This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa File: a75e35f5-c55c-41e8-b026-54c892c68ea2.roa (raw, json) Hash identifier: Aer2oPwcY5XEJUieASSozdwd8SKKLyLth3f2NBslz24= Subject key identifier: 00:9E:85:30:4E:F6:4A:AC:94:98:8B:93:BE:73:C9:95:F3:36:C2:3A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 293FDC16511259144EE573936BC107A645A2F4A9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa Signing time: Wed 10 Dec 2025 05:31:24 +0000 ROA not before: Wed 10 Dec 2025 05:31:24 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3f:dc:16:51:12:59:14:4e:e5:73:93:6b:c1:07:a6:45:a2:f4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:24 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=5c65ecdddf7a878e2d774589087bee0e5bdddb5ddde8c8f2cf2320e0903f8b04, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:94:37:b6:7a:06:45:39:2b:08:e2:ac:60: 3d:cb:c2:0c:9b:11:2f:ca:2b:36:73:8c:3c:dc:97: 1b:ea:64:30:44:87:5a:65:d5:ce:64:d8:e7:76:08: 00:fc:4a:55:2a:fa:31:e3:b0:c6:da:dd:78:9d:4f: 92:2e:fe:c3:ce:6c:2b:21:1f:72:9b:85:37:73:c1: c7:24:07:ab:95:bf:a7:11:90:98:4d:f1:02:7b:ca: ec:1b:74:90:e3:ab:df:85:f1:63:ac:88:26:8f:d0: 1f:30:a7:dd:eb:88:09:d7:ba:fa:34:eb:2e:54:20: 56:ef:86:85:e8:13:66:58:e9:d8:04:86:81:c3:43: 80:53:62:77:15:8f:ad:df:13:c6:c6:a9:fb:58:b6: 6e:fa:4c:73:09:d8:57:ef:8e:88:35:97:e6:34:67: c0:1b:30:7b:41:9b:f2:e5:8a:0e:a0:68:8d:32:3b: 73:ac:df:81:62:b3:06:28:06:05:cb:5a:39:03:a7: 0a:c1:76:b0:19:12:19:4d:d3:2b:1a:eb:7e:b0:a9: ed:84:e4:14:7f:52:f6:19:52:e2:5b:4d:4e:15:6e: d0:6d:93:c3:ec:c6:e7:b5:f0:7a:c3:f7:24:a4:bb: a3:0a:30:79:f6:48:e1:77:3c:92:95:5c:52:b5:84: 8a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:85:30:4E:F6:4A:AC:94:98:8B:93:BE:73:C9:95:F3:36:C2:3A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 08:9d:76:58:7f:33:4f:14:e7:a1:85:9a:b3:f4:3d:67:73:2c: fc:31:f2:8b:2b:b8:cf:b9:9c:2b:37:ec:b4:e2:68:7f:ba:97: ca:26:0c:e4:cf:1a:65:aa:7f:7e:f3:8f:af:c0:7c:88:95:a9: 9e:00:0a:0a:36:a3:9b:52:51:37:35:ff:4c:7d:97:eb:bd:3f: 86:3f:1a:44:ca:98:f4:3a:16:e0:e0:c1:5d:86:80:54:f7:13: bc:4a:a5:5a:a5:6f:e9:3e:3c:1d:c0:fb:6d:38:c9:79:85:27: 22:64:27:3c:1b:c2:ee:40:19:56:b1:af:d7:e3:61:c9:c8:b0: 91:1f:39:ff:7e:e0:6b:2a:c2:e2:87:fc:84:dd:de:e4:71:59: 23:a0:27:2a:a6:7c:71:c1:6e:ad:5b:f0:37:7e:9e:69:74:fd: a2:85:b9:e6:35:8c:28:9b:a5:ed:dc:44:9b:cb:f3:82:56:ad: ad:41:15:85:19:54:65:28:ea:b4:4e:c9:f1:fb:74:54:b8:4a: bc:7d:12:76:39:5b:78:fb:ec:40:1d:7b:57:71:46:7f:47:21: 34:45:a0:a8:57:a5:4a:8a:ec:3c:5a:6d:55:6a:8a:94:86:81: 89:7d:b7:58:0d:5c:90:3c:11:a9:94:d0:4a:1e:8a:c0:9b:f8: e6:b9:29:ec -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUKT/cFlESWRRO5XOTa8EHpkWi9KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMjRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDVjNjVlY2RkZGY3YTg3OGUyZDc3NDU4OTA4N2JlZTBlNWJkZGRiNWRkZGU4 YzhmMmNmMjMyMGUwOTAzZjhiMDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF1lDe2egZFOSsI4qxgPcvCDJsRL8orNnOMPNyXG+pkMESHWmXVzmTY53YI APxKVSr6MeOwxtrdeJ1Pki7+w85sKyEfcpuFN3PBxyQHq5W/pxGQmE3xAnvK7Bt0 kOOr34XxY6yIJo/QHzCn3euICde6+jTrLlQgVu+GhegTZljp2ASGgcNDgFNidxWP rd8Txsap+1i2bvpMcwnYV++OiDWX5jRnwBswe0Gb8uWKDqBojTI7c6zfgWKzBigG BctaOQOnCsF2sBkSGU3TKxrrfrCp7YTkFH9S9hlS4ltNThVu0G2Tw+zG57XwesP3 JKS7owowefZI4Xc8kpVcUrWEisUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQAnoUw TvZKrJSYi5O+c8mV8zbCOjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTc1ZTM1ZjUtYzU1Yy00MWU4LWIwMjYtNTRjODkyYzY4ZWEyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKQ wDANBgkqhkiG9w0BAQsFAAOCAQEACJ12WH8zTxTnoYWas/Q9Z3Ms/DHyiyu4z7mc KzfstOJof7qXyiYM5M8aZap/fvOPr8B8iJWpngAKCjajm1JRNzX/TH2X670/hj8a RMqY9DoW4ODBXYaAVPcTvEqlWqVv6T48HcD7bTjJeYUnImQnPBvC7kAZVrGv1+Nh yciwkR85/37gayrC4of8hN3e5HFZI6AnKqZ8ccFurVvwN36eaXT9ooW55jWMKJul 7dxEm8vzglatrUEVhRlUZSjqtE7J8ft0VLhKvH0SdjlbePvsQB17V3FGf0chNEWg qFelSorsPFptVWqKlIaBiX23WA1ckDwRqZTQSh6KwJv45rkp7A== -----END CERTIFICATE-----Generated at Mon Dec 15 15:28:35 2025 by rpki-client