This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa File: be610cc2-170e-494b-b1f3-db73bc5ff027.roa (raw, json) Hash identifier: WSTrRphRslFiQui/9eZ3nymObcp4coLJc5QBp7My5+E= Subject key identifier: F1:D5:1F:76:A3:34:06:4A:C0:FF:8E:09:A2:BF:E2:25:3C:C2:6C:4D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 76ED938C354B22B66AF356B021E718146A2805AE Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa Signing time: Sat 15 Nov 2025 06:10:42 +0000 ROA not before: Sat 15 Nov 2025 06:10:42 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ed:93:8c:35:4b:22:b6:6a:f3:56:b0:21:e7:18:14:6a:28:05:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:10:42 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=b1c542044b15c2e3fef67386154237cf194f302cfe7575d40ef66ce85c3099f2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:53:e1:ac:88:8b:67:4f:9e:d0:13:e3:88:0c: f2:10:1a:b7:76:0c:2a:72:f7:39:51:66:91:bb:f8: c9:72:56:77:f0:a6:a3:13:89:a5:ba:11:65:11:fc: 2f:99:23:67:12:d8:df:10:89:38:3f:9f:ab:42:60: 4f:6f:fc:58:07:47:26:af:b3:05:0c:d9:39:b6:f1: a6:70:55:89:90:cf:4d:bc:8c:b1:ff:35:d7:98:2e: ac:58:cf:67:49:26:16:d6:22:37:df:f0:d6:1e:8b: 48:f2:d7:cc:08:24:1e:49:b8:d8:59:67:8f:8b:40: 75:95:58:e8:21:b4:f1:cd:ed:d2:6a:7a:d4:84:c0: eb:7a:68:05:8f:64:a4:47:22:d0:cc:e8:8d:d7:47: 86:93:96:39:b8:a0:ef:a1:87:26:32:99:5b:2a:05: 3a:ac:5c:8e:24:e9:9f:37:a5:6b:96:16:ce:8f:f5: 9a:19:d7:1a:38:d6:08:11:9c:27:42:f4:7f:63:72: d4:14:7e:f3:9d:46:73:b7:fa:44:0d:73:32:76:b8: af:05:be:7d:5c:3f:c5:0c:3b:e7:28:da:7f:18:0e: 88:e9:0c:fe:41:f3:dd:a7:bd:58:e3:24:45:35:96: d3:88:b1:84:a6:9b:b5:62:63:a2:2d:57:d7:13:b2: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D5:1F:76:A3:34:06:4A:C0:FF:8E:09:A2:BF:E2:25:3C:C2:6C:4D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:6080::/48 Signature Algorithm: sha256WithRSAEncryption 5d:58:63:72:60:04:ae:bb:00:cf:35:64:37:c5:49:88:22:47: d6:f5:fc:5f:84:1a:4f:3f:a0:20:7c:b2:90:10:a5:6c:f7:2f: 92:b7:0c:97:ee:5c:43:70:79:98:35:01:a6:22:56:31:37:b9: 94:e4:b3:70:d6:a4:8e:90:a6:52:cc:f3:b7:75:5c:3e:23:0b: f7:80:8e:5b:c8:8e:3a:0a:b1:d5:2e:04:8c:7b:00:a5:02:d7: a7:20:18:75:08:e7:8d:a2:51:ab:94:df:df:38:85:63:8e:81: 8c:c6:c7:d7:bf:96:28:4e:e5:a8:c0:7f:6a:e7:f2:64:03:33: 5f:5f:ac:2c:b8:e5:e7:2d:eb:b5:dd:31:44:62:df:d3:84:4d: db:4e:c3:76:5e:9d:51:41:06:37:e8:d9:19:c4:81:32:b8:cc: 0b:a0:47:39:4a:a8:fc:dc:5e:27:ca:32:e7:cf:5d:31:75:d9: c8:2e:40:24:e2:5c:0a:82:28:b9:dc:9a:3e:c5:bf:49:b4:f7: 34:64:84:59:e0:24:7a:3b:3b:b4:cd:c5:37:7b:a2:28:6b:c4: 5a:4f:f9:3d:c0:f7:f1:5b:40:e0:70:6d:d1:16:20:52:0c:ea: 4d:bd:52:f2:c8:73:6f:fa:71:2b:91:30:c0:3d:b5:6d:85:38: 0e:fe:21:ae -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUdu2TjDVLIrZq81awIecYFGooBa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjEwNDJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGIxYzU0MjA0NGIxNWMyZTNmZWY2NzM4NjE1NDIzN2NmMTk0ZjMwMmNmZTc1 NzVkNDBlZjY2Y2U4NWMzMDk5ZjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpT4ayIi2dPntAT44gM8hAat3YMKnL3OVFmkbv4yXJWd/CmoxOJpboRZRH8 L5kjZxLY3xCJOD+fq0JgT2/8WAdHJq+zBQzZObbxpnBViZDPTbyMsf8115gurFjP Z0kmFtYiN9/w1h6LSPLXzAgkHkm42Flnj4tAdZVY6CG08c3t0mp61ITA63poBY9k pEci0MzojddHhpOWObig76GHJjKZWyoFOqxcjiTpnzela5YWzo/1mhnXGjjWCBGc J0L0f2Ny1BR+851Gc7f6RA1zMna4rwW+fVw/xQw75yjafxgOiOkM/kHz3ae9WOMk RTWW04ixhKabtWJjoi1X1xOySgsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTx1R92 ozQGSsD/jgmiv+IlPMJsTTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmU2MTBjYzItMTcwZS00OTRiLWIxZjMtZGI3M2JjNWZmMDI3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9g gDANBgkqhkiG9w0BAQsFAAOCAQEAXVhjcmAErrsAzzVkN8VJiCJH1vX8X4QaTz+g IHyykBClbPcvkrcMl+5cQ3B5mDUBpiJWMTe5lOSzcNakjpCmUszzt3VcPiML94CO W8iOOgqx1S4EjHsApQLXpyAYdQjnjaJRq5Tf3ziFY46BjMbH17+WKE7lqMB/aufy ZAMzX1+sLLjl5y3rtd0xRGLf04RN207Ddl6dUUEGN+jZGcSBMrjMC6BHOUqo/Nxe J8oy589dMXXZyC5AJOJcCoIoudyaPsW/SbT3NGSEWeAkejs7tM3FN3uiKGvEWk/5 PcD38VtA4HBt0RYgUgzqTb1S8shzb/pxK5EwwD21bYU4Dv4hrg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:57 2025 by rpki-client