This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa File: a626735f-cb4b-4dff-992e-95390a4e2eea.roa (raw, json) Hash identifier: ZHDdIqFlZog2v5vPESNRFE1DHwuejRCoWAc6AZtVvFs= Subject key identifier: 8B:E8:16:23:C0:DB:93:3D:A1:A5:D5:46:05:CE:75:94:11:C0:25:81 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 31C687A70C798670353B1D3DC171BA1DCC6875C9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa Signing time: Sat 15 Nov 2025 05:20:13 +0000 ROA not before: Sat 15 Nov 2025 05:20:13 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d059:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c6:87:a7:0c:79:86:70:35:3b:1d:3d:c1:71:ba:1d:cc:68:75:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:20:13 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=e7fede090e78d1dd38b08e7a38b407c3b252c8aee889d906dc2127d9a2d17f36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:19:69:4a:1d:21:70:4b:c1:28:a5:d5:38: 83:9d:9f:eb:0b:b8:4f:bd:fc:20:63:20:a5:f8:df: 0b:9f:2c:bd:e8:b2:3d:71:9e:c7:e2:62:96:ef:b8: 62:ab:47:01:f0:41:5f:d5:68:de:04:c3:93:f1:67: a0:8d:8a:15:45:b5:28:64:3d:49:eb:a7:50:57:82: 85:0d:87:f0:8c:01:2b:3f:8a:f5:e6:07:3f:66:df: ef:11:d8:81:d2:57:52:39:d6:16:a3:56:89:ad:8d: 60:c5:b7:96:de:89:8c:8a:16:3d:9c:d6:d5:22:6d: a0:59:5a:ca:7c:36:98:d7:00:65:5f:1f:25:c0:86: 1d:1d:45:c6:98:8b:33:ac:0a:0a:76:44:16:a8:a2: 59:a1:f2:36:f6:3b:13:53:6b:eb:c3:5d:1b:73:23: bc:c4:c4:25:25:a9:96:3c:0f:08:90:6d:6b:a7:9e: 2d:f5:21:9a:54:eb:92:8c:8a:bb:3e:c6:86:e3:68: 60:1e:53:fa:55:55:95:d5:b1:dc:91:da:cf:e2:d2: 5e:55:0c:b6:73:7e:fe:1c:aa:9a:c4:12:ba:23:36: 8a:89:ae:bb:36:a4:e6:fc:89:25:b1:1c:dd:e2:ba: ad:05:88:4b:5d:7d:03:99:02:61:45:8d:80:2e:90: b8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E8:16:23:C0:DB:93:3D:A1:A5:D5:46:05:CE:75:94:11:C0:25:81 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d059:2000::/40 Signature Algorithm: sha256WithRSAEncryption 8d:60:a5:d1:34:c5:00:02:db:d7:ed:a4:b5:84:80:0c:3c:7e: 9a:03:c8:88:8a:c2:2b:22:09:c9:b6:94:99:73:d3:dd:17:6c: 37:33:ce:fb:ce:23:70:39:e0:b3:fd:8b:f2:c7:8e:29:f7:2f: 11:f3:5f:37:ae:cb:9d:c0:ae:e1:6f:49:66:f6:bb:1d:b9:12: 34:c4:77:dc:60:93:2f:03:0a:7e:3a:f6:0e:cf:a9:56:25:d7: c1:d6:4d:a5:6e:7f:d1:b6:9d:6d:b5:a7:90:89:36:e4:89:54: de:59:de:10:82:6e:e0:54:be:74:ee:b5:84:1d:e8:a3:21:22: 86:3e:a2:7d:ed:53:b2:99:ad:c5:03:ac:12:a4:44:c7:5f:ac: 00:fd:c9:f7:49:24:27:3a:5b:9c:6a:5d:57:8e:4a:39:b9:e1: a3:25:ff:0c:1d:a7:37:ed:92:ce:a1:dc:84:b2:5c:01:d7:6e: 75:73:95:be:a5:e9:22:5c:94:3a:e5:b9:0c:57:52:eb:d8:47: fc:76:2b:4a:55:aa:fe:13:a4:7c:69:e6:10:4d:f4:aa:76:b0: 77:3e:c9:d3:4e:75:c3:3e:88:61:20:12:ce:f2:14:b7:f8:cc: 8f:59:62:40:55:0e:38:79:92:7b:70:bf:7b:26:af:97:47:7a: 89:06:f6:66 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUMcaHpwx5hnA1Ox09wXG6HcxodckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTIwMTNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGU3ZmVkZTA5MGU3OGQxZGQzOGIwOGU3YTM4YjQwN2MzYjI1MmM4YWVlODg5 ZDkwNmRjMjEyN2Q5YTJkMTdmMzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKu1GWlKHSFwS8EopdU4g52f6wu4T738IGMgpfjfC58sveiyPXGex+Jilu+4 YqtHAfBBX9Vo3gTDk/FnoI2KFUW1KGQ9SeunUFeChQ2H8IwBKz+K9eYHP2bf7xHY gdJXUjnWFqNWia2NYMW3lt6JjIoWPZzW1SJtoFlaynw2mNcAZV8fJcCGHR1FxpiL M6wKCnZEFqiiWaHyNvY7E1Nr68NdG3MjvMTEJSWpljwPCJBta6eeLfUhmlTrkoyK uz7GhuNoYB5T+lVVldWx3JHaz+LSXlUMtnN+/hyqmsQSuiM2iomuuzak5vyJJbEc 3eK6rQWIS119A5kCYUWNgC6QuBsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSL6BYj wNuTPaGl1UYFznWUEcAlgTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTYyNjczNWYtY2I0Yi00ZGZmLTk5MmUtOTUzOTBhNGUyZWVhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Fkg MA0GCSqGSIb3DQEBCwUAA4IBAQCNYKXRNMUAAtvX7aS1hIAMPH6aA8iIisIrIgnJ tpSZc9PdF2w3M877ziNwOeCz/Yvyx44p9y8R8183rsudwK7hb0lm9rsduRI0xHfc YJMvAwp+OvYOz6lWJdfB1k2lbn/Rtp1ttaeQiTbkiVTeWd4Qgm7gVL507rWEHeij ISKGPqJ97VOyma3FA6wSpETHX6wA/cn3SSQnOlucal1Xjko5ueGjJf8MHac37ZLO odyEslwB1251c5W+pekiXJQ65bkMV1Lr2Ef8ditKVar+E6R8aeYQTfSqdrB3PsnT TnXDPohhIBLO8hS3+MyPWWJAVQ44eZJ7cL97Jq+XR3qJBvZm -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:40 2025 by rpki-client