This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json) Hash identifier: gFL3lOSud/XSPyv3+AKKcwE+Fr+pMTOYUVIw3J4Jik4= Subject key identifier: 87:D0:69:BF:3F:88:9A:BA:90:CA:2D:A2:C0:F1:60:A7:99:C2:1A:B7 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 24B0C5BF8A2EF11AA04EF2831686589F42CBE1E7 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa Signing time: Sat 15 Nov 2025 05:31:15 +0000 ROA not before: Sat 15 Nov 2025 05:31:15 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d021::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b0:c5:bf:8a:2e:f1:1a:a0:4e:f2:83:16:86:58:9f:42:cb:e1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:31:15 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=431a0edab4d3a28f262b0c0b80ee09f5ae8f43844f5216c2541ccab1d35e371b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:e6:10:a7:87:90:11:b4:4b:5e:8e:06:00: 30:c8:ba:ee:4f:2b:1c:e2:44:25:87:bd:22:e7:d1: 74:48:d2:34:97:74:66:01:33:e5:62:43:c0:bf:c1: b5:4f:60:64:f6:71:f4:29:8d:4c:30:b0:b9:2d:1d: d9:b7:10:47:7b:86:05:f0:ab:a4:d5:9e:33:fb:b6: 30:17:31:62:c8:f9:66:6b:11:ad:57:2e:28:52:99: 7b:eb:81:fc:88:34:c5:79:fa:8f:01:e5:a0:f9:2a: c3:15:c8:4c:6e:39:6e:03:3a:cc:d1:b6:ca:5e:45: a7:a9:ea:ba:2f:97:86:76:73:75:15:8b:aa:77:4a: 50:e8:ae:93:49:62:d1:17:96:a3:66:a5:c3:77:4d: 00:b7:13:87:9c:92:60:6f:a5:87:4b:7d:20:a9:c6: fa:c7:5d:7c:f3:f7:c8:a5:15:f4:80:84:18:e5:e1: 75:50:e1:5d:a7:cf:b8:f3:22:a7:92:57:30:2f:d2: 7b:d6:5a:f8:df:a0:78:74:3d:3b:08:78:7b:d6:32: 18:fe:1c:03:8f:b6:55:e9:16:8f:a2:f0:a9:42:7c: 73:6f:80:da:2e:d3:6d:6e:d2:65:a1:9d:2c:7a:85: 82:27:1b:52:3e:3c:57:b0:98:e2:17:77:87:ca:28: 0f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D0:69:BF:3F:88:9A:BA:90:CA:2D:A2:C0:F1:60:A7:99:C2:1A:B7 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d021::/36 Signature Algorithm: sha256WithRSAEncryption 91:ba:38:b4:d2:bb:42:a0:1d:f4:c1:e7:58:32:00:07:ae:17: c3:89:03:79:ea:bb:f1:09:dc:a4:69:60:c9:08:5d:e3:f5:8b: bd:ce:b6:e7:66:7a:5d:45:22:7c:ab:c2:6a:ce:4c:d6:9d:14: 2f:f5:e9:62:1a:67:57:f2:c9:78:0f:42:e9:5b:c5:c7:30:65: 31:6a:24:bd:7b:07:e6:86:2a:e0:5f:6c:e0:70:b3:fa:31:c5: 7b:e2:ba:34:7b:98:a2:fe:41:29:76:a1:b3:d8:e3:ad:a5:32: dc:e8:08:be:24:c8:bb:78:c7:d9:47:fe:23:05:35:03:3a:f6: c9:48:34:03:d2:cd:ad:8e:9d:90:58:1e:18:7d:da:ae:24:00: ae:8e:9f:44:9d:42:12:4f:e2:51:87:7b:54:55:ad:6e:bb:61: 2e:23:b7:11:f2:78:5c:b2:dd:4b:39:2d:85:f7:2e:a9:d8:3b: 4c:c1:a7:5f:e8:fc:47:5b:90:5f:d9:6b:6a:72:a6:2c:b3:f4: f9:7e:8f:b2:18:2c:49:4a:60:9d:77:26:34:44:b7:5c:4e:74: cb:10:bf:8f:a4:aa:14:91:c8:0b:d8:7b:f0:ec:5a:a7:df:45: af:15:32:4b:ce:10:b6:0e:b7:87:36:d6:5b:38:f3:26:ee:30: 4f:f8:8d:85 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUJLDFv4ou8RqgTvKDFoZYn0LL4ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMxMTVaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDQzMWEwZWRhYjRkM2EyOGYyNjJiMGMwYjgwZWUwOWY1YWU4ZjQzODQ0ZjUy MTZjMjU0MWNjYWIxZDM1ZTM3MWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcI5hCnh5ARtEtejgYAMMi67k8rHOJEJYe9IufRdEjSNJd0ZgEz5WJDwL/B tU9gZPZx9CmNTDCwuS0d2bcQR3uGBfCrpNWeM/u2MBcxYsj5ZmsRrVcuKFKZe+uB /Ig0xXn6jwHloPkqwxXITG45bgM6zNG2yl5Fp6nqui+XhnZzdRWLqndKUOiuk0li 0ReWo2alw3dNALcTh5ySYG+lh0t9IKnG+sddfPP3yKUV9ICEGOXhdVDhXafPuPMi p5JXMC/Se9Za+N+geHQ9Owh4e9YyGP4cA4+2VekWj6LwqUJ8c2+A2i7TbW7SZaGd LHqFgicbUj48V7CY4hd3h8ooD+MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSH0Gm/ P4iaupDKLaLA8WCnmcIatzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmRkMzM1NjItMjY1My00NTQ5LTg0ZGMtMjVmOTZhYTEwYTgzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CEA MA0GCSqGSIb3DQEBCwUAA4IBAQCRuji00rtCoB30wedYMgAHrhfDiQN56rvxCdyk aWDJCF3j9Yu9zrbnZnpdRSJ8q8JqzkzWnRQv9eliGmdX8sl4D0LpW8XHMGUxaiS9 ewfmhirgX2zgcLP6McV74ro0e5ii/kEpdqGz2OOtpTLc6Ai+JMi7eMfZR/4jBTUD OvbJSDQD0s2tjp2QWB4YfdquJACujp9EnUIST+JRh3tUVa1uu2EuI7cR8nhcst1L OS2F9y6p2DtMwadf6PxHW5Bf2WtqcqYss/T5fo+yGCxJSmCddyY0RLdcTnTLEL+P pKoUkcgL2Hvw7Fqn30WvFTJLzhC2DreHNtZbOPMm7jBP+I2F -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:17 2025 by rpki-client