This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa File: a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json) Hash identifier: 5X4w6LEJmDzG6BtJTT2QfSZRCcqP4r/P+snhJUpP7GY= Subject key identifier: 0F:A4:C1:34:01:11:05:95:B0:47:98:FC:6F:F2:58:94:5A:9A:46:14 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5DF0AB83DEDA6BD8BFD1EF9316C3E3EE6E3A6A21 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa Signing time: Sat 15 Nov 2025 06:30:12 +0000 ROA not before: Sat 15 Nov 2025 06:30:12 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f0:ab:83:de:da:6b:d8:bf:d1:ef:93:16:c3:e3:ee:6e:3a:6a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:12 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=92d98baa48c3471d6f1e7be3c00a51403dc4c0252ace3309e10fd502d34fd0c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:97:2d:c3:c2:7a:e7:1b:92:88:d3:39:e5:13: 46:de:09:98:54:f9:7d:03:ab:1c:e3:fa:8d:78:85: 82:9f:47:78:de:20:d3:f4:3b:3f:ca:6c:06:69:be: 19:c0:4c:31:8c:3c:2e:52:cf:fc:8a:3d:a7:03:07: e0:22:8f:1e:a4:32:01:e4:8a:cb:db:f6:0c:08:65: 94:e4:57:b5:04:5b:df:0f:0b:aa:02:6e:8b:e4:8a: e5:be:0e:e4:ef:0a:12:f6:0f:d3:a4:42:8d:94:ec: 6d:cb:b5:e9:68:a4:68:02:88:ad:80:88:d5:98:03: 41:30:67:5e:e3:34:3f:de:32:01:e4:a5:9d:95:27: 9f:8a:8d:80:73:86:71:90:90:4e:71:eb:4b:32:e6: 42:ce:e8:46:61:3d:5d:2d:45:61:f5:b0:87:78:99: 57:9a:37:15:b5:e0:15:ab:0f:81:85:c2:98:16:74: 63:b9:f1:55:a1:54:fc:25:fe:9d:fe:cd:37:3d:a7: 98:af:7d:1e:1c:f4:95:bf:f1:e6:3c:8d:7d:b9:03: 6e:4e:ba:02:34:cb:9c:5b:15:b7:e8:04:e3:1f:12: 8a:23:7e:49:8a:9c:de:58:ea:41:e8:45:31:94:e3: 3b:0a:d1:a4:cc:c6:62:dd:e9:f0:d8:6d:fc:1f:85: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A4:C1:34:01:11:05:95:B0:47:98:FC:6F:F2:58:94:5A:9A:46:14 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036:9000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:b1:4e:65:2d:16:f0:b5:bc:e5:cc:81:3f:44:3d:c6:0d:f1: aa:a1:6a:bf:e9:84:04:f4:15:c5:75:57:4f:38:7a:98:70:a4: 28:43:76:2f:f3:d8:88:8f:55:cc:10:19:e9:bd:d5:72:ab:49: 52:26:2b:90:7d:df:0c:2d:9b:8e:77:15:54:95:f2:a7:10:a9: d7:62:ef:e5:fe:f8:f2:12:f5:4f:64:48:c7:85:37:0f:16:dc: d5:36:be:8a:80:41:3d:3a:7f:3d:7d:66:d2:d2:23:45:54:03: e3:f1:b7:58:8f:84:65:d6:31:42:c5:ce:b7:2d:4c:78:04:8a: 54:5a:0d:da:42:ca:cb:b4:ce:55:ea:32:55:f7:17:e2:7d:38: d2:ca:e1:a9:70:84:b4:9a:fc:bd:60:36:64:a0:16:76:fc:5d: 38:69:b5:13:1a:77:7a:ea:5b:4b:cd:8d:17:dc:51:16:89:85: 87:1d:ee:cf:60:a2:74:f2:27:19:a9:51:96:86:89:37:2f:56: fb:49:58:19:ee:86:88:63:ed:8f:1b:ab:52:18:cc:9b:84:74: ce:a5:a4:a7:c6:e4:06:39:11:8d:4e:cc:bb:0a:6f:6e:c9:9a: 23:8e:61:a3:c0:a4:94:4d:fb:4b:12:1b:68:dc:6d:02:64:a4: cd:2e:d8:7a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXfCrg97aa9i/0e+TFsPj7m46aiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwMTJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDkyZDk4YmFhNDhjMzQ3MWQ2ZjFlN2JlM2MwMGE1MTQwM2RjNGMwMjUyYWNl MzMwOWUxMGZkNTAyZDM0ZmQwYzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOXLcPCeucbkojTOeUTRt4JmFT5fQOrHOP6jXiFgp9HeN4g0/Q7P8psBmm+ GcBMMYw8LlLP/Io9pwMH4CKPHqQyAeSKy9v2DAhllORXtQRb3w8LqgJui+SK5b4O 5O8KEvYP06RCjZTsbcu16WikaAKIrYCI1ZgDQTBnXuM0P94yAeSlnZUnn4qNgHOG cZCQTnHrSzLmQs7oRmE9XS1FYfWwh3iZV5o3FbXgFasPgYXCmBZ0Y7nxVaFU/CX+ nf7NNz2nmK99Hhz0lb/x5jyNfbkDbk66AjTLnFsVt+gE4x8SiiN+SYqc3ljqQehF MZTjOwrRpMzGYt3p8Nht/B+FqWsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQPpME0 AREFlbBHmPxv8liUWppGFDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTZjNjEwMjktZjU1OS00MTFjLTg5ZmQtYTE5NzBjYWM2YmMxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DaQ MA0GCSqGSIb3DQEBCwUAA4IBAQAOsU5lLRbwtbzlzIE/RD3GDfGqoWq/6YQE9BXF dVdPOHqYcKQoQ3Yv89iIj1XMEBnpvdVyq0lSJiuQfd8MLZuOdxVUlfKnEKnXYu/l /vjyEvVPZEjHhTcPFtzVNr6KgEE9On89fWbS0iNFVAPj8bdYj4Rl1jFCxc63LUx4 BIpUWg3aQsrLtM5V6jJV9xfifTjSyuGpcIS0mvy9YDZkoBZ2/F04abUTGnd66ltL zY0X3FEWiYWHHe7PYKJ08icZqVGWhok3L1b7SVgZ7oaIY+2PG6tSGMybhHTOpaSn xuQGORGNTsy7Cm9uyZojjmGjwKSUTftLEhto3G0CZKTNLth6 -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:34 2025 by rpki-client