This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa File: cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa (raw, json) Hash identifier: oOx4qMhMnsal3mm7flq2XSfTkKuXSVqscTCfT0apvcY= Subject key identifier: 29:EB:DD:2A:28:02:A9:66:80:AD:7F:10:78:85:9F:05:91:77:12:25 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6E4FBBE0FC08F767EA30DE414A8D304E7F4FDD24 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa Signing time: Wed 12 Nov 2025 03:00:05 +0000 ROA not before: Wed 12 Nov 2025 03:00:05 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07b:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4f:bb:e0:fc:08:f7:67:ea:30:de:41:4a:8d:30:4e:7f:4f:dd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 12 03:00:05 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=7070ab8eb67d2d59d20a089b491305b061a2265d8216e61a6dcc74b8c2f27e68, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:7e:04:8c:17:96:3e:8f:6d:d9:32:43:31: 78:76:96:be:e6:a4:c4:06:09:88:99:2f:ee:fd:b7: 4a:42:24:e7:95:f2:23:44:ea:6a:48:04:97:d7:ab: e6:64:e1:3d:cb:e4:ab:e1:75:86:f4:30:cf:80:f2: b8:da:1d:26:91:e7:e1:29:d0:4e:df:55:19:64:2e: e1:27:8d:71:86:d8:ce:10:3c:46:1f:62:3b:03:53: a1:2f:41:1b:a7:ec:65:0d:b8:98:8c:43:72:10:94: 2e:15:a7:c5:fd:b3:f2:5c:d1:0b:1f:7d:19:37:3c: 61:6d:e2:5c:4b:a2:9c:c1:8b:b8:f6:77:0d:9b:db: f4:ff:94:ce:68:45:69:eb:ef:04:e0:8c:90:6a:15: 09:1b:db:a3:f3:60:1f:ce:34:b4:a6:c1:d0:71:a0: 22:f1:42:e1:85:a7:ec:20:db:ad:41:66:76:4d:b6: 4e:cc:c0:96:7a:90:01:9d:e2:e7:94:1f:1a:55:98: ca:f4:6b:79:40:cc:13:12:6e:18:4f:e5:bf:11:bf: a7:08:01:fa:24:f4:bf:11:46:4e:c7:87:fb:ef:5c: 49:b7:ce:54:9d:a0:68:17:6b:99:af:8e:6d:1a:c1: e4:f4:61:74:bc:b0:a6:58:24:28:ee:99:3e:9d:82: ea:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EB:DD:2A:28:02:A9:66:80:AD:7F:10:78:85:9F:05:91:77:12:25 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf7e464d-77bb-4302-aa9f-93906a5dcddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07b:8000::/40 Signature Algorithm: sha256WithRSAEncryption 9e:3d:17:7a:4e:f3:84:40:d4:eb:aa:44:c1:28:8b:4a:fb:84: 8a:31:a1:43:be:ce:84:51:f0:4a:39:56:01:50:f1:d9:b1:03: 40:68:4b:d8:f0:4e:80:f1:7f:fd:f5:72:d8:c2:e3:66:e8:8a: ae:6e:5c:f3:9f:da:19:1e:66:50:49:a5:13:47:2a:b3:b5:01: b9:cd:ff:36:68:84:b0:a8:30:51:53:6a:e2:03:f5:a7:53:81: 93:aa:e9:2e:44:d4:0e:2c:d0:e4:fd:85:8f:a1:58:d9:ab:66: 29:14:96:ce:ca:db:ef:6f:8d:a3:1e:a2:02:7d:29:92:c4:65: d5:97:f2:8e:03:27:aa:05:97:ab:aa:58:c8:42:c6:99:ed:2c: 10:37:0e:ef:9a:c6:6e:54:6e:49:12:23:c3:c5:91:ac:a0:ea: 61:78:98:92:87:db:bf:4d:9a:18:93:21:2e:15:61:79:22:18: bd:e3:cc:47:2f:46:e4:95:19:c4:47:63:b1:21:27:f9:9d:b6: bd:03:72:db:8e:1f:18:13:0b:55:a5:8e:4c:a9:fc:ab:54:c6: 13:24:28:2a:e5:78:1b:0a:c1:59:14:c3:72:f4:c5:e9:d0:6a: 79:a2:1f:d5:29:64:60:8a:40:d1:b1:b7:e8:f7:0e:5f:6b:b1: fe:97:bb:aa -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbk+74PwI92fqMN5BSo0wTn9P3SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTIwMzAwMDVaFw0yNTEyMTcyMzU5NTlaMHoxSTBHBgNV BAUTQDcwNzBhYjhlYjY3ZDJkNTlkMjBhMDg5YjQ5MTMwNWIwNjFhMjI2NWQ4MjE2 ZTYxYTZkY2M3NGI4YzJmMjdlNjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyLfgSMF5Y+j23ZMkMxeHaWvuakxAYJiJkv7v23SkIk55XyI0TqakgEl9er 5mThPcvkq+F1hvQwz4DyuNodJpHn4SnQTt9VGWQu4SeNcYbYzhA8Rh9iOwNToS9B G6fsZQ24mIxDchCULhWnxf2z8lzRCx99GTc8YW3iXEuinMGLuPZ3DZvb9P+UzmhF aevvBOCMkGoVCRvbo/NgH840tKbB0HGgIvFC4YWn7CDbrUFmdk22TszAlnqQAZ3i 55QfGlWYyvRreUDMExJuGE/lvxG/pwgB+iT0vxFGTseH++9cSbfOVJ2gaBdrma+O bRrB5PRhdLywplgkKO6ZPp2C6u8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQp690q KAKpZoCtfxB4hZ8FkXcSJTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2Y3ZTQ2NGQtNzdiYi00MzAyLWFhOWYtOTM5MDZhNWRjZGRmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HuA MA0GCSqGSIb3DQEBCwUAA4IBAQCePRd6TvOEQNTrqkTBKItK+4SKMaFDvs6EUfBK OVYBUPHZsQNAaEvY8E6A8X/99XLYwuNm6Iqublzzn9oZHmZQSaUTRyqztQG5zf82 aISwqDBRU2riA/WnU4GTqukuRNQOLNDk/YWPoVjZq2YpFJbOytvvb42jHqICfSmS xGXVl/KOAyeqBZerqljIQsaZ7SwQNw7vmsZuVG5JEiPDxZGsoOpheJiSh9u/TZoY kyEuFWF5Ihi948xHL0bklRnER2OxISf5nba9A3Lbjh8YEwtVpY5MqfyrVMYTJCgq 5XgbCsFZFMNy9MXp0Gp5oh/VKWRgikDRsbfo9w5fa7H+l7uq -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:08 2025 by rpki-client