This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa File: dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json) Hash identifier: Hl7epsudhrGG+REds6oFGfP77whrcHyf+1Dw1f+GcNk= Subject key identifier: 97:54:2C:56:36:46:4F:5E:E9:B4:00:EE:60:6A:FE:FF:3D:68:B6:AB Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 090CB0EFD0D910EA78EE76EFB340CCBA2535A287 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa Signing time: Sat 15 Nov 2025 06:20:08 +0000 ROA not before: Sat 15 Nov 2025 06:20:08 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0c:b0:ef:d0:d9:10:ea:78:ee:76:ef:b3:40:cc:ba:25:35:a2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:08 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=a950a7301731431ca8cea7c2f925a84dab7f6bae154c46365df24e1e58c7ec53, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:91:64:df:97:c4:61:6f:98:91:3b:e4:08:14: 15:2e:9f:15:6e:3f:ca:3a:5f:0a:80:43:15:8f:70: 5d:e9:de:31:5c:fa:11:d1:69:d3:b4:86:38:d6:5a: c4:d3:42:a7:ae:fd:3c:0d:f2:ba:38:a6:4e:36:66: cf:44:42:c5:2d:af:ca:85:a7:e5:af:54:91:43:81: af:36:ab:ff:1b:b7:8e:a0:d5:df:51:9f:4b:47:6f: f1:fa:1e:78:3e:d0:3b:e0:e9:d3:29:d1:19:16:8b: 56:b9:b3:54:03:3c:0c:23:29:b8:b5:64:c0:7a:cc: e6:8f:2e:33:e2:54:38:d0:cc:27:2f:52:20:da:5a: e3:8a:66:19:72:67:cc:6d:90:dc:01:62:e2:e0:fb: 76:b1:2b:00:43:cc:5d:17:36:42:db:ff:ba:db:3b: 72:66:15:dd:8a:73:d7:17:8a:28:ab:dc:1f:f3:e7: b8:b5:c6:2b:a4:6e:cf:fa:64:ea:49:dd:f2:89:93: 00:9d:37:df:d2:d3:8f:bf:58:7d:80:57:96:17:ce: 28:f6:9a:ea:f4:45:e0:e2:40:68:42:7d:08:ed:d7: 05:37:97:3d:f8:9a:b3:63:92:e0:2f:3d:79:95:fe: bb:f7:8a:a8:22:57:d0:54:39:50:58:de:56:46:59: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:54:2C:56:36:46:4F:5E:E9:B4:00:EE:60:6A:FE:FF:3D:68:B6:AB X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:9040::/48 Signature Algorithm: sha256WithRSAEncryption 91:9e:a2:8a:09:6e:ab:fa:41:48:d5:ee:92:1f:8a:2f:91:b1: bf:0b:b7:94:0e:de:c4:ef:61:11:3c:77:88:27:57:22:19:4a: 26:49:7e:ac:32:06:c7:62:65:fd:b2:74:77:cb:ae:3b:75:90: 7e:f1:eb:1b:10:6f:3a:33:c4:96:d6:03:9b:3d:24:8c:6b:be: 1e:6b:69:1e:22:32:f3:73:0e:a0:67:94:0c:8d:1f:56:39:d5: d3:a7:80:d9:12:0c:04:33:e6:12:4b:da:ea:7d:23:fe:89:52: c2:55:74:fe:79:18:f0:cf:f9:f0:c3:67:b2:a5:c1:c8:ef:e4: 7a:19:7d:c4:88:10:e8:c6:db:e8:74:6c:5a:e2:59:41:7d:ff: c3:f5:7c:71:2d:ef:ba:b2:f8:ed:ee:bb:ef:bc:e8:35:dd:72: 47:03:c2:b9:59:58:31:13:55:6b:9c:2b:64:e6:e5:47:62:3e: b4:48:82:c2:0e:25:7e:38:d2:a1:51:c7:c6:0c:27:93:96:60: 02:cb:7b:e8:0b:fd:a8:58:d2:ad:3a:c4:f3:02:0d:d5:38:49: e3:b9:38:b2:d4:32:12:f4:cd:3e:fd:0c:f1:b7:fa:95:5b:08: da:87:6b:14:12:3d:ad:6c:6c:78:8b:9e:9f:02:aa:8b:2c:32: bb:65:23:6f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUCQyw79DZEOp47nbvs0DMuiU1oocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwMDhaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGE5NTBhNzMwMTczMTQzMWNhOGNlYTdjMmY5MjVhODRkYWI3ZjZiYWUxNTRj NDYzNjVkZjI0ZTFlNThjN2VjNTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI6RZN+XxGFvmJE75AgUFS6fFW4/yjpfCoBDFY9wXeneMVz6EdFp07SGONZa xNNCp679PA3yujimTjZmz0RCxS2vyoWn5a9UkUOBrzar/xu3jqDV31GfS0dv8foe eD7QO+Dp0ynRGRaLVrmzVAM8DCMpuLVkwHrM5o8uM+JUONDMJy9SINpa44pmGXJn zG2Q3AFi4uD7drErAEPMXRc2Qtv/uts7cmYV3Ypz1xeKKKvcH/PnuLXGK6Ruz/pk 6knd8omTAJ0339LTj79YfYBXlhfOKPaa6vRF4OJAaEJ9CO3XBTeXPfias2OS4C89 eZX+u/eKqCJX0FQ5UFjeVkZZsc8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSXVCxW NkZPXum0AO5gav7/PWi2qzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGMwYWFiNGUtOWRiYy00YjY4LTkzOGQtODAyMDJlM2QwYmQwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+Q QDANBgkqhkiG9w0BAQsFAAOCAQEAkZ6iigluq/pBSNXukh+KL5Gxvwu3lA7exO9h ETx3iCdXIhlKJkl+rDIGx2Jl/bJ0d8uuO3WQfvHrGxBvOjPEltYDmz0kjGu+Hmtp HiIy83MOoGeUDI0fVjnV06eA2RIMBDPmEkva6n0j/olSwlV0/nkY8M/58MNnsqXB yO/kehl9xIgQ6Mbb6HRsWuJZQX3/w/V8cS3vurL47e6777zoNd1yRwPCuVlYMRNV a5wrZOblR2I+tEiCwg4lfjjSoVHHxgwnk5ZgAst76Av9qFjSrTrE8wIN1ThJ47k4 stQyEvTNPv0M8bf6lVsI2odrFBI9rWxseIuenwKqiywyu2Ujbw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:59 2025 by rpki-client