This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa File: e437969a-a36c-4417-88bd-c48ac88d9a5c.roa (raw, json) Hash identifier: qwQbj98igb7fgcuJO7ZEnm9PL7AAHp9dzCeHlSvQ5fU= Subject key identifier: B5:25:0B:82:73:A4:93:83:3C:0B:DF:B8:30:7C:3D:6B:2A:F6:C0:1B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 51AA2515AEFA6E74F5F748D0D46DB75FB7997B0D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa Signing time: Sat 15 Nov 2025 06:20:53 +0000 ROA not before: Sat 15 Nov 2025 06:20:53 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d038:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:aa:25:15:ae:fa:6e:74:f5:f7:48:d0:d4:6d:b7:5f:b7:99:7b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:53 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=872c92684046bbc0380465d949ecb054ac04df5ca64b69cfbad8112e55b963a9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:a0:56:5e:27:c5:a2:26:8b:d9:21:31:2e: 74:20:f7:70:14:2f:40:89:dc:77:d2:a7:36:26:16: 16:bc:56:1b:8d:5d:7f:fa:50:fd:f2:6e:7b:c7:76: ec:2b:e7:33:d9:b5:d0:b5:ba:6b:34:23:c4:c5:83: b1:35:63:9f:85:dc:3b:77:65:9a:13:91:76:5a:ba: 8c:06:c7:53:20:6e:36:e1:5d:fe:71:b2:4d:af:c5: 68:b8:c2:b4:7b:ee:68:0f:31:70:e2:9d:49:c1:44: 21:4a:b8:c7:9d:e6:f1:aa:e0:39:ee:63:1f:18:7c: fd:06:b9:f2:56:61:03:8c:23:74:8e:cf:94:3c:43: 25:fa:14:bf:97:fc:6a:53:2e:fe:da:90:6b:7b:e3: 4c:00:6e:56:c4:fc:3f:b2:8f:86:86:30:58:62:a4: 60:94:85:f5:41:5d:ca:72:9d:ad:3e:ad:73:6f:54: ab:eb:64:bf:28:69:5d:23:02:e0:d1:14:36:35:26: 4f:de:44:e8:cc:c6:19:3a:d9:0e:21:83:9a:d1:6b: 68:b1:a5:ff:7a:c9:96:89:0b:c5:33:28:fc:ef:ef: 4c:b7:57:62:9a:53:f7:36:24:5d:2b:f6:d6:23:a1: 56:20:3c:45:53:fc:34:0e:28:42:1c:dd:4e:e6:fb: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:25:0B:82:73:A4:93:83:3C:0B:DF:B8:30:7C:3D:6B:2A:F6:C0:1B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d038:b080::/48 Signature Algorithm: sha256WithRSAEncryption 33:4b:67:20:c3:3e:e1:f4:a0:78:16:5c:02:cb:85:5a:c1:7c: 3d:80:23:68:bc:44:da:b5:c5:8a:86:79:3d:6b:4a:bf:a1:a6: 43:f7:86:3f:8e:21:d0:0d:1d:59:2c:3e:73:9c:12:05:cf:f1: 57:06:77:69:23:37:50:9d:45:50:9b:b9:22:88:b4:02:b7:d4: 8c:fe:ff:c5:aa:b1:66:99:02:e8:9f:3a:cb:f9:30:b7:51:20: 81:ce:be:d9:d2:2e:32:66:fc:79:00:d1:60:f0:88:6b:b0:b3: 3d:37:5c:8e:70:56:f5:b1:43:26:f0:51:2c:b9:33:de:4f:3f: e4:30:f8:30:e9:78:d4:48:c4:7e:44:47:77:05:d9:d9:7b:ca: be:09:38:81:5b:b2:08:e5:9a:79:b4:37:a5:41:dc:b8:b4:db: 91:38:8b:a4:e8:90:a6:6e:9e:1f:67:40:8b:28:bd:d5:f9:00: 52:d6:6e:b4:62:48:fb:b9:9a:61:01:eb:eb:92:b7:4a:e7:f6: 5a:51:5b:a5:f9:a0:6e:9e:20:e4:95:61:40:c1:19:e4:77:22: 4d:30:88:d2:6f:32:9d:95:3e:68:e8:e3:f8:0f:6b:09:87:1a: 5a:b6:7d:b3:e5:ed:7e:44:f7:0f:4d:40:b8:12:61:4d:c3:70: 42:6c:b3:11 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUUaolFa76bnT190jQ1G23X7eZew0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwNTNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDg3MmM5MjY4NDA0NmJiYzAzODA0NjVkOTQ5ZWNiMDU0YWMwNGRmNWNhNjRi NjljZmJhZDgxMTJlNTViOTYzYTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyNoFZeJ8WiJovZITEudCD3cBQvQIncd9KnNiYWFrxWG41df/pQ/fJue8d2 7CvnM9m10LW6azQjxMWDsTVjn4XcO3dlmhORdlq6jAbHUyBuNuFd/nGyTa/FaLjC tHvuaA8xcOKdScFEIUq4x53m8argOe5jHxh8/Qa58lZhA4wjdI7PlDxDJfoUv5f8 alMu/tqQa3vjTABuVsT8P7KPhoYwWGKkYJSF9UFdynKdrT6tc29Uq+tkvyhpXSMC 4NEUNjUmT95E6MzGGTrZDiGDmtFraLGl/3rJlokLxTMo/O/vTLdXYppT9zYkXSv2 1iOhViA8RVP8NA4oQhzdTub7MY0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS1JQuC c6STgzwL37gwfD1rKvbAGzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTQzNzk2OWEtYTM2Yy00NDE3LTg4YmQtYzQ4YWM4OGQ5YTVjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Diw gDANBgkqhkiG9w0BAQsFAAOCAQEAM0tnIMM+4fSgeBZcAsuFWsF8PYAjaLxE2rXF ioZ5PWtKv6GmQ/eGP44h0A0dWSw+c5wSBc/xVwZ3aSM3UJ1FUJu5Ioi0ArfUjP7/ xaqxZpkC6J86y/kwt1Eggc6+2dIuMmb8eQDRYPCIa7CzPTdcjnBW9bFDJvBRLLkz 3k8/5DD4MOl41EjEfkRHdwXZ2XvKvgk4gVuyCOWaebQ3pUHcuLTbkTiLpOiQpm6e H2dAiyi91fkAUtZutGJI+7maYQHr65K3Suf2WlFbpfmgbp4g5JVhQMEZ5HciTTCI 0m8ynZU+aOjj+A9rCYcaWrZ9s+XtfkT3D01AuBJhTcNwQmyzEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:37 2025 by rpki-client