This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa File: cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa (raw, json) Hash identifier: VQN/h/OrlH7nVpAorBEehixTX3+TRrkivzr2ueHEhdM= Subject key identifier: FC:E7:BC:B4:87:F9:C7:DF:19:F7:A5:00:0A:19:61:53:16:15:DC:CC Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 113B4A8244685DFE8CBE0C86117E7B654632DF13 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa Signing time: Sat 15 Nov 2025 06:30:12 +0000 ROA not before: Sat 15 Nov 2025 06:30:12 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3b:4a:82:44:68:5d:fe:8c:be:0c:86:11:7e:7b:65:46:32:df:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:12 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=7d3007647cd9974cf0c407b730349143ad3f1bd841ae0390c6f435c30a041828, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:41:ea:3e:65:9d:e9:cd:9c:25:fa:95:4a: 72:03:02:9b:cd:a3:7a:84:89:9c:cd:be:58:e4:b5: 1c:5f:68:b5:b3:24:68:98:6f:20:80:a5:77:99:e1: 07:a4:ef:b9:1a:59:9a:cf:ea:88:c6:24:ba:09:03: fc:f1:41:f2:4b:20:bc:0b:9d:f2:be:31:59:75:65: 74:89:29:3b:51:f5:33:de:03:f3:64:83:b4:78:db: 52:5f:c7:f5:18:33:94:98:73:13:2f:3c:ff:8e:57: 91:be:3a:63:bc:2c:10:24:40:8c:c3:8a:11:f7:17: e5:14:f2:4f:ca:39:b3:ba:b1:28:43:34:31:ac:12: dc:71:71:c0:86:b3:26:ec:2e:fb:ed:3e:0a:a2:d1: 26:df:00:35:26:0a:c5:74:db:df:51:6a:34:5f:7e: 71:85:37:9c:53:86:2e:25:8a:0f:dd:1e:7a:24:5b: b3:33:c7:a9:5b:f3:3e:c0:4a:60:bd:f6:6c:15:3e: 2b:6b:cc:e2:04:3d:d4:c8:01:f9:9c:1a:80:20:9e: f7:f8:f4:eb:95:70:d3:1f:fd:5d:26:68:37:ec:18: 6f:7d:ed:6e:1a:73:c8:95:06:a6:eb:aa:55:33:3c: 39:78:ce:e8:bb:05:88:1f:46:40:20:94:a7:68:f3: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:BC:B4:87:F9:C7:DF:19:F7:A5:00:0A:19:61:53:16:15:DC:CC X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:1040::/48 Signature Algorithm: sha256WithRSAEncryption 1d:61:8d:80:a5:d4:d4:85:fc:27:1e:c2:e9:5d:84:d2:ac:4c: eb:71:4e:de:80:64:31:d8:8a:c7:24:42:82:2a:2a:6b:02:36: 49:ab:01:2e:de:a1:63:25:9a:7a:58:d2:bd:c4:70:b8:f3:04: dd:4b:df:05:e4:04:f2:f0:56:54:8b:9d:10:5f:b9:05:e2:f8: c3:55:14:ed:f3:bc:b7:bd:ac:df:92:dd:27:44:c0:d0:2f:7b: b7:ce:25:df:17:1d:58:ac:3a:36:9d:79:c8:6e:c0:3e:04:6e: 5f:3b:c0:09:23:8b:43:62:03:1e:00:ff:90:73:50:45:7e:06: 52:b9:9f:f8:ce:3f:cc:94:93:5d:73:00:27:db:6c:e8:dc:49: 89:ed:93:6c:94:03:2d:ab:64:0b:05:76:43:c1:e1:38:74:f2: b9:3e:76:88:56:7e:02:b6:89:64:35:90:14:a7:57:ea:ad:f7: e2:bb:97:a0:85:8c:c9:b1:93:ba:ff:ce:e5:f9:b0:f5:98:13: f7:28:35:f1:10:53:21:fc:2e:25:3c:6f:a9:ef:60:40:17:b7: dc:f0:f8:29:9c:f9:b7:66:e1:dd:e7:85:bb:06:96:e9:1c:4f: ff:1f:b8:f4:fd:77:65:b5:32:1a:71:08:ec:bf:ff:e6:f8:16: 89:12:e3:bc -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUETtKgkRoXf6MvgyGEX57ZUYy3xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwMTJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDdkMzAwNzY0N2NkOTk3NGNmMGM0MDdiNzMwMzQ5MTQzYWQzZjFiZDg0MWFl MDM5MGM2ZjQzNWMzMGEwNDE4MjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhpQeo+ZZ3pzZwl+pVKcgMCm82jeoSJnM2+WOS1HF9otbMkaJhvIICld5nh B6TvuRpZms/qiMYkugkD/PFB8ksgvAud8r4xWXVldIkpO1H1M94D82SDtHjbUl/H 9RgzlJhzEy88/45Xkb46Y7wsECRAjMOKEfcX5RTyT8o5s7qxKEM0MawS3HFxwIaz Juwu++0+CqLRJt8ANSYKxXTb31FqNF9+cYU3nFOGLiWKD90eeiRbszPHqVvzPsBK YL32bBU+K2vM4gQ91MgB+ZwagCCe9/j065Vw0x/9XSZoN+wYb33tbhpzyJUGpuuq VTM8OXjO6LsFiB9GQCCUp2jzjgECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT857y0 h/nH3xn3pQAKGWFTFhXczDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2Y4MzI2ZDAtZWNjMC00OTM5LTk5MzktMmVkNzBmNmVhNTM2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIQ QDANBgkqhkiG9w0BAQsFAAOCAQEAHWGNgKXU1IX8Jx7C6V2E0qxM63FO3oBkMdiK xyRCgioqawI2SasBLt6hYyWaeljSvcRwuPME3UvfBeQE8vBWVIudEF+5BeL4w1UU 7fO8t72s35LdJ0TA0C97t84l3xcdWKw6Np15yG7APgRuXzvACSOLQ2IDHgD/kHNQ RX4GUrmf+M4/zJSTXXMAJ9ts6NxJie2TbJQDLatkCwV2Q8HhOHTyuT52iFZ+AraJ ZDWQFKdX6q334ruXoIWMybGTuv/O5fmw9ZgT9yg18RBTIfwuJTxvqe9gQBe33PD4 KZz5t2bh3eeFuwaW6RxP/x+49P13ZbUyGnEI7L//5vgWiRLjvA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:39 2025 by rpki-client