This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa File: a75e35f5-c55c-41e8-b026-54c892c68ea2.roa (raw, json) Hash identifier: HypeIA8/uxUluXzJ4ngCRhn3sgWJfszyvYvEmSM8enk= Subject key identifier: A8:B5:1C:9C:EE:95:7C:F3:7E:3F:20:A8:CB:15:FC:A3:AB:1A:4E:77 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5DA42BF072D342F01A185A70F7CF64706C334F5C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa Signing time: Sat 15 Nov 2025 05:31:14 +0000 ROA not before: Sat 15 Nov 2025 05:31:14 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a4:2b:f0:72:d3:42:f0:1a:18:5a:70:f7:cf:64:70:6c:33:4f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:31:14 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=1abe3fe5664fe6d4fa60122180c040d7a4fe5a23590415ed5ae79476efc090df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:4a:20:28:f6:96:a8:94:59:52:1d:34:aa: 46:ce:c6:fb:e6:68:12:a9:71:81:83:f1:7b:33:f2: cd:ad:5e:4f:53:f8:a3:a8:c1:a3:9e:08:a2:5b:2f: bc:a9:02:4b:b3:66:a0:a7:e7:26:d0:47:ea:e7:35: 52:44:36:e1:b0:96:02:7d:4c:ac:b9:bb:c8:57:9c: e2:ce:43:bc:39:8a:c1:11:d9:36:e6:a2:f0:60:d1: aa:30:af:2c:de:e6:14:09:d3:35:22:4e:9b:a4:e8: 37:87:7a:9c:84:7b:f0:b7:6a:bf:fb:ef:b1:09:b9: 21:00:85:1d:f7:63:a0:67:95:f8:3c:d0:7f:1d:75: 2a:29:52:4f:22:e3:52:4a:84:64:be:20:83:af:00: 06:42:f0:46:cb:87:19:9e:57:23:ae:18:59:21:ba: 8c:55:2c:28:34:98:ac:dd:b1:77:24:4b:53:df:8e: e2:5a:8b:7f:b7:be:27:40:69:21:4c:3d:63:37:a9: 23:59:7d:23:c9:41:33:f1:84:50:b8:9b:7e:8e:61: 8b:28:1e:44:8b:cf:24:d0:46:ba:95:60:25:f0:16: de:82:97:e7:8e:01:b6:00:40:ee:45:a8:5a:3e:56: c7:9a:f0:ca:1b:d6:7d:bf:af:7c:4f:ee:15:c1:e3: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:1C:9C:EE:95:7C:F3:7E:3F:20:A8:CB:15:FC:A3:AB:1A:4E:77 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 90:e8:9b:23:5a:11:ca:de:88:aa:3c:e1:7e:e3:24:0b:b1:89: 4c:3d:87:3d:dc:05:93:0a:ff:54:3a:a8:ec:ba:27:05:70:e6: 22:ca:45:85:75:a3:75:05:65:80:d8:39:0f:6c:0c:3b:82:8e: e6:28:ca:66:36:89:56:13:01:2a:2c:92:52:7e:c5:46:df:42: f3:e2:14:a3:9d:db:63:e0:73:11:d5:c1:53:e0:f8:79:58:a5: 7e:0b:84:f9:82:08:55:9f:dc:4f:72:3b:d9:8e:f5:a7:7d:a9: 55:c0:a1:61:e8:31:79:62:aa:56:e8:8c:9d:32:cd:cd:73:5a: 92:6d:1f:da:29:a7:9a:b9:81:86:9f:1a:c0:9d:c4:43:22:1d: 15:4e:14:ce:07:43:8d:1e:50:bf:4f:4e:18:31:3f:d2:75:b6: d2:a0:8b:04:d5:9d:9b:9a:87:94:60:f9:92:09:b3:ed:e9:dd: 36:6c:b8:98:b0:5a:95:08:96:ec:fa:e9:b5:f9:f0:01:a5:5d: 43:49:3e:e8:a0:ae:67:f6:32:29:4a:35:7b:5e:89:cd:d7:75: 46:02:7f:a0:ca:47:cb:03:be:35:ed:9d:33:b9:1d:d0:ec:0a: 23:c6:43:6c:77:4e:84:ed:75:f2:30:aa:03:de:ce:35:09:42: 88:be:c4:eb -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUXaQr8HLTQvAaGFpw989kcGwzT1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMxMTRaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDFhYmUzZmU1NjY0ZmU2ZDRmYTYwMTIyMTgwYzA0MGQ3YTRmZTVhMjM1OTA0 MTVlZDVhZTc5NDc2ZWZjMDkwZGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI0CSiAo9paolFlSHTSqRs7G++ZoEqlxgYPxezPyza1eT1P4o6jBo54Iolsv vKkCS7NmoKfnJtBH6uc1UkQ24bCWAn1MrLm7yFec4s5DvDmKwRHZNuai8GDRqjCv LN7mFAnTNSJOm6ToN4d6nIR78Ldqv/vvsQm5IQCFHfdjoGeV+DzQfx11KilSTyLj UkqEZL4gg68ABkLwRsuHGZ5XI64YWSG6jFUsKDSYrN2xdyRLU9+O4lqLf7e+J0Bp IUw9YzepI1l9I8lBM/GEULibfo5hiygeRIvPJNBGupVgJfAW3oKX544BtgBA7kWo Wj5Wx5rwyhvWfb+vfE/uFcHj6VkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSotRyc 7pV8834/IKjLFfyjqxpOdzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTc1ZTM1ZjUtYzU1Yy00MWU4LWIwMjYtNTRjODkyYzY4ZWEyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKQ wDANBgkqhkiG9w0BAQsFAAOCAQEAkOibI1oRyt6IqjzhfuMkC7GJTD2HPdwFkwr/ VDqo7LonBXDmIspFhXWjdQVlgNg5D2wMO4KO5ijKZjaJVhMBKiySUn7FRt9C8+IU o53bY+BzEdXBU+D4eVilfguE+YIIVZ/cT3I72Y71p32pVcChYegxeWKqVuiMnTLN zXNakm0f2imnmrmBhp8awJ3EQyIdFU4UzgdDjR5Qv09OGDE/0nW20qCLBNWdm5qH lGD5kgmz7endNmy4mLBalQiW7PrptfnwAaVdQ0k+6KCuZ/YyKUo1e16Jzdd1RgJ/ oMpHywO+Ne2dM7kd0OwKI8ZDbHdOhO118jCqA97ONQlCiL7E6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:10 2025 by rpki-client