This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa File: d8bdec55-5207-4e20-a65b-ee864a734245.roa (raw, json) Hash identifier: mUWzvNDwBamzmwTzm2LF+7EYgVOGPz8w3+byxSYbinQ= Subject key identifier: 8C:E6:C6:70:A3:5F:AB:66:A7:19:1F:1C:FB:F5:FC:63:C6:51:CD:1D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: F73F049A97BC4EEDD477F3AB38A6C6FBD628CE Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa Signing time: Tue 18 Nov 2025 00:40:05 +0000 ROA not before: Tue 18 Nov 2025 00:40:05 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d034:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f7:3f:04:9a:97:bc:4e:ed:d4:77:f3:ab:38:a6:c6:fb:d6:28:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:40:05 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=5fa241f00856fdead388da312426bd5a247afcddacda986414f5af283466d62d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:b2:0a:37:15:de:7b:e4:d7:41:f3:64:b3: c3:97:cc:dc:90:6e:2f:02:05:1a:d0:54:8a:f6:45: c9:b1:e0:4e:e8:fb:01:be:49:09:1d:1c:fc:40:87: 04:22:7d:b5:ae:85:fe:38:26:d6:15:cc:13:2a:ef: e7:ca:3d:4c:fb:0d:a8:a9:83:32:85:4d:ca:09:7d: c1:73:7b:e8:d2:72:cf:d9:10:a6:5d:7a:92:e0:88: 78:63:f7:92:43:0d:9d:ce:bf:39:c2:db:01:72:5c: 85:43:5c:0f:d8:51:3e:e1:dc:fe:ee:73:a2:ea:bc: 3d:08:8c:4a:f1:2c:d0:98:1b:32:ef:7e:16:dd:4a: 65:da:bc:bf:93:8e:11:d9:26:1d:e8:39:db:e7:21: ab:56:71:ad:02:cf:62:d3:65:8c:b6:70:bc:35:c0: 79:73:d5:24:26:2d:02:89:38:2f:6d:88:9e:c5:58: 1c:f9:8e:6e:02:6e:12:83:cc:de:d8:32:40:89:70: cb:81:1c:b0:36:2b:92:e7:47:ad:af:b7:d3:33:02: 78:10:0a:be:94:aa:08:02:be:f6:08:4a:9c:27:ca: 5e:df:3d:60:bc:e2:a1:f6:62:42:87:aa:eb:ff:fa: e7:6d:3b:6e:8c:15:29:c6:6d:97:d4:bf:20:30:5a: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E6:C6:70:A3:5F:AB:66:A7:19:1F:1C:FB:F5:FC:63:C6:51:CD:1D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d034:8080::/46 Signature Algorithm: sha256WithRSAEncryption ab:ea:51:fb:78:cf:29:de:ef:f1:da:97:88:59:be:8d:da:c9: 1a:c6:a5:70:d1:48:0e:82:76:14:44:64:80:fb:ff:55:a3:ac: 9a:4c:39:08:4f:f7:67:bf:6e:fa:0e:62:9c:d2:61:9c:53:3d: ab:40:f3:ee:fd:0f:ab:3f:e7:c0:d3:c1:ca:7f:cc:be:7e:3a: 4a:80:af:33:43:ea:f2:a8:3b:1c:12:27:0b:4f:aa:f6:aa:8b: b8:4a:d9:5e:a7:19:ea:c9:d3:18:7d:91:b8:52:c9:fa:c3:8b: 2a:21:e4:92:9e:a9:80:d2:aa:78:52:5f:7e:60:6a:52:0f:99: 8e:cb:1c:67:b9:cc:77:ce:02:b2:18:d4:e7:57:bf:05:66:46: a7:5c:ba:55:ff:89:d4:ab:22:f3:d6:a5:c7:56:f0:fd:a0:2b: 78:28:ca:d1:09:2d:ef:c1:83:b5:7a:63:a5:9e:81:57:7b:20: ec:7c:35:4a:3b:1b:90:07:86:1a:6f:1b:37:ed:bb:79:d5:08: 82:0b:c4:c0:0e:92:fd:69:9d:ea:fc:27:99:19:cc:72:92:3f: e7:b6:2d:03:1c:50:3b:1e:49:9f:81:8a:a5:a6:6c:f2:01:c6: 4c:33:cc:ef:22:4d:4c:f0:6e:a1:d5:5d:6f:5d:db:83:ff:5b: 3f:1f:b7:16 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAPc/BJqXvE7t1HfzqzimxvvWKM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDQwMDVaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDVmYTI0MWYwMDg1NmZkZWFkMzg4ZGEzMTI0MjZiZDVhMjQ3YWZjZGRhY2Rh OTg2NDE0ZjVhZjI4MzQ2NmQ2MmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFWsgo3Fd575NdB82Szw5fM3JBuLwIFGtBUivZFybHgTuj7Ab5JCR0c/ECH BCJ9ta6F/jgm1hXMEyrv58o9TPsNqKmDMoVNygl9wXN76NJyz9kQpl16kuCIeGP3 kkMNnc6/OcLbAXJchUNcD9hRPuHc/u5zouq8PQiMSvEs0JgbMu9+Ft1KZdq8v5OO EdkmHeg52+chq1ZxrQLPYtNljLZwvDXAeXPVJCYtAok4L22InsVYHPmObgJuEoPM 3tgyQIlwy4EcsDYrkudHra+30zMCeBAKvpSqCAK+9ghKnCfKXt89YLziofZiQoeq 6//65207bowVKcZtl9S/IDBa/a8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSM5sZw o1+rZqcZHxz79fxjxlHNHTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDhiZGVjNTUtNTIwNy00ZTIwLWE2NWItZWU4NjRhNzM0MjQ1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DSA gDANBgkqhkiG9w0BAQsFAAOCAQEAq+pR+3jPKd7v8dqXiFm+jdrJGsalcNFIDoJ2 FERkgPv/VaOsmkw5CE/3Z79u+g5inNJhnFM9q0Dz7v0Pqz/nwNPByn/Mvn46SoCv M0Pq8qg7HBInC0+q9qqLuErZXqcZ6snTGH2RuFLJ+sOLKiHkkp6pgNKqeFJffmBq Ug+ZjsscZ7nMd84CshjU51e/BWZGp1y6Vf+J1Ksi89alx1bw/aAreCjK0Qkt78GD tXpjpZ6BV3sg7Hw1SjsbkAeGGm8bN+27edUIggvEwA6S/Wmd6vwnmRnMcpI/57Yt AxxQOx5Jn4GKpaZs8gHGTDPM7yJNTPBuodVdb13bg/9bPx+3Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:26 2025 by rpki-client