This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa File: d5fc0fee-af50-4f94-a822-c9f3238359cf.roa (raw, json) Hash identifier: pSFAgSES3NVN6KYapf+ju3n3tjWPt/fx6zSoUOmtfJs= Subject key identifier: 9B:30:15:5B:90:FC:93:7E:AB:6B:99:F6:69:0F:D8:BD:9F:CC:07:4E Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 28A4BFC4C812D2A9034E69A2843497F53D9A5C05 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa Signing time: Tue 25 Nov 2025 20:00:09 +0000 ROA not before: Tue 25 Nov 2025 20:00:09 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a4:bf:c4:c8:12:d2:a9:03:4e:69:a2:84:34:97:f5:3d:9a:5c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:09 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=fa95051aa6b8b08e28949e0609b217b785f977f713a518768477e5d361cfc399, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:09:3d:b0:cf:d0:e3:dd:ca:e5:1b:27:87: 1e:fb:25:77:30:2d:0b:89:71:a9:67:60:83:de:22: e7:a0:68:12:36:8b:ac:6a:ba:e7:40:23:d4:33:5a: ef:80:26:0a:2a:93:18:48:a2:3f:f0:a9:91:13:63: a3:e7:f3:da:5a:90:f9:d7:90:6b:f2:ab:bb:0e:eb: b0:8e:92:7f:d6:63:97:e7:05:82:61:86:af:5c:da: d8:f9:49:6d:90:00:8a:9f:69:9e:09:60:bb:79:68: 5b:0f:b1:b8:83:b1:ba:fc:f1:a0:d2:1c:84:f6:67: 9c:80:0d:c7:d6:2f:a5:b4:36:c1:e2:65:14:d9:29: ec:94:4e:ee:43:5e:ad:8a:08:0b:5a:31:f2:e3:b2: 3d:06:e1:31:a3:5e:2d:21:58:b6:db:1a:86:ac:d2: 7a:07:13:5d:73:e1:51:66:18:cb:5d:b2:79:c9:8e: 8a:cd:39:e3:f3:60:7e:c8:ad:9a:ad:da:de:aa:e7: e1:10:e0:90:79:24:c8:fd:f8:f9:fd:5c:bc:30:8d: 23:e8:88:3a:32:ef:e9:bf:fc:70:3d:cf:d0:5c:50: e3:db:de:75:35:b8:8f:a9:53:47:0d:d0:e4:f6:e2: e9:89:58:45:d1:54:3b:ed:78:fd:bc:ca:d1:6d:5c: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:30:15:5B:90:FC:93:7E:AB:6B:99:F6:69:0F:D8:BD:9F:CC:07:4E X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:2000::/40 Signature Algorithm: sha256WithRSAEncryption 2f:60:d1:6f:fb:0a:aa:51:1a:56:51:62:f2:54:d1:55:39:ef: 84:ee:90:bc:f2:ee:70:93:cc:ca:18:f2:be:53:e9:5d:86:54: b1:25:db:ef:e8:05:a2:0b:d2:a6:ad:77:48:cb:ca:a5:93:19: 65:5c:6f:f2:52:5c:27:c4:e9:8a:ff:a3:bd:0f:2e:50:bd:03: 4c:38:59:ab:86:1a:8c:32:66:b0:de:2d:11:2e:ba:1f:d9:43: 7a:ad:27:9e:55:b9:34:87:dc:fc:d3:54:47:a6:e5:70:72:d7: 6e:14:66:f6:b7:e3:08:45:81:3c:1f:28:76:10:79:70:f7:7b: 56:dd:8a:f0:8a:a0:2a:ab:99:c3:39:75:d6:74:c6:c9:d6:18: d8:f3:e7:99:19:98:6a:a3:48:d6:90:85:76:a9:cf:75:75:df: 40:63:0c:7a:8e:5d:59:e4:ce:b6:79:6b:2d:c4:ae:cf:c2:36: 4f:db:6b:d4:4b:73:5e:1b:d9:a6:08:0e:58:f5:3a:64:c5:8f: 2f:e8:8a:45:2c:68:62:4c:f9:db:d4:8d:f6:fe:6a:ad:4e:3c: ca:d3:09:3a:b9:ca:d1:e4:43:d4:47:1c:38:0a:ea:1f:a1:0d: e5:2c:29:1d:f2:72:02:50:bc:aa:e0:67:ff:6f:f8:29:a8:8e: 87:f2:0c:b3 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUKKS/xMgS0qkDTmmihDSX9T2aXAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwMDlaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQGZhOTUwNTFhYTZiOGIwOGUyODk0OWUwNjA5YjIxN2I3ODVmOTc3ZjcxM2E1 MTg3Njg0NzdlNWQzNjFjZmMzOTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgbCT2wz9Dj3crlGyeHHvsldzAtC4lxqWdgg94i56BoEjaLrGq650Aj1DNa 74AmCiqTGEiiP/CpkRNjo+fz2lqQ+deQa/Kruw7rsI6Sf9Zjl+cFgmGGr1za2PlJ bZAAip9pnglgu3loWw+xuIOxuvzxoNIchPZnnIANx9YvpbQ2weJlFNkp7JRO7kNe rYoIC1ox8uOyPQbhMaNeLSFYttsahqzSegcTXXPhUWYYy12yecmOis054/Ngfsit mq3a3qrn4RDgkHkkyP34+f1cvDCNI+iIOjLv6b/8cD3P0FxQ49vedTW4j6lTRw3Q 5Pbi6YlYRdFUO+14/bzK0W1cHw8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSbMBVb kPyTfqtrmfZpD9i9n8wHTjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDVmYzBmZWUtYWY1MC00Zjk0LWE4MjItYzlmMzIzODM1OWNmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HMg MA0GCSqGSIb3DQEBCwUAA4IBAQAvYNFv+wqqURpWUWLyVNFVOe+E7pC88u5wk8zK GPK+U+ldhlSxJdvv6AWiC9KmrXdIy8qlkxllXG/yUlwnxOmK/6O9Dy5QvQNMOFmr hhqMMmaw3i0RLrof2UN6rSeeVbk0h9z801RHpuVwctduFGb2t+MIRYE8Hyh2EHlw 93tW3YrwiqAqq5nDOXXWdMbJ1hjY8+eZGZhqo0jWkIV2qc91dd9AYwx6jl1Z5M62 eWstxK7PwjZP22vUS3NeG9mmCA5Y9TpkxY8v6IpFLGhiTPnb1I32/mqtTjzK0wk6 ucrR5EPURxw4CuofoQ3lLCkd8nICULyq4Gf/b/gpqI6H8gyz -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:41 2025 by rpki-client