This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d331c3a8-c393-47a6-84c9-cd743c3328a0.roa File: d331c3a8-c393-47a6-84c9-cd743c3328a0.roa (raw, json) Hash identifier: 7pcHXRRN8LmS3mohjA8vPTuZqQhw2dtEfgM/bHFCGe4= Subject key identifier: 20:F6:00:D7:9B:0A:DB:C2:3F:61:1A:4C:01:EF:03:E3:96:F0:E2:84 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 69DC38282048F760953F27EE193CE376050FAD99 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d331c3a8-c393-47a6-84c9-cd743c3328a0.roa Signing time: Sat 06 Dec 2025 00:40:13 +0000 ROA not before: Sat 06 Dec 2025 00:40:13 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06c:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:dc:38:28:20:48:f7:60:95:3f:27:ee:19:3c:e3:76:05:0f:ad:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 00:40:13 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=38db7ac2eeab82d2686ae302fd6035cd797a012b86384b127d3b81baddbc6b5d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:aa:c3:f2:76:18:40:d0:91:56:d0:51:24: a2:b8:a7:7b:ed:1a:07:31:99:20:7a:3b:f7:a9:e1: 38:ae:d6:64:0a:63:9c:2a:32:c7:a8:c8:f5:ca:24: eb:0e:e1:15:d4:75:f7:c1:b3:7d:5f:06:34:12:f1: 3e:3f:57:0a:1c:0a:8d:45:f8:c2:fd:0b:88:6a:1d: dc:63:09:f5:d3:34:a1:aa:21:cf:95:e4:c8:25:5d: 0a:df:73:ff:5d:da:0e:ac:0c:19:a8:c1:f5:02:10: bc:7e:0a:a6:99:ce:c8:33:24:48:01:d2:cf:b3:9a: 8a:1a:c9:79:84:ef:ae:d7:55:c9:58:59:cf:59:8f: a7:8d:f3:a9:1a:c3:96:1f:71:dd:72:9e:8b:84:82: bc:ef:a0:ce:cd:dc:b9:f0:5f:bc:a8:81:4c:d0:05: db:be:33:20:c3:a1:a7:9b:d3:ac:75:60:ff:9c:69: 99:df:51:44:e5:ae:4f:ad:d3:f9:5c:92:69:06:4d: 3a:5f:cb:c5:44:d9:ca:8d:24:41:a2:59:9b:8e:2d: c1:cf:72:51:e2:f1:92:0a:78:51:b5:09:ef:2e:f5: b3:fd:61:47:94:db:8c:c5:d3:69:02:8d:a2:30:86: e8:df:2a:4f:ba:41:50:20:ae:e7:a4:b4:45:1e:8b: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:00:D7:9B:0A:DB:C2:3F:61:1A:4C:01:EF:03:E3:96:F0:E2:84 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d331c3a8-c393-47a6-84c9-cd743c3328a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06c:a000::/48 Signature Algorithm: sha256WithRSAEncryption 84:9c:c3:fc:1e:32:61:f3:12:04:9b:20:04:86:dd:a5:a3:b3: ab:b5:64:da:fe:a1:8c:cf:55:71:cc:79:ea:37:d7:dc:7b:9e: 5a:bb:bb:04:39:04:4c:39:19:f3:3c:1e:ed:43:2c:7f:bd:a4: 95:a3:62:87:8c:2f:ba:77:7d:ad:8e:89:58:25:c1:3f:52:fd: bf:a5:74:10:f1:59:fa:87:67:e7:9b:b0:f8:9a:0c:ed:d5:06: c0:54:ee:69:f9:19:89:53:1c:83:7e:2a:e6:bb:63:cf:b2:47: ca:a4:02:2f:d3:8b:34:8a:6b:00:50:c8:94:1d:27:db:bf:b6: 61:af:ec:e3:84:45:64:8d:ea:ce:b0:8f:a7:8c:2e:ba:83:d9: 26:5d:24:a6:b7:25:d9:d3:0f:07:34:cd:a7:d9:14:57:b4:b9: ba:04:8d:d2:13:e2:85:bd:37:f2:71:d0:c7:74:1c:68:66:81: fb:5d:e5:a1:2f:07:57:c2:72:21:69:39:e6:25:dd:4f:9d:f0: 8c:8e:f9:f5:87:2d:f9:86:21:35:47:5b:02:c1:6e:69:7a:14: 80:6a:e8:c2:6c:fe:7a:a8:c9:40:0a:df:9f:20:b8:22:47:32: 01:eb:7f:a4:e9:bf:9c:58:46:4d:37:c2:12:ae:db:39:79:ba: 96:8f:bf:6e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUadw4KCBI92CVPyfuGTzjdgUPrZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwMDQwMTNaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDM4ZGI3YWMyZWVhYjgyZDI2ODZhZTMwMmZkNjAzNWNkNzk3YTAxMmI4NjM4 NGIxMjdkM2I4MWJhZGRiYzZiNWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJmqsPydhhA0JFW0FEkorine+0aBzGZIHo796nhOK7WZApjnCoyx6jI9cok 6w7hFdR198GzfV8GNBLxPj9XChwKjUX4wv0LiGod3GMJ9dM0oaohz5XkyCVdCt9z /13aDqwMGajB9QIQvH4KppnOyDMkSAHSz7OaihrJeYTvrtdVyVhZz1mPp43zqRrD lh9x3XKei4SCvO+gzs3cufBfvKiBTNAF274zIMOhp5vTrHVg/5xpmd9RROWuT63T +VySaQZNOl/LxUTZyo0kQaJZm44twc9yUeLxkgp4UbUJ7y71s/1hR5TbjMXTaQKN ojCG6N8qT7pBUCCu56S0RR6Lf5ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQg9gDX mwrbwj9hGkwB7wPjlvDihDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDMzMWMzYTgtYzM5My00N2E2LTg0YzktY2Q3NDNjMzMyOGEwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gyg ADANBgkqhkiG9w0BAQsFAAOCAQEAhJzD/B4yYfMSBJsgBIbdpaOzq7Vk2v6hjM9V ccx56jfX3HueWru7BDkETDkZ8zwe7UMsf72klaNih4wvund9rY6JWCXBP1L9v6V0 EPFZ+odn55uw+JoM7dUGwFTuafkZiVMcg34q5rtjz7JHyqQCL9OLNIprAFDIlB0n 27+2Ya/s44RFZI3qzrCPp4wuuoPZJl0kprcl2dMPBzTNp9kUV7S5ugSN0hPihb03 8nHQx3QcaGaB+13loS8HV8JyIWk55iXdT53wjI759Yct+YYhNUdbAsFuaXoUgGro wmz+eqjJQArfnyC4IkcyAet/pOm/nFhGTTfCEq7bOXm6lo+/bg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:23 2025 by rpki-client