bb:a7:fa:bf:d0:45:2a:ce:14:54: dd:0f:bd:8b:56:0e:08:29:db:05:11:25:6b:f0:10: d3:66:7c:f1:e2:0a:a1:be:35:50:31:04:57:86:95: 52:ec:13:dc:03:d3:b3:88:9d:a3:6b:e0:03:9c:16: 6f:52:b8:c8:de:c1:39:d7:51:b6:0a:0d:66:65:dd: a4:ed:93:f2:4f:66:5e:9c:19:03:49:21:c7:b1:66: 0f:73:7a:6c:3b:f0:7f:e1:07:6d:11:e5:1c:87:6d: 29:e6:4b:05:4f:e1:26:4b:12:b0:40:41:6c:1e:ec: d5:21:00:95:a5:59:20:87:1e:5d:f4:fb:c6:6a:49: b3:7b:65:8b:ba:1c:9d:0e:09:29:58:eb:7c:4d:70: 6d:ad:04:f6:59:24:d9:e9:e6:e9:c7:20:15:e0:71: a0:e2:66:fc:f0:e3:e5:9e:d6:53:63:fb:21:1d:c8: 9d:4c:11:9b:b1:38:52:f5:76:14:88:9d:70:d0:88: 91:7e:74:1f:37:90:0f:f2:c4:d2:66:a5:f3:12:20: d7:d6:cd:14:3f:a5:e7:28:63:0f:40:a1:1b:15:e4: 55:28:1d:b2:0a:9c:af:ef:09:c6:fa:7e:8d:53:89: 8a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2E:41:30:21:76:30:90:19:D5:BA:CA:9D:06:50:03:77:B2:E0:DE X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:40e0::/48 Signature Algorithm: sha256WithRSAEncryption 66:04:48:a6:2b:40:15:cf:94:63:bc:76:4b:eb:da:af:b5:13: da:10:3f:08:65:8b:fa:21:18:2d:3d:59:69:6a:a2:83:48:3c: ab:be:57:33:3c:a1:79:44:66:97:ad:a9:ad:94:b1:90:cb:f5: 20:30:4d:76:2a:aa:53:f8:1d:cc:f8:7d:41:82:5e:28:62:47: 74:27:94:ca:36:d1:99:dc:ea:c1:f9:49:f7:a2:89:75:60:0d: 26:8c:f9:31:b2:7e:a5:aa:0a:32:91:05:6c:98:09:30:68:a8: 31:59:e1:ad:3a:0d:16:88:69:05:e9:f7:72:cb:54:32:13:ee: e1:fd:3b:cf:e1:69:90:17:e2:17:3f:d6:4d:ed:ef:9e:be:ea: 4d:52:48:fe:78:e9:18:e4:51:f3:0b:db:f1:a2:46:46:01:2e: 19:e6:90:5f:ce:31:6f:49:63:e1:25:89:a0:82:f9:c8:85:90: d4:31:1a:9a:38:9e:3c:61:bc:fe:dd:97:97:7f:4e:2d:4c:12: a7:93:01:02:05:02:7c:6f:bf:ed:f8:03:18:29:a0:29:2b:7d: 2d:0c:14:56:cc:15:bb:7e:95:da:c4:11:f6:53:92:93:d7:e8: fa:02:b7:b4:db:19:88:0d:90:27:5c:8e:0b:a9:05:dc:fc:e5: d1:68:6e:63 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUNoqzBLabCoMPl50XcaSPBE70m5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjQwMDlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDQ0NThjYjJkOWUyNDI5YWJlM2UzY2UwMGRjNTVkZDliMjI3ZjAwZDViNTQ4 YjMzODFiNjMxYzVjNmYyY2EyNGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd687G/NYvCgH9RS8Y8wfGRWaO7p/q/0EUqzhRU3Q+9i1YOCCnbBREla/AQ 02Z88eIKob41UDEEV4aVUuwT3APTs4ido2vgA5wWb1K4yN7BOddRtgoNZmXdpO2T 8k9mXpwZA0khx7FmD3N6bDvwf+EHbRHlHIdtKeZLBU/hJksSsEBBbB7s1SEAlaVZ IIceXfT7xmpJs3tli7ocnQ4JKVjrfE1wba0E9lkk2enm6ccgFeBxoOJm/PDj5Z7W U2P7IR3InUwRm7E4UvV2FIidcNCIkX50HzeQD/LE0mal8xIg19bNFD+l5yhjD0Ch GxXkVSgdsgqcr+8Jxvp+jVOJivcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTjLkEw IXYwkBnVusqdBlADd7Lg3jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTMzZmIyN2UtYjM2OC00MDNmLTg5ZTYtMDhkMDUzMDI1MzVmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A 4DANBgkqhkiG9w0BAQsFAAOCAQEAZgRIpitAFc+UY7x2S+var7UT2hA/CGWL+iEY LT1ZaWqig0g8q75XMzyheURml62prZSxkMv1IDBNdiqqU/gdzPh9QYJeKGJHdCeU yjbRmdzqwflJ96KJdWANJoz5MbJ+paoKMpEFbJgJMGioMVnhrToNFohpBen3cstU MhPu4f07z+FpkBfiFz/WTe3vnr7qTVJI/njpGORR8wvb8aJGRgEuGeaQX84xb0lj 4SWJoIL5yIWQ1DEamjiePGG8/t2Xl39OLUwSp5MBAgUCfG+/7fgDGCmgKSt9LQwU VswVu36V2sQR9lOSk9fo+gK3tNsZiA2QJ1yOC6kF3Pzl0WhuYw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:47 2025 by rpki-client