This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa File: e2212154-4339-4293-b1a8-15f06519a708.roa (raw, json) Hash identifier: vbjJoCyjWwB8PzXg+4ekyzbMnwuSWVAt3Aa6mAqR6tU= Subject key identifier: 86:CE:DD:BB:49:71:F3:AA:FA:05:1D:B0:6F:8E:57:4D:61:ED:EB:FC Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 751968E877ED5ADE9A98BF381B24918FDFA4A3C9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa Signing time: Sat 15 Nov 2025 05:20:39 +0000 ROA not before: Sat 15 Nov 2025 05:20:39 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06f:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:19:68:e8:77:ed:5a:de:9a:98:bf:38:1b:24:91:8f:df:a4:a3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:20:39 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=fdbf0e0b269734713a2028071cd7da7ed253e0f2fe53eed59d29d65efe87f5ba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:d4:a8:0f:33:ea:92:94:2f:a1:0a:26:d9: 4d:74:42:71:41:bb:c2:41:d3:cc:00:53:f8:45:35: 07:05:ac:1a:9f:3d:a9:0f:d7:41:e0:81:e6:05:21: da:29:4d:c9:64:bd:d8:d3:d2:b6:79:cf:2d:fd:ca: 28:33:b0:a8:5b:9b:bb:d4:5a:62:4c:9d:62:30:a0: a1:d6:e0:a9:d8:b2:92:52:a2:2d:de:78:16:d6:39: 55:1a:01:58:83:59:15:67:31:59:69:0b:9e:4b:72: 62:9f:08:69:52:48:56:03:6d:d7:8a:98:63:f3:82: b1:4f:89:8e:98:c1:f2:ae:7d:8e:61:54:f3:22:a6: 8c:15:f4:36:9c:8e:26:34:e4:e3:d6:a8:62:f7:55: ca:eb:9b:56:06:ba:b8:95:83:45:b5:e4:b9:28:50: 2f:ce:5a:97:98:73:7e:0a:75:98:5e:7c:8d:c7:02: 50:ba:1f:d9:e3:1d:bc:cf:74:dc:d9:3f:0b:8b:4e: 5a:aa:25:6e:34:71:37:08:74:57:38:f6:8f:75:d7: 06:b6:5a:04:19:89:ba:0e:ba:81:90:ae:3f:70:a8: 5f:74:51:9f:90:42:0a:54:38:8c:03:06:6f:3a:79: 98:e7:bb:7a:fb:74:0d:7d:0e:4a:d6:9c:c9:a7:cd: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CE:DD:BB:49:71:F3:AA:FA:05:1D:B0:6F:8E:57:4D:61:ED:EB:FC X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:a000::/40 Signature Algorithm: sha256WithRSAEncryption bb:1e:8c:dd:4d:b4:dc:9e:cd:a8:17:56:f5:3a:74:d2:ae:b1: ad:db:a7:8d:61:1d:03:e9:8c:f3:e3:06:09:c5:8b:f4:6d:0c: dc:cf:7b:55:bc:f7:57:ca:c2:68:07:0d:8c:6e:f0:40:80:13: 37:5f:49:56:12:5a:6a:7a:b3:6a:7f:77:59:65:69:68:a2:ce: f8:08:9c:b1:b4:50:fa:20:8d:ca:51:19:bd:c3:c6:f3:89:ae: 83:36:68:7f:00:c7:75:d3:df:9c:ac:1b:32:ed:e1:23:2e:82: fd:64:3f:70:cb:31:2b:85:79:cb:c1:23:52:8f:52:5f:a2:66: 6c:07:ca:78:fc:ec:f5:b5:b2:32:d5:15:e5:f2:b9:bf:71:4a: 24:8c:a4:33:83:df:db:cc:b1:74:0e:70:53:09:d9:de:f9:26: a0:c4:3a:1f:e8:3b:32:1a:c5:ea:4b:be:57:c6:e4:e7:c9:d7: be:65:ab:3e:cf:4c:08:d4:4e:c0:d8:02:87:d4:50:4e:72:b3: 2d:96:28:70:cb:22:d8:c3:f1:ee:31:4a:e5:ab:89:3b:9b:5e: 46:fb:6a:f3:f1:27:4a:ae:0b:99:95:ff:fb:52:c7:3c:a7:dc: 60:cd:90:0c:4c:70:97:e8:02:3a:80:5c:b8:aa:79:b3:2b:e8: 38:09:6c:26 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUdRlo6HftWt6amL84GySRj9+ko8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTIwMzlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGZkYmYwZTBiMjY5NzM0NzEzYTIwMjgwNzFjZDdkYTdlZDI1M2UwZjJmZTUz ZWVkNTlkMjlkNjVlZmU4N2Y1YmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxk1KgPM+qSlC+hCibZTXRCcUG7wkHTzABT+EU1BwWsGp89qQ/XQeCB5gUh 2ilNyWS92NPStnnPLf3KKDOwqFubu9RaYkydYjCgodbgqdiyklKiLd54FtY5VRoB WINZFWcxWWkLnktyYp8IaVJIVgNt14qYY/OCsU+JjpjB8q59jmFU8yKmjBX0NpyO JjTk49aoYvdVyuubVga6uJWDRbXkuShQL85al5hzfgp1mF58jccCULof2eMdvM90 3Nk/C4tOWqolbjRxNwh0Vzj2j3XXBrZaBBmJug66gZCuP3CoX3RRn5BCClQ4jAMG bzp5mOe7evt0DX0OStacyafNpRUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSGzt27 SXHzqvoFHbBvjldNYe3r/DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTIyMTIxNTQtNDMzOS00MjkzLWIxYTgtMTVmMDY1MTlhNzA4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+g MA0GCSqGSIb3DQEBCwUAA4IBAQC7HozdTbTcns2oF1b1OnTSrrGt26eNYR0D6Yzz 4wYJxYv0bQzcz3tVvPdXysJoBw2MbvBAgBM3X0lWElpqerNqf3dZZWloos74CJyx tFD6II3KURm9w8bzia6DNmh/AMd109+crBsy7eEjLoL9ZD9wyzErhXnLwSNSj1Jf omZsB8p4/Oz1tbIy1RXl8rm/cUokjKQzg9/bzLF0DnBTCdne+SagxDof6DsyGsXq S75XxuTnyde+Zas+z0wI1E7A2AKH1FBOcrMtlihwyyLYw/HuMUrlq4k7m15G+2rz 8SdKrguZlf/7Usc8p9xgzZAMTHCX6AI6gFy4qnmzK+g4CWwm -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:27 2025 by rpki-client