This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad6d47b-d932-44b6-8939-bd8993b444d2.roa File: bad6d47b-d932-44b6-8939-bd8993b444d2.roa (raw, json) Hash identifier: 2t94emct1F/DEwiSkHYoLV4Gw502+vs3C2FDzm2hWiU= Subject key identifier: 7B:10:7E:D1:74:98:4E:34:97:FD:99:81:48:E8:2B:14:DC:56:0B:65 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2977ABD6FFA4B09D70EFBFB92E21B500617F91C0 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad6d47b-d932-44b6-8939-bd8993b444d2.roa Signing time: Tue 18 Nov 2025 00:40:06 +0000 ROA not before: Tue 18 Nov 2025 00:40:06 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d034:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:77:ab:d6:ff:a4:b0:9d:70:ef:bf:b9:2e:21:b5:00:61:7f:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:40:06 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=8130241a1e66ea318ce6e5f75dca06e8cec4a3b80f59a88e8d6c60e7ddb1d955, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:67:61:24:e4:30:89:14:fd:bb:a7:ab:6c: c9:97:20:93:e6:a7:ee:c9:83:b8:ae:77:c6:1e:ea: 5b:43:c3:b7:ce:b4:34:dc:01:90:b8:f0:f5:69:9b: 3f:ae:8d:19:42:13:4a:0b:1d:03:45:c8:b8:73:b6: 10:ca:63:42:03:c7:98:9f:69:75:0a:09:72:df:4f: 23:69:b4:8e:77:8f:00:66:2a:8d:45:39:69:2b:f5: c2:23:00:4f:dc:7b:35:7d:e0:57:75:7a:5a:59:8f: 9b:44:4a:82:97:17:6d:3b:9d:81:7b:67:62:0a:9a: 0c:e1:9e:a1:88:b8:a8:9c:ba:c6:d8:b4:04:44:68: 3c:26:d9:a9:91:3d:69:76:a4:cb:e9:c9:e5:e8:b3: f3:7f:0b:0a:a2:b3:c5:58:af:eb:ca:21:70:c9:9b: 47:e6:2e:8e:39:c3:27:6e:d7:26:50:f6:c6:a1:55: 55:0d:85:03:ba:9b:54:6a:6b:29:cd:0f:02:b1:80: 65:00:c5:fc:1a:dc:c6:26:03:f3:13:3d:38:0c:53: 4e:ce:d8:5e:7e:e3:0c:82:9d:47:9e:c5:bd:45:d1: 88:5a:7f:19:41:f9:df:41:f7:1b:be:4f:83:99:c8: 7f:81:88:01:80:25:19:78:51:cd:27:f8:47:3f:26: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:10:7E:D1:74:98:4E:34:97:FD:99:81:48:E8:2B:14:DC:56:0B:65 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad6d47b-d932-44b6-8939-bd8993b444d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d034:80c0::/46 Signature Algorithm: sha256WithRSAEncryption c9:24:8d:ce:3b:a6:c1:ff:da:ab:d6:59:6d:5f:3e:a1:c4:b1: ad:10:07:10:92:65:cc:9a:4d:aa:4e:4a:51:8f:7c:ff:a4:92: 18:2c:dc:b2:d6:91:65:b0:65:74:53:15:75:30:f3:85:28:98: bd:0f:d4:5a:15:aa:f1:9c:54:7c:03:4b:da:a8:0b:d7:98:4a: 96:cc:c8:43:ae:a1:b7:0a:de:e9:88:5d:d6:8b:fb:34:19:42: ac:c5:4a:6a:77:da:7e:87:dc:0a:82:43:7d:d4:1c:cc:f1:b8: 6e:c0:73:f1:32:00:44:f0:a1:e8:c8:52:ad:1a:dd:f8:ac:5c: 76:29:c0:cc:45:75:02:cf:b6:3b:3d:d4:53:e2:5a:b9:14:a1: a1:17:d0:ca:58:6c:d8:e8:6b:6a:63:9b:58:64:a6:d1:50:3f: 17:8b:4c:9b:b4:a5:38:36:74:35:9e:5b:0d:c0:78:3a:69:1b: fa:89:87:95:3f:40:24:95:e6:68:bf:78:b3:ae:10:ae:ea:4a: 53:6f:ed:ad:66:7b:e6:9a:73:4e:2d:65:7e:b5:d9:43:3a:e5: 0b:a8:c3:02:c0:83:17:3b:5f:b5:18:03:39:d1:82:5f:a7:75: 36:33:67:de:da:1a:89:d8:32:42:ea:5b:75:c9:54:48:3e:eb: 9b:cd:23:df -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUKXer1v+ksJ1w77+5LiG1AGF/kcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDQwMDZaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDgxMzAyNDFhMWU2NmVhMzE4Y2U2ZTVmNzVkY2EwNmU4Y2VjNGEzYjgwZjU5 YTg4ZThkNmM2MGU3ZGRiMWQ5NTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJcZ2Ek5DCJFP27p6tsyZcgk+an7smDuK53xh7qW0PDt860NNwBkLjw9Wmb P66NGUITSgsdA0XIuHO2EMpjQgPHmJ9pdQoJct9PI2m0jnePAGYqjUU5aSv1wiMA T9x7NX3gV3V6WlmPm0RKgpcXbTudgXtnYgqaDOGeoYi4qJy6xti0BERoPCbZqZE9 aXaky+nJ5eiz838LCqKzxViv68ohcMmbR+YujjnDJ27XJlD2xqFVVQ2FA7qbVGpr Kc0PArGAZQDF/BrcxiYD8xM9OAxTTs7YXn7jDIKdR57FvUXRiFp/GUH530H3G75P g5nIf4GIAYAlGXhRzSf4Rz8mQ8kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR7EH7R dJhONJf9mYFI6CsU3FYLZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmFkNmQ0N2ItZDkzMi00NGI2LTg5MzktYmQ4OTkzYjQ0NGQyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DSA wDANBgkqhkiG9w0BAQsFAAOCAQEAySSNzjumwf/aq9ZZbV8+ocSxrRAHEJJlzJpN qk5KUY98/6SSGCzcstaRZbBldFMVdTDzhSiYvQ/UWhWq8ZxUfANL2qgL15hKlszI Q66htwre6Yhd1ov7NBlCrMVKanfafofcCoJDfdQczPG4bsBz8TIARPCh6MhSrRrd +KxcdinAzEV1As+2Oz3UU+JauRShoRfQylhs2OhramObWGSm0VA/F4tMm7SlODZ0 NZ5bDcB4Omkb+omHlT9AJJXmaL94s64QrupKU2/trWZ75ppzTi1lfrXZQzrlC6jD AsCDFztftRgDOdGCX6d1NjNn3toaidgyQupbdclUSD7rm80j3w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:47 2025 by rpki-client