This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caeeaf61-b927-4d38-b398-1efb2c05d49e.roa File: caeeaf61-b927-4d38-b398-1efb2c05d49e.roa (raw, json) Hash identifier: kTYAKOG5Z9c68oUto8SiDxyrCbhGe82N0u9vX1r0nvc= Subject key identifier: 9B:1A:50:0A:33:63:D2:8D:26:A2:4F:FE:21:E7:EF:73:2F:98:D3:C9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 57A17EA2C259E7421526EAF81F0FB46EE5895B98 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caeeaf61-b927-4d38-b398-1efb2c05d49e.roa Signing time: Thu 13 Nov 2025 02:00:10 +0000 ROA not before: Thu 13 Nov 2025 02:00:10 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d058:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a1:7e:a2:c2:59:e7:42:15:26:ea:f8:1f:0f:b4:6e:e5:89:5b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:10 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=7d7f8a647941f73c8d74866ef021b93783a0ab2205e867282c8df45690538f4d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:f1:23:12:fb:c0:65:43:c6:43:60:39:3e: ac:96:e8:61:4a:2e:d1:9b:8c:e2:03:ae:21:a7:b8: 19:34:61:94:9f:0f:64:30:87:84:2b:f8:29:53:6e: a2:61:2d:6e:7b:48:60:90:40:c0:75:ec:a0:7b:65: 06:16:b9:0e:e7:af:19:37:7e:94:9a:02:5a:d9:27: 40:df:57:3e:1e:05:1b:77:ee:61:c4:ad:84:3b:f0: d4:f8:5f:fc:9a:58:87:3e:99:77:db:30:86:b3:1a: 34:52:b8:66:15:23:af:10:d3:c7:53:61:7b:7e:3d: 07:d7:bc:5c:e8:57:4e:41:7d:f0:8b:80:46:ca:91: 50:39:c4:ce:f5:f7:d5:1a:13:51:96:92:84:33:b9: 88:24:ef:66:4e:6f:0c:21:47:43:f6:83:73:e3:e5: dc:82:df:69:4d:1d:f0:f9:81:40:34:1d:8c:2b:61: 1f:57:ab:fa:94:53:d5:25:4f:39:26:ae:54:5a:b6: 3e:6b:a9:02:1b:c1:ca:c6:2b:ba:8f:c5:79:0a:fe: a3:b2:12:18:6f:ef:2c:45:77:ff:74:a0:fc:e5:f9: 25:bc:33:96:04:38:a1:17:94:0d:a9:37:0a:45:e9: 51:89:43:6f:47:3a:10:5c:88:8a:28:03:db:87:f7: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1A:50:0A:33:63:D2:8D:26:A2:4F:FE:21:E7:EF:73:2F:98:D3:C9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caeeaf61-b927-4d38-b398-1efb2c05d49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d058:800::/40 Signature Algorithm: sha256WithRSAEncryption 09:d6:ac:4c:ae:bb:12:c9:02:b5:b9:6e:4d:43:09:c5:a4:bf: 80:d3:5e:92:d8:6a:94:a5:06:44:0c:8a:f9:44:8a:69:03:26: 87:ac:b9:c5:76:76:0d:a1:a9:57:16:00:9c:b3:32:0c:23:fd: 3a:a4:17:fe:51:8c:36:20:3e:d9:bc:1c:44:3b:8f:a4:c1:61: 8f:f0:c7:ec:2f:8e:96:82:e8:9d:65:d3:1f:73:28:d1:b3:b9: 9f:c0:cc:6c:7f:07:83:b7:51:9f:c9:48:dd:29:44:6f:cc:01: 2d:4c:ca:01:2b:c6:b8:5d:43:1d:04:f1:9b:ff:45:c8:e1:49: 35:f4:75:4d:9a:e0:58:1b:71:0e:72:ee:40:98:a8:73:43:87: da:e1:68:37:f0:e4:cb:86:20:45:34:39:3d:68:23:5e:de:f0: 0a:5b:a2:8b:55:e8:84:b7:79:17:95:8d:11:86:23:6a:ef:5e: 8d:e0:b4:81:20:80:c0:25:18:2e:e2:fa:f3:71:3a:b4:34:14: f6:0a:b0:2c:4c:a2:6d:e9:63:33:70:27:1a:dd:10:92:25:6d: 1c:62:b7:0c:ab:6f:ab:da:a0:1f:a1:c9:c1:2c:c3:a2:0f:89: 0a:bb:b9:d2:01:56:92:1c:ad:c0:86:a4:8a:38:f5:65:95:9b: f1:aa:4a:e6 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUV6F+osJZ50IVJur4Hw+0buWJW5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMTBaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQDdkN2Y4YTY0Nzk0MWY3M2M4ZDc0ODY2ZWYwMjFiOTM3ODNhMGFiMjIwNWU4 NjcyODJjOGRmNDU2OTA1MzhmNGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv48SMS+8BlQ8ZDYDk+rJboYUou0ZuM4gOuIae4GTRhlJ8PZDCHhCv4KVNu omEtbntIYJBAwHXsoHtlBha5DuevGTd+lJoCWtknQN9XPh4FG3fuYcSthDvw1Phf /JpYhz6Zd9swhrMaNFK4ZhUjrxDTx1Nhe349B9e8XOhXTkF98IuARsqRUDnEzvX3 1RoTUZaShDO5iCTvZk5vDCFHQ/aDc+Pl3ILfaU0d8PmBQDQdjCthH1er+pRT1SVP OSauVFq2PmupAhvBysYruo/FeQr+o7ISGG/vLEV3/3Sg/OX5JbwzlgQ4oReUDak3 CkXpUYlDb0c6EFyIiigD24f3BLsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSbGlAK M2PSjSaiT/4h5+9zL5jTyTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2FlZWFmNjEtYjkyNy00ZDM4LWIzOTgtMWVmYjJjMDVkNDllLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FgI MA0GCSqGSIb3DQEBCwUAA4IBAQAJ1qxMrrsSyQK1uW5NQwnFpL+A016S2GqUpQZE DIr5RIppAyaHrLnFdnYNoalXFgCcszIMI/06pBf+UYw2ID7ZvBxEO4+kwWGP8Mfs L46WguidZdMfcyjRs7mfwMxsfweDt1GfyUjdKURvzAEtTMoBK8a4XUMdBPGb/0XI 4Uk19HVNmuBYG3EOcu5AmKhzQ4fa4Wg38OTLhiBFNDk9aCNe3vAKW6KLVeiEt3kX lY0RhiNq716N4LSBIIDAJRgu4vrzcTq0NBT2CrAsTKJt6WMzcCca3RCSJW0cYrcM q2+r2qAfocnBLMOiD4kKu7nSAVaSHK3AhqSKOPVllZvxqkrm -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:08 2025 by rpki-client