This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa File: adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa (raw, json) Hash identifier: CFWjNUPOsjksZYD7l8DChq630QTQyMwn8nE5B6MPjPk= Subject key identifier: 96:4D:EC:7A:08:6D:A0:84:F4:4A:D5:F5:11:A2:63:3D:2F:A9:DB:64 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7072C0F09305DA93A37ADE1B3D50C2186B7A107A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa Signing time: Sun 23 Nov 2025 01:30:34 +0000 ROA not before: Sun 23 Nov 2025 01:30:34 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:72:c0:f0:93:05:da:93:a3:7a:de:1b:3d:50:c2:18:6b:7a:10:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:34 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=7d2f6f73e519726f36df8c6f029d7ae36b3d9713457c797d12b1dedb433df1a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:85:83:10:9e:fb:c7:0d:19:d4:0f:29:41:05: 3e:e8:82:f4:97:62:f1:22:91:71:2e:7b:bc:d8:dd: 78:7d:07:ea:63:0c:7c:6c:f2:4c:8d:3c:43:eb:e8: 7f:21:cd:fb:4e:96:3c:de:e1:68:10:02:50:2f:ed: c4:cf:44:bb:63:08:4f:b5:ea:dc:d4:dd:67:d0:8f: 98:62:d8:d9:e5:eb:4d:44:f7:04:0b:e3:c4:57:0f: 6a:56:30:46:0a:41:33:2e:2b:47:60:5b:b1:33:ea: d7:5d:09:fb:97:74:4e:d6:29:3c:2a:b6:4d:39:50: bd:bc:15:db:d5:10:12:28:88:1c:d6:e4:05:3d:11: 92:47:68:7a:16:fa:af:7e:0f:76:d6:95:83:f5:85: 10:f4:df:f5:e2:91:64:f6:97:3d:68:d8:76:2d:24: a9:c0:ad:d8:77:4c:3c:a8:03:97:c8:96:5e:6e:ce: 5d:64:55:49:e6:cc:19:5d:b2:25:63:41:98:05:85: 35:a5:d2:5a:9e:66:cd:b8:2c:aa:65:36:eb:f8:58: 4e:a9:5e:cf:4f:39:cf:74:5e:a6:99:03:1a:c7:d7: ca:be:4f:d6:6a:dc:ce:f3:2d:f0:94:15:2c:3d:1c: 1a:5b:15:87:3f:fa:61:b5:ae:be:69:87:aa:91:20: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4D:EC:7A:08:6D:A0:84:F4:4A:D5:F5:11:A2:63:3D:2F:A9:DB:64 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:4020::/48 Signature Algorithm: sha256WithRSAEncryption 60:98:fb:74:74:dd:0f:9d:f7:ea:b0:fe:40:41:5b:50:d9:05: ae:c6:0d:14:ab:ee:fe:7f:8f:94:b4:6a:8b:15:7f:ee:68:e3: c3:bc:5f:8f:6f:84:27:e4:75:34:d3:39:21:f0:2f:dc:f2:e6: 04:0f:5a:b9:29:29:78:b2:2f:e6:c2:73:7f:19:39:09:10:a5: f8:96:67:c5:0f:1a:1b:36:83:d2:25:ed:63:02:43:a8:1e:54: 32:00:97:f7:f5:5e:39:0f:6b:fe:2f:bd:cb:02:e8:0b:d1:e9: 03:a5:aa:3c:72:51:71:e8:5a:0d:25:3e:19:90:c7:74:f6:79: fc:43:46:8e:49:35:36:f7:73:7f:95:20:87:96:54:04:ed:3b: 2b:d0:70:62:88:08:27:cb:e4:85:4f:74:77:6c:80:87:71:f2: 57:e5:bf:25:8e:ba:ca:16:86:b2:6f:21:a8:1e:4a:84:2e:ba: 28:4f:c6:5a:b7:a1:57:eb:e7:33:50:48:de:91:83:42:06:1e: 87:fc:66:b1:7c:4f:0b:a2:5f:3e:c6:38:d6:04:0d:1c:29:eb: e6:be:7e:ec:ec:15:f7:fe:50:ae:c6:01:9b:19:7c:f5:20:03: 9a:a1:3f:4c:73:ff:5e:a4:d8:da:70:b2:f3:24:e2:e6:de:c4: 7d:c3:ee:ff -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUcHLA8JMF2pOjet4bPVDCGGt6EHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMzRaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDdkMmY2ZjczZTUxOTcyNmYzNmRmOGM2ZjAyOWQ3YWUzNmIzZDk3MTM0NTdj Nzk3ZDEyYjFkZWRiNDMzZGYxYTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOSFgxCe+8cNGdQPKUEFPuiC9Jdi8SKRcS57vNjdeH0H6mMMfGzyTI08Q+vo fyHN+06WPN7haBACUC/txM9Eu2MIT7Xq3NTdZ9CPmGLY2eXrTUT3BAvjxFcPalYw RgpBMy4rR2BbsTPq110J+5d0TtYpPCq2TTlQvbwV29UQEiiIHNbkBT0Rkkdoehb6 r34PdtaVg/WFEPTf9eKRZPaXPWjYdi0kqcCt2HdMPKgDl8iWXm7OXWRVSebMGV2y JWNBmAWFNaXSWp5mzbgsqmU26/hYTqlez085z3ReppkDGsfXyr5P1mrczvMt8JQV LD0cGlsVhz/6YbWuvmmHqpEgfOcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSWTex6 CG2ghPRK1fURomM9L6nbZDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YWRhZjM2NmYtYzk4ZC00YTBiLTg2YWMtNGU2YjZlOTVhMGI1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA IDANBgkqhkiG9w0BAQsFAAOCAQEAYJj7dHTdD5336rD+QEFbUNkFrsYNFKvu/n+P lLRqixV/7mjjw7xfj2+EJ+R1NNM5IfAv3PLmBA9auSkpeLIv5sJzfxk5CRCl+JZn xQ8aGzaD0iXtYwJDqB5UMgCX9/VeOQ9r/i+9ywLoC9HpA6WqPHJRcehaDSU+GZDH dPZ5/ENGjkk1Nvdzf5Ugh5ZUBO07K9BwYogIJ8vkhU90d2yAh3HyV+W/JY66yhaG sm8hqB5KhC66KE/GWrehV+vnM1BI3pGDQgYeh/xmsXxPC6JfPsY41gQNHCnr5r5+ 7OwV9/5QrsYBmxl89SADmqE/THP/XqTY2nCy8yTi5t7EfcPu/w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:25 2025 by rpki-client