This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa File: e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa (raw, json) Hash identifier: iYry3afndrI7xsDCuAF46XBE1CP6AHaiV6ME0zAYt8g= Subject key identifier: F1:14:7F:07:A6:3C:26:08:89:F7:10:D0:4E:EA:49:D9:FC:A9:CA:CD Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1ADCDF6F1ED5CD4CFA35A7A0D1F226F08C503C1C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa Signing time: Sat 29 Nov 2025 03:00:24 +0000 ROA not before: Sat 29 Nov 2025 03:00:24 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d074:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:dc:df:6f:1e:d5:cd:4c:fa:35:a7:a0:d1:f2:26:f0:8c:50:3c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:24 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=2eb11a1bf29d14d4104ff00dff1696aab8e69528d3247df3e9c804de01c5d832, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:38:a0:2f:4f:fc:fa:27:1d:1a:00:5a:f5: 1e:f0:92:3e:e4:fd:62:6f:ff:bb:a9:6c:45:ad:56: 04:26:09:ba:ad:76:1b:92:8f:00:62:fa:39:38:1c: 94:36:fb:5a:bf:0b:cb:b4:4d:26:aa:1d:c9:77:9c: 0d:43:38:ba:d9:04:b4:8d:95:c3:8a:e4:0b:55:47: 24:12:84:6e:a3:6d:3c:27:36:d6:b9:03:b7:46:87: 17:7b:8a:70:e9:9a:ee:43:8e:1a:10:1f:48:e2:8c: 7c:b2:b7:01:ed:e5:6d:37:ae:c1:f7:27:d5:1b:b5: 62:e1:f3:d1:5a:da:46:5a:67:4d:61:63:cf:f1:25: 16:85:84:50:b7:05:15:30:f6:9b:01:8b:96:f8:ab: 26:c0:e9:3d:41:7f:39:15:a9:dc:15:de:d8:06:eb: 56:40:39:bd:bc:b6:6c:ee:76:9d:bb:17:d7:91:eb: 38:62:46:f1:1c:dd:a1:49:27:d5:5e:fc:86:3c:13: 11:d3:52:9d:77:9e:e8:76:ef:09:b3:6c:91:3c:77: fd:5a:da:81:04:e3:f5:0f:5a:46:dc:7f:e8:d5:45: 54:89:d8:df:ad:45:76:b2:e0:47:fd:ce:3b:4c:35: 20:26:ef:3e:6f:62:47:2c:92:b5:77:00:6a:85:ac: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:7F:07:A6:3C:26:08:89:F7:10:D0:4E:EA:49:D9:FC:A9:CA:CD X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e8feef1e-9058-4b34-a7f2-24e5e044fea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d074:e000::/40 Signature Algorithm: sha256WithRSAEncryption 2a:e6:95:28:30:f7:9d:42:e1:b4:51:9f:bc:9d:d0:17:cc:5e: be:4f:92:b8:7c:a8:fd:ab:87:74:61:cd:ce:2f:61:a2:25:de: 8b:bd:fe:e9:9e:a5:b1:62:91:7d:67:7a:fa:5b:c4:01:02:69: c8:28:56:13:a3:bb:47:d7:43:6f:96:ed:5e:9c:53:13:c5:6e: c9:87:07:3a:c0:69:ee:89:3f:cc:a6:1b:da:1e:31:c9:fe:91: ce:2b:48:42:a1:cf:38:6c:54:65:29:1e:c6:a3:90:1e:e2:01: 47:83:e2:82:e4:2b:5e:ea:d9:b3:6b:f4:d9:b4:8a:a4:90:0b: f1:42:61:98:a2:7f:10:e8:6a:22:dc:13:d1:7c:d1:4a:66:c7: 44:05:83:3b:98:92:d5:4e:a1:53:a6:62:77:59:c8:5e:0f:32: d1:46:d9:29:08:39:1d:71:f5:d4:d6:6b:40:53:a5:1b:52:fe: 3f:46:be:fd:df:73:2c:ac:24:97:a6:fd:8c:2e:3f:fa:5b:52: 50:7d:4b:11:6c:7e:70:3b:53:e6:9a:a1:7c:63:56:3f:c1:54: 5d:18:a1:7c:dd:26:db:c5:7e:e2:bf:06:58:0f:2a:b6:55:3d: 95:18:6c:aa:30:e5:b7:eb:2f:d5:fd:22:76:69:40:4d:3f:38: c6:d6:84:3d -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUGtzfbx7VzUz6Naeg0fIm8IxQPBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMjRaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDJlYjExYTFiZjI5ZDE0ZDQxMDRmZjAwZGZmMTY5NmFhYjhlNjk1MjhkMzI0 N2RmM2U5YzgwNGRlMDFjNWQ4MzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVbOKAvT/z6Jx0aAFr1HvCSPuT9Ym//u6lsRa1WBCYJuq12G5KPAGL6OTgc lDb7Wr8Ly7RNJqodyXecDUM4utkEtI2Vw4rkC1VHJBKEbqNtPCc21rkDt0aHF3uK cOma7kOOGhAfSOKMfLK3Ae3lbTeuwfcn1Ru1YuHz0VraRlpnTWFjz/ElFoWEULcF FTD2mwGLlvirJsDpPUF/ORWp3BXe2AbrVkA5vby2bO52nbsX15HrOGJG8RzdoUkn 1V78hjwTEdNSnXee6HbvCbNskTx3/VragQTj9Q9aRtx/6NVFVInY361FdrLgR/3O O0w1ICbvPm9iRyyStXcAaoWsq8MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTxFH8H pjwmCIn3ENBO6knZ/KnKzTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZThmZWVmMWUtOTA1OC00YjM0LWE3ZjItMjRlNWUwNDRmZWEyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HTg MA0GCSqGSIb3DQEBCwUAA4IBAQAq5pUoMPedQuG0UZ+8ndAXzF6+T5K4fKj9q4d0 Yc3OL2GiJd6Lvf7pnqWxYpF9Z3r6W8QBAmnIKFYTo7tH10Nvlu1enFMTxW7Jhwc6 wGnuiT/MphvaHjHJ/pHOK0hCoc84bFRlKR7Go5Ae4gFHg+KC5Cte6tmza/TZtIqk kAvxQmGYon8Q6Goi3BPRfNFKZsdEBYM7mJLVTqFTpmJ3WcheDzLRRtkpCDkdcfXU 1mtAU6UbUv4/Rr7933MsrCSXpv2MLj/6W1JQfUsRbH5wO1PmmqF8Y1Y/wVRdGKF8 3SbbxX7ivwZYDyq2VT2VGGyqMOW36y/V/SJ2aUBNPzjG1oQ9 -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:05 2025 by rpki-client