This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa File: c3736673-707b-4dfc-aca4-88dcbb52a94d.roa (raw, json) Hash identifier: Ro/20pXzBLtBpxEmQUPitrUh9j+tL7GiOu//7TD3xZo= Subject key identifier: 54:39:7B:16:A5:52:E7:DB:ED:6F:C3:75:84:51:C9:1B:6D:D4:D6:01 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 530F7715AFEDC50DDDAB88E14BD6D58EE15F1977 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa Signing time: Thu 13 Nov 2025 02:00:37 +0000 ROA not before: Thu 13 Nov 2025 02:00:37 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d078:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0f:77:15:af:ed:c5:0d:dd:ab:88:e1:4b:d6:d5:8e:e1:5f:19:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:37 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=3b23be91564a05bad03d7ace44fead3ad2567d41862e5d02591364c03e92b021, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:09:43:05:2c:8b:51:76:64:9a:28:9a:86: 25:0b:53:91:83:18:0a:40:c5:a4:8c:d7:a2:2c:91: 34:00:12:a0:3c:7c:7b:8d:de:11:c0:b9:b8:f8:96: 8b:ff:93:19:7f:93:0c:2f:f2:f5:08:a9:15:43:94: 61:c7:62:ea:bb:fa:a9:4f:6f:ea:49:00:0e:e7:de: 4c:23:af:60:1a:f9:60:a0:a5:8e:d0:d5:5c:96:30: 30:53:cf:eb:3e:4b:48:d4:9a:c3:b4:fc:c3:14:ab: 47:eb:09:77:de:a1:83:2f:dd:4a:f7:50:21:fb:cc: 2c:46:cb:27:e7:56:31:56:55:c4:53:c1:f6:e7:11: 8d:d2:7f:ae:bd:78:99:3c:ce:35:b1:81:4b:53:b5: 97:e8:8d:b2:27:e7:1e:04:eb:25:f5:4b:be:cf:79: 70:89:cd:2e:b9:f7:34:e1:c5:9e:2c:2c:70:9b:36: ec:70:15:a6:f7:94:92:9a:14:cf:a4:72:24:28:d6: 5f:6a:71:eb:02:30:0c:87:cf:4e:89:c8:48:6f:1e: 0b:c8:3c:a0:7b:f3:6d:63:3a:e0:92:77:f7:19:f5: 49:2d:f9:68:ea:85:56:76:cd:3d:45:e3:d9:08:fb: 55:df:07:38:35:fb:72:24:45:ee:77:16:81:45:74: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:7B:16:A5:52:E7:DB:ED:6F:C3:75:84:51:C9:1B:6D:D4:D6:01 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d078:800::/40 Signature Algorithm: sha256WithRSAEncryption 4c:23:65:da:09:58:64:91:d2:9b:17:c4:c8:08:93:ff:17:7d: ff:af:6e:fd:b8:bd:58:a0:a5:e0:46:fa:1f:9c:92:53:4b:94: 39:54:4b:fb:31:07:25:10:6a:90:af:16:70:06:e3:6d:c0:83: af:a2:4b:4e:54:42:83:43:2f:b4:9f:09:2d:f4:1f:78:63:68: 71:26:4d:ae:4c:0d:74:4d:f8:7a:54:5b:01:c5:58:c6:f2:a1: 47:7f:34:a9:3f:72:78:47:b1:ec:18:82:df:e0:d8:ed:93:74: 37:ae:7b:67:15:d5:4a:93:15:e7:0c:2b:a9:fc:ce:00:5b:fa: 1f:14:1c:8f:93:9f:59:1a:aa:d0:64:51:fa:b8:57:a8:62:a3: a0:08:58:7b:94:ad:e8:9f:dd:dc:bc:ca:96:e2:4c:51:6d:e1: 87:39:ab:22:70:e6:c9:9b:81:e6:a8:ea:3c:04:ad:54:4a:6a: 49:90:e6:50:65:75:0b:3e:38:b7:1b:de:03:a3:5c:8c:5d:22: 1f:e6:9c:63:37:9a:6b:7c:fb:39:7d:ec:7a:a5:0e:b9:72:e5: 6c:76:55:5d:a0:8e:17:f5:4b:ff:8e:8e:42:b9:20:fb:cd:bd: 1e:fe:65:c4:a6:81:d6:3f:13:ee:fa:af:35:b0:ba:2d:01:6d: a1:17:11:e5 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUUw93Fa/txQ3dq4jhS9bVjuFfGXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMzdaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQDNiMjNiZTkxNTY0YTA1YmFkMDNkN2FjZTQ0ZmVhZDNhZDI1NjdkNDE4NjJl NWQwMjU5MTM2NGMwM2U5MmIwMjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0KCUMFLItRdmSaKJqGJQtTkYMYCkDFpIzXoiyRNAASoDx8e43eEcC5uPiW i/+TGX+TDC/y9QipFUOUYcdi6rv6qU9v6kkADufeTCOvYBr5YKCljtDVXJYwMFPP 6z5LSNSaw7T8wxSrR+sJd96hgy/dSvdQIfvMLEbLJ+dWMVZVxFPB9ucRjdJ/rr14 mTzONbGBS1O1l+iNsifnHgTrJfVLvs95cInNLrn3NOHFniwscJs27HAVpveUkpoU z6RyJCjWX2px6wIwDIfPTonISG8eC8g8oHvzbWM64JJ39xn1SS35aOqFVnbNPUXj 2Qj7Vd8HODX7ciRF7ncWgUV0USsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRUOXsW pVLn2+1vw3WEUckbbdTWATAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzM3MzY2NzMtNzA3Yi00ZGZjLWFjYTQtODhkY2JiNTJhOTRkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HgI MA0GCSqGSIb3DQEBCwUAA4IBAQBMI2XaCVhkkdKbF8TICJP/F33/r279uL1YoKXg RvofnJJTS5Q5VEv7MQclEGqQrxZwBuNtwIOvoktOVEKDQy+0nwkt9B94Y2hxJk2u TA10Tfh6VFsBxVjG8qFHfzSpP3J4R7HsGILf4Njtk3Q3rntnFdVKkxXnDCup/M4A W/ofFByPk59ZGqrQZFH6uFeoYqOgCFh7lK3on93cvMqW4kxRbeGHOasicObJm4Hm qOo8BK1USmpJkOZQZXULPji3G94Do1yMXSIf5pxjN5prfPs5fex6pQ65cuVsdlVd oI4X9Uv/jo5CuSD7zb0e/mXEpoHWPxPu+q81sLotAW2hFxHl -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:49 2025 by rpki-client