This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa File: b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa (raw, json) Hash identifier: FXv1t5nLU0RjblgOHGnPrPWENZoMhtTb593c5ODq/O0= Subject key identifier: E9:D0:15:55:E9:D6:34:57:B2:D9:25:79:89:90:A4:06:F0:BC:1F:9F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3D682226336D79D11307DFEEE1A12923249F45EF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa Signing time: Tue 25 Nov 2025 20:00:06 +0000 ROA not before: Tue 25 Nov 2025 20:00:06 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:68:22:26:33:6d:79:d1:13:07:df:ee:e1:a1:29:23:24:9f:45:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:06 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=60abcf4ad49abbc3f3ed1e67233964ac5d99b63602eafd0319016ffc41d2b1da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:45:2e:b2:20:7f:a3:26:13:17:80:76:c3: 6b:1b:91:82:81:8c:53:94:1e:6c:29:7e:8d:50:99: 05:bb:53:b2:88:b3:fb:d0:d2:68:00:92:e8:b1:8c: 1d:59:60:cc:56:ab:f4:56:10:13:03:ee:09:81:8c: c6:cc:bc:6f:34:bf:b7:aa:76:37:99:3d:d3:06:0a: af:ff:e5:0c:a6:b6:fd:f0:f3:d0:a9:a1:e6:cc:d8: d3:81:91:16:2e:40:5b:3c:be:7f:8b:db:07:fa:59: 7f:8d:dc:5e:5b:d5:25:57:f1:e2:16:f6:13:57:70: 65:37:dd:d5:82:32:b5:be:4a:3b:95:99:0c:3e:35: 6c:b7:6a:85:f1:c4:15:80:e0:34:4a:71:f0:d9:68: e4:10:f6:0b:3b:69:37:3d:a8:28:53:07:25:d8:ea: 4b:9e:1e:82:1e:b5:bf:57:5e:eb:bd:4f:ea:31:8c: 90:ef:64:97:4e:05:ef:6d:0b:95:a1:ec:08:57:96: 2d:fc:32:c9:de:97:79:2d:3f:a4:91:00:06:7c:99: 88:fd:46:07:dc:cb:38:4f:46:37:09:cf:71:a7:53: 8f:9f:b7:ea:e9:19:5d:50:c6:d0:ea:7e:fd:5a:c1: 9e:e1:aa:8b:2f:5c:ad:66:02:de:d5:00:54:cf:1b: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:15:55:E9:D6:34:57:B2:D9:25:79:89:90:A4:06:F0:BC:1F:9F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:4020::/46 Signature Algorithm: sha256WithRSAEncryption ae:b2:b1:db:3b:fa:78:01:ab:e2:62:cb:c8:07:22:17:c5:24: 6f:28:5d:8e:55:e4:8b:40:42:89:fe:84:4b:3c:c7:b8:0d:6f: c6:c9:1b:f1:b6:db:4a:d3:f1:9d:60:06:5f:b1:aa:f5:c2:ce: b2:7a:83:69:20:ff:2f:4c:a2:48:db:70:6b:c5:a1:08:da:87: 88:be:05:44:ff:31:e1:dc:3d:6c:e1:47:c7:68:61:7f:f5:9d: 63:3e:30:e6:30:28:7f:9f:d7:35:9b:28:a7:51:69:bc:f3:8b: 78:d5:4d:aa:34:7d:53:19:a8:f4:dd:6d:86:f0:c0:59:07:ac: 92:9e:7e:bd:8e:90:fc:20:a4:a6:49:b5:58:7d:33:5c:2a:a6: a1:32:e0:ac:cc:73:78:ed:75:46:28:14:a7:72:38:08:9e:97: 2c:1d:d8:d6:70:18:da:f2:57:32:ac:eb:98:f0:2d:51:8b:51: 17:3f:ea:c5:18:3b:b8:77:41:4d:cd:31:3b:98:3a:3d:de:ed: 29:aa:00:5e:c3:84:9a:5e:a4:35:df:d0:be:81:63:80:0d:b2: 63:2b:4d:c0:ab:12:8d:b0:40:0e:20:ca:b5:5a:ec:7b:77:8f: 34:bb:55:f9:81:dd:32:49:46:41:26:6c:30:bd:53:36:bd:cc: 5b:ee:c0:67 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUPWgiJjNtedETB9/u4aEpIySfRe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwMDZaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDYwYWJjZjRhZDQ5YWJiYzNmM2VkMWU2NzIzMzk2NGFjNWQ5OWI2MzYwMmVh ZmQwMzE5MDE2ZmZjNDFkMmIxZGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNXRS6yIH+jJhMXgHbDaxuRgoGMU5QebCl+jVCZBbtTsoiz+9DSaACS6LGM HVlgzFar9FYQEwPuCYGMxsy8bzS/t6p2N5k90wYKr//lDKa2/fDz0Kmh5szY04GR Fi5AWzy+f4vbB/pZf43cXlvVJVfx4hb2E1dwZTfd1YIytb5KO5WZDD41bLdqhfHE FYDgNEpx8Nlo5BD2CztpNz2oKFMHJdjqS54egh61v1de671P6jGMkO9kl04F720L laHsCFeWLfwyyd6XeS0/pJEABnyZiP1GB9zLOE9GNwnPcadTj5+36ukZXVDG0Op+ /VrBnuGqiy9crWYC3tUAVM8bMbUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTp0BVV 6dY0V7LZJXmJkKQG8LwfnzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YjM1YjQ2Y2EtZTllNC00MDM1LWI2ZTUtZTA5OGZmOGZlNzk0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HNA IDANBgkqhkiG9w0BAQsFAAOCAQEArrKx2zv6eAGr4mLLyAciF8UkbyhdjlXki0BC if6ESzzHuA1vxskb8bbbStPxnWAGX7Gq9cLOsnqDaSD/L0yiSNtwa8WhCNqHiL4F RP8x4dw9bOFHx2hhf/WdYz4w5jAof5/XNZsop1FpvPOLeNVNqjR9Uxmo9N1thvDA WQeskp5+vY6Q/CCkpkm1WH0zXCqmoTLgrMxzeO11RigUp3I4CJ6XLB3Y1nAY2vJX MqzrmPAtUYtRFz/qxRg7uHdBTc0xO5g6Pd7tKaoAXsOEml6kNd/QvoFjgA2yYytN wKsSjbBADiDKtVrse3ePNLtV+YHdMklGQSZsML1TNr3MW+7AZw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:44 2025 by rpki-client