This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa File: a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa (raw, json) Hash identifier: kpmL3ARtjk4ygGWHpfKyqsm8AL9z0Uy5Osqwed+bT4c= Subject key identifier: FD:89:AE:5D:6D:4D:0B:12:B9:C1:6B:32:2D:F8:ED:F5:AD:48:F9:6E Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7C51EEE003A6DB86F10000EB2FBD5CC98DCD3976 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa Signing time: Sat 29 Nov 2025 03:10:06 +0000 ROA not before: Sat 29 Nov 2025 03:10:06 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06e::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:51:ee:e0:03:a6:db:86:f1:00:00:eb:2f:bd:5c:c9:8d:cd:39:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:06 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=6a403a495b037f2d79d61f536b6496b1c5bf3dcc21ab90eb743bf5396b03fd1c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:36:14:f7:ab:50:51:75:89:3b:01:8b:bf: 7c:cc:43:cf:85:e0:4c:8d:8a:25:2b:3e:1e:a4:f2: 1e:66:60:43:8f:fd:19:20:43:67:08:92:c2:9c:68: be:03:5e:7e:f6:82:16:54:8b:dc:80:7d:e3:0d:7e: 82:12:ed:ab:7c:1f:00:53:e3:f3:d5:7c:8f:4b:dd: 07:3e:f7:60:b7:8a:69:62:5a:b1:90:8a:81:55:01: 6c:f9:be:66:20:78:cd:d9:8b:18:27:21:0b:82:1d: 38:ab:75:64:18:f9:6b:ce:b0:fc:31:6a:8c:09:78: 9f:2d:6e:2b:c8:28:d0:f9:b2:fc:a8:44:ce:86:81: ce:92:c7:60:72:36:6d:91:9a:0b:73:5d:25:d7:12: b0:9e:b5:c3:91:3c:54:a1:fd:65:65:a5:05:9c:07: 5f:95:3f:be:02:5b:37:df:a4:8a:77:b7:c4:1a:9a: c8:bc:6d:ae:60:3b:06:25:d2:a8:a2:23:30:26:c6: 90:25:0e:7d:8c:d0:65:eb:5b:4c:89:13:43:12:36: 82:32:7a:4e:8f:64:2d:f9:e3:be:2b:89:18:75:60: c9:c0:a0:64:e7:a9:70:2c:d3:cf:5e:26:c8:74:14: a1:02:c5:84:6b:40:82:15:90:3a:e5:63:ce:78:a2: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:AE:5D:6D:4D:0B:12:B9:C1:6B:32:2D:F8:ED:F5:AD:48:F9:6E X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06e::/32 Signature Algorithm: sha256WithRSAEncryption 11:3f:55:0f:41:b5:da:c9:a3:c3:d9:bf:cd:81:37:47:a1:ea: 60:98:42:af:a4:aa:21:7c:e7:78:1e:69:a1:93:a1:78:db:3b: 51:97:b9:ba:9b:30:8d:cf:36:c3:f4:56:7a:1f:57:15:63:33: e8:31:43:15:5a:d6:ab:b8:ea:6c:92:88:8d:82:79:c1:d6:25: 94:41:3e:b2:86:42:66:41:70:5e:dc:eb:01:aa:a1:32:55:84: 28:ad:fc:5d:ea:ea:56:a8:e9:f3:37:9c:eb:45:7d:39:dd:ef: 31:e2:19:9a:c6:04:70:bb:22:c2:5f:01:77:a3:64:1e:b6:6f: fb:ef:84:d2:8d:a8:57:a1:7b:a4:ba:0c:5e:7d:89:8b:a5:68: 22:c3:33:10:29:9a:a2:0b:a4:eb:a5:82:fd:a2:1d:6e:7c:c9: 36:ee:b4:fc:12:41:e1:b5:2a:5d:a9:0e:a8:ee:fd:90:42:3e: 80:49:a3:18:6d:f6:b7:f2:e5:ff:93:34:14:89:eb:de:98:37: 60:cd:2c:f3:62:1d:aa:f3:ba:05:71:07:e5:91:7a:e5:3e:1e: 18:47:19:23:52:cc:22:a7:2e:70:cc:0e:15:58:45:8d:be:9e: 0d:53:ab:26:0d:4a:27:32:3a:55:3f:ef:b9:3b:0b:e6:af:0c: 1c:da:26:b8 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUfFHu4AOm24bxAADrL71cyY3NOXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwMDZaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDZhNDAzYTQ5NWIwMzdmMmQ3OWQ2MWY1MzZiNjQ5NmIxYzViZjNkY2MyMWFi OTBlYjc0M2JmNTM5NmIwM2ZkMWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALY7NhT3q1BRdYk7AYu/fMxDz4XgTI2KJSs+HqTyHmZgQ4/9GSBDZwiSwpxo vgNefvaCFlSL3IB94w1+ghLtq3wfAFPj89V8j0vdBz73YLeKaWJasZCKgVUBbPm+ ZiB4zdmLGCchC4IdOKt1ZBj5a86w/DFqjAl4ny1uK8go0Pmy/KhEzoaBzpLHYHI2 bZGaC3NdJdcSsJ61w5E8VKH9ZWWlBZwHX5U/vgJbN9+kine3xBqayLxtrmA7BiXS qKIjMCbGkCUOfYzQZetbTIkTQxI2gjJ6To9kLfnjviuJGHVgycCgZOepcCzTz14m yHQUoQLFhGtAghWQOuVjzniiBI0CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBT9ia5d bU0LErnBazIt+O31rUj5bjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YTkzNTFmMGYtMWRlNy00ZTc1LTk1MDItOTM5YThlYTcyZWU1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0G4w DQYJKoZIhvcNAQELBQADggEBABE/VQ9BtdrJo8PZv82BN0eh6mCYQq+kqiF853ge aaGToXjbO1GXubqbMI3PNsP0VnofVxVjM+gxQxVa1qu46mySiI2CecHWJZRBPrKG QmZBcF7c6wGqoTJVhCit/F3q6lao6fM3nOtFfTnd7zHiGZrGBHC7IsJfAXejZB62 b/vvhNKNqFehe6S6DF59iYulaCLDMxApmqILpOulgv2iHW58yTbutPwSQeG1Kl2p Dqju/ZBCPoBJoxht9rfy5f+TNBSJ696YN2DNLPNiHarzugVxB+WReuU+HhhHGSNS zCKnLnDMDhVYRY2+ng1TqyYNSicyOlU/77k7C+avDBzaJrg= -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:30 2025 by rpki-client