This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa File: abbee85f-272a-4ae4-8329-48f63bc24277.roa (raw, json) Hash identifier: M4KMPK+43ePFURUQrvd7Kvn9nPEMAWiw6axC6vKhEiA= Subject key identifier: 3D:A8:53:D4:F8:9A:40:88:F1:9C:FD:1F:E8:9E:8F:47:53:F0:85:CD Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4291F3AB6A28A8A31E9BDF1BB2DEFCF3631B0B74 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa Signing time: Sun 23 Nov 2025 01:30:34 +0000 ROA not before: Sun 23 Nov 2025 01:30:34 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:f3:ab:6a:28:a8:a3:1e:9b:df:1b:b2:de:fc:f3:63:1b:0b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:34 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=8d824d461e86df35e19e3c78899daa73426473aa86b93987cd04f701a6befc64, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:8b:a9:dd:e0:07:a3:73:3d:20:20:00:2f: df:1b:24:13:06:66:bf:12:ee:ba:73:e6:af:00:2f: bb:b9:90:d8:0b:3f:1e:a2:5c:d5:0f:00:45:cc:5e: e8:02:29:b0:75:d2:7b:a1:fd:2f:d0:e5:89:7f:68: 56:b3:2e:d4:45:47:62:4e:c3:9e:40:44:58:58:6f: 6a:b0:ab:59:9d:d8:98:02:27:ac:fb:f0:d8:3e:ee: e6:7e:23:a3:2c:92:df:c6:ec:db:a6:28:3e:ec:c5: 12:85:9d:98:cc:52:42:11:1e:0d:83:50:90:6c:01: f7:b2:53:5b:f1:2f:05:2d:51:f5:d5:3b:35:5a:04: 24:c0:7b:be:a8:7c:5c:4c:b8:47:fa:0b:d8:bf:14: db:c6:b6:96:a3:9a:a8:1e:1a:bc:8e:10:c5:25:bf: 4f:da:83:b8:d6:52:47:ff:bd:42:72:40:42:64:a6: 5e:0b:4c:d5:4d:44:52:29:1b:e4:16:61:d5:04:88: 85:6e:f3:81:de:38:38:95:5b:7f:f7:28:d3:ea:75: 10:10:69:ac:f3:29:8e:2c:22:e1:ff:d3:5d:6d:27: e1:ca:4b:36:d4:ca:42:f4:56:95:f8:c8:00:12:8e: 92:2c:bc:94:72:86:92:53:77:1d:72:fb:2f:7e:02: 2b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A8:53:D4:F8:9A:40:88:F1:9C:FD:1F:E8:9E:8F:47:53:F0:85:CD X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/abbee85f-272a-4ae4-8329-48f63bc24277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:a080::/48 Signature Algorithm: sha256WithRSAEncryption 58:d6:03:13:8d:e6:91:53:66:76:5f:78:2a:1e:6d:1d:5b:b8: 52:97:76:55:66:d2:b4:c4:92:fb:5a:c1:0a:60:f7:49:6d:c6: dc:d9:00:c1:c6:97:03:32:25:6a:30:d5:4a:8c:7b:7d:02:15: 4d:c1:54:3a:48:1a:a1:27:ec:12:0c:4e:b4:38:c2:99:07:c9: c7:fa:6c:8c:ec:50:17:86:a3:8a:aa:a5:9e:eb:32:e6:dc:28: 22:62:ff:0c:62:79:8c:6a:ea:41:de:86:80:96:a2:8f:9d:ec: 8b:6b:b4:02:70:80:9f:ac:af:22:77:9f:68:2b:cf:99:7d:7f: 13:4b:92:92:db:b8:5a:42:d8:a9:cd:b1:42:6e:89:59:57:1e: 80:07:d8:59:92:bf:20:35:2e:0d:6b:1f:4c:c1:2b:57:16:ac: 33:12:0e:00:c9:c1:09:a7:bc:bc:a9:c6:8a:f7:d9:bc:62:75: 53:da:64:00:32:cb:c7:ba:aa:a6:99:52:a5:57:b2:8e:34:95: 95:ac:e2:32:b4:2e:5c:fd:01:46:07:fe:48:62:89:cb:34:7f: 0c:e7:45:00:00:d5:b7:b3:e9:0b:ef:62:3d:f8:25:a3:1b:48: 70:9a:f1:bc:f3:78:be:5a:9c:9a:ce:6c:49:ad:0a:14:fd:eb: a0:58:e2:00 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUQpHzq2ooqKMem98bst7882MbC3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMzRaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDhkODI0ZDQ2MWU4NmRmMzVlMTllM2M3ODg5OWRhYTczNDI2NDczYWE4NmI5 Mzk4N2NkMDRmNzAxYTZiZWZjNjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMIi6nd4Aejcz0gIAAv3xskEwZmvxLuunPmrwAvu7mQ2As/HqJc1Q8ARcxe 6AIpsHXSe6H9L9DliX9oVrMu1EVHYk7DnkBEWFhvarCrWZ3YmAInrPvw2D7u5n4j oyyS38bs26YoPuzFEoWdmMxSQhEeDYNQkGwB97JTW/EvBS1R9dU7NVoEJMB7vqh8 XEy4R/oL2L8U28a2lqOaqB4avI4QxSW/T9qDuNZSR/+9QnJAQmSmXgtM1U1EUikb 5BZh1QSIhW7zgd44OJVbf/co0+p1EBBprPMpjiwi4f/TXW0n4cpLNtTKQvRWlfjI ABKOkiy8lHKGklN3HXL7L34CK38CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ9qFPU +JpAiPGc/R/ono9HU/CFzTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YWJiZWU4NWYtMjcyYS00YWU0LTgzMjktNDhmNjNiYzI0Mjc3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gqg gDANBgkqhkiG9w0BAQsFAAOCAQEAWNYDE43mkVNmdl94Kh5tHVu4Upd2VWbStMSS +1rBCmD3SW3G3NkAwcaXAzIlajDVSox7fQIVTcFUOkgaoSfsEgxOtDjCmQfJx/ps jOxQF4ajiqqlnusy5twoImL/DGJ5jGrqQd6GgJaij53si2u0AnCAn6yvInefaCvP mX1/E0uSktu4WkLYqc2xQm6JWVcegAfYWZK/IDUuDWsfTMErVxasMxIOAMnBCae8 vKnGivfZvGJ1U9pkADLLx7qqpplSpVeyjjSVlaziMrQuXP0BRgf+SGKJyzR/DOdF AADVt7PpC+9iPfgloxtIcJrxvPN4vlqcms5sSa0KFP3roFjiAA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:31 2025 by rpki-client