This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa File: e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa (raw, json) Hash identifier: HJwikANE8cjvN+BmrfFhVtLgeiAxMcCn3QSWevWdN1I= Subject key identifier: E0:DC:31:D2:08:79:39:BF:7C:60:DA:4C:DA:BA:AA:32:2C:A9:57:84 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5FBFF20ADCB604727D1EE1AE9906E0A179F3FFF5 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa Signing time: Sat 15 Nov 2025 06:01:14 +0000 ROA not before: Sat 15 Nov 2025 06:01:14 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d018::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bf:f2:0a:dc:b6:04:72:7d:1e:e1:ae:99:06:e0:a1:79:f3:ff:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:01:14 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=dde2eba335346bde3eb14a13e43802bc08c788c6453e111f70d07860649604d3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:af:b4:3f:cc:0e:37:b4:fa:a0:61:9c:0e: c5:b4:d7:cc:d4:85:8a:d7:ca:ef:5b:99:c5:3c:78: ca:39:9b:ef:a8:86:d7:59:1e:a1:77:27:ca:7a:8e: 0f:59:62:58:cb:af:d6:f1:b1:50:df:7f:30:9b:9e: 45:ec:76:f0:d6:45:c5:fd:17:7f:01:19:b8:8c:5a: 13:84:ec:14:48:f5:5d:5e:ff:cb:ad:87:47:a2:ed: bc:0a:27:72:77:0b:e3:cb:10:d0:5c:f7:63:51:a5: 95:b3:be:79:44:54:c3:55:ae:86:93:08:c9:2d:2e: 49:37:08:2a:d8:32:5b:34:c5:2b:0b:8c:50:4c:a3: 83:30:c6:b0:f4:2a:24:5e:7b:21:3e:3a:5b:40:d5: 03:43:c8:16:9e:d9:b9:fe:57:94:13:bf:b9:aa:3a: b8:07:f6:90:1d:55:1b:06:1c:06:6d:63:bc:52:5d: b1:78:24:06:64:dd:03:9d:39:41:9e:d7:51:6f:df: 20:88:2d:7d:56:60:a9:e7:88:60:f8:5c:1b:00:8e: 49:ae:8d:23:2d:a5:73:c8:44:47:0c:14:d1:15:83: 8c:53:a2:ed:5c:8b:b1:21:52:38:a3:f6:4e:2a:af: a6:03:71:1a:28:d7:1b:2c:b9:8b:3c:f0:a1:d1:80: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DC:31:D2:08:79:39:BF:7C:60:DA:4C:DA:BA:AA:32:2C:A9:57:84 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d018::/35 Signature Algorithm: sha256WithRSAEncryption 56:71:6a:fa:08:09:f1:5a:e0:32:c0:8e:73:09:81:76:98:d7: c3:fc:b3:a4:5d:5e:45:b0:72:1b:27:fe:8a:82:16:31:be:41: 42:06:34:1d:22:11:15:7d:98:89:83:1e:1d:5d:80:d6:8c:a5: 0b:bc:af:7d:dd:98:43:4d:41:c1:05:89:ad:52:9a:89:9d:bb: cc:7f:02:15:2e:e9:26:07:02:31:86:c2:2a:cc:70:5b:f0:8b: 65:11:34:a6:73:c6:13:dd:cb:db:3a:04:b8:f9:e8:ce:74:b1: 1a:54:dd:9b:29:b3:20:8f:3c:5d:ae:51:03:50:8b:5c:53:ab: 6e:d0:27:b4:93:65:05:45:16:5e:08:d4:5b:07:ac:d9:7f:55: 8c:cc:86:5e:6c:95:ae:42:4f:48:3c:ec:64:e8:d9:ea:6b:d6: ee:35:3a:71:81:fa:13:c1:d2:a5:91:44:b4:9a:bc:fc:d3:05: 41:82:ce:04:d6:e0:b3:9e:ec:b4:e9:d1:33:bb:a8:6c:7b:9e: 5b:d3:8f:e6:05:6f:30:a3:9a:a2:a2:32:d1:a3:59:3c:69:c8: 75:30:5d:b7:07:a3:a8:45:ab:47:4f:24:55:40:13:60:18:82: 9e:b4:72:4e:6b:91:91:ae:f1:ea:67:c7:a2:d3:e6:b1:52:e8: 53:1e:98:4b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUX7/yCty2BHJ9HuGumQbgoXnz//UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjAxMTRaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGRkZTJlYmEzMzUzNDZiZGUzZWIxNGExM2U0MzgwMmJjMDhjNzg4YzY0NTNl MTExZjcwZDA3ODYwNjQ5NjA0ZDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMytr7Q/zA43tPqgYZwOxbTXzNSFitfK71uZxTx4yjmb76iG11keoXcnynqO D1liWMuv1vGxUN9/MJueRex28NZFxf0XfwEZuIxaE4TsFEj1XV7/y62HR6LtvAon cncL48sQ0Fz3Y1GllbO+eURUw1WuhpMIyS0uSTcIKtgyWzTFKwuMUEyjgzDGsPQq JF57IT46W0DVA0PIFp7Zuf5XlBO/uao6uAf2kB1VGwYcBm1jvFJdsXgkBmTdA505 QZ7XUW/fIIgtfVZgqeeIYPhcGwCOSa6NIy2lc8hERwwU0RWDjFOi7VyLsSFSOKP2 TiqvpgNxGijXGyy5izzwodGAgX0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTg3DHS CHk5v3xg2kzauqoyLKlXhDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTA1MDQ4YzAtNzc1MS00ZWM0LWI4OTEtYTM1ODNkYmRjOWZlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSoF0BgA MA0GCSqGSIb3DQEBCwUAA4IBAQBWcWr6CAnxWuAywI5zCYF2mNfD/LOkXV5FsHIb J/6KghYxvkFCBjQdIhEVfZiJgx4dXYDWjKULvK993ZhDTUHBBYmtUpqJnbvMfwIV LukmBwIxhsIqzHBb8ItlETSmc8YT3cvbOgS4+ejOdLEaVN2bKbMgjzxdrlEDUItc U6tu0Ce0k2UFRRZeCNRbB6zZf1WMzIZebJWuQk9IPOxk6Nnqa9buNTpxgfoTwdKl kUS0mrz80wVBgs4E1uCznuy06dEzu6hse55b04/mBW8wo5qiojLRo1k8ach1MF23 B6OoRatHTyRVQBNgGIKetHJOa5GRrvHqZ8ei0+axUuhTHphL -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:44 2025 by rpki-client