This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1d8b868-c959-421c-83d1-d5235f6ed47e.roa File: f1d8b868-c959-421c-83d1-d5235f6ed47e.roa (raw, json) Hash identifier: DW1n67Cjp49sjEa2JK4i0buSSzmaoevfPz9Wp/P34O8= Subject key identifier: 29:F5:FB:FD:35:FF:C1:44:1E:93:BD:9B:69:C4:52:21:57:C9:73:36 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 06F85E41815CD519B44B209931716FC8A59F1E03 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1d8b868-c959-421c-83d1-d5235f6ed47e.roa Signing time: Tue 18 Nov 2025 00:40:08 +0000 ROA not before: Tue 18 Nov 2025 00:40:08 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d06d:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f8:5e:41:81:5c:d5:19:b4:4b:20:99:31:71:6f:c8:a5:9f:1e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:40:08 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=36734e781cf2020a77a67372f8a528fcfc22839558ca8db1b4882dad444520f6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:b8:eb:a3:fd:ff:9a:f8:bf:12:34:31:bc: d0:36:0c:ce:5a:bd:f0:d5:e1:5c:ff:9a:92:bd:d6: cd:e8:92:7c:0e:ac:f4:14:bf:3b:9e:f5:86:dc:bc: 9f:e9:99:4b:c2:19:c9:b6:d9:18:9e:bd:1e:d2:40: b9:14:9a:d7:df:f2:1e:2b:00:b5:cc:d8:19:e2:cf: f1:77:ca:96:0b:09:9b:45:bb:a0:d7:9f:c3:ff:54: b9:d6:68:1f:33:06:b9:ba:8c:11:b5:14:f0:b2:b0: c8:0d:24:78:29:45:ca:53:e3:c2:43:cf:36:aa:1d: f0:2e:11:6f:b5:a4:2b:d8:92:47:f4:f3:eb:aa:c7: c2:b5:d8:8a:e0:95:b3:ad:2c:07:6a:44:34:d7:86: 3f:d0:00:94:73:a9:f4:ae:d5:09:4b:4f:a6:41:b2: ef:dd:aa:52:d5:4d:8d:60:33:a5:2c:ae:74:c0:76: 93:e6:99:a4:91:b1:13:37:b9:3a:e4:31:9b:dc:51: ad:42:a4:b0:c2:fc:66:1f:3b:9f:11:cf:8f:2e:eb: 18:ef:be:ec:cb:3c:81:30:ea:b9:34:3c:3d:5e:37: 7a:db:d8:a5:50:da:9c:b1:b6:ba:3a:e7:92:f3:47: 03:e8:8e:8e:23:40:d7:86:54:c0:6e:df:01:61:5f: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:FB:FD:35:FF:C1:44:1E:93:BD:9B:69:C4:52:21:57:C9:73:36 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1d8b868-c959-421c-83d1-d5235f6ed47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06d:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 29:58:24:7a:58:ea:c7:5c:fc:0f:57:a6:b3:ed:c8:31:79:2f: 6d:43:90:ee:f4:2b:99:c0:fa:ee:a3:58:82:39:69:a4:21:49: 0e:6e:65:95:83:36:ed:27:a3:47:16:e6:e3:a4:7f:c3:b6:09: 9f:8e:1c:f9:5a:29:fc:b7:98:87:7b:70:58:a3:d9:e4:0f:1d: 0b:cd:b0:d8:f0:6a:6d:0e:15:da:cf:d9:e6:29:29:b8:2b:be: ed:47:e5:cb:ea:bc:aa:b5:0e:8c:84:0e:92:fe:bf:2a:74:a1: 90:fd:f2:c5:4f:1f:3a:83:77:47:64:17:68:99:6c:c4:fe:ee: f4:c1:89:b8:28:60:e6:f8:c8:fe:9b:66:ce:33:b9:32:4b:4f: 61:45:e6:6f:41:f5:6d:e5:4c:30:db:2a:88:a7:63:1a:79:1e: 29:90:0d:d8:5f:36:3f:4d:11:15:44:b3:80:77:f8:1a:3a:a8: e9:b9:8e:a0:66:3d:84:d6:0c:9f:db:32:93:66:5a:4c:bd:fc: a5:87:26:d4:10:a0:8e:7e:a1:05:55:44:95:3d:a0:9f:ec:ed: 94:56:e0:c2:55:c3:c2:14:1a:44:c0:f6:d7:84:8c:4c:89:16: a3:94:3d:92:01:7b:a7:48:ae:55:72:d5:68:a9:a8:77:0f:d6: 09:66:85:f8 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUBvheQYFc1Rm0SyCZMXFvyKWfHgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDQwMDhaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDM2NzM0ZTc4MWNmMjAyMGE3N2E2NzM3MmY4YTUyOGZjZmMyMjgzOTU1OGNh OGRiMWI0ODgyZGFkNDQ0NTIwZjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp1uOuj/f+a+L8SNDG80DYMzlq98NXhXP+akr3WzeiSfA6s9BS/O571hty8 n+mZS8IZybbZGJ69HtJAuRSa19/yHisAtczYGeLP8XfKlgsJm0W7oNefw/9UudZo HzMGubqMEbUU8LKwyA0keClFylPjwkPPNqod8C4Rb7WkK9iSR/Tz66rHwrXYiuCV s60sB2pENNeGP9AAlHOp9K7VCUtPpkGy792qUtVNjWAzpSyudMB2k+aZpJGxEze5 OuQxm9xRrUKksML8Zh87nxHPjy7rGO++7Ms8gTDquTQ8PV43etvYpVDanLG2ujrn kvNHA+iOjiNA14ZUwG7fAWFfNc8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQp9fv9 Nf/BRB6TvZtpxFIhV8lzNjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZjFkOGI4NjgtYzk1OS00MjFjLTgzZDEtZDUyMzVmNmVkNDdlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G1g wDANBgkqhkiG9w0BAQsFAAOCAQEAKVgkeljqx1z8D1ems+3IMXkvbUOQ7vQrmcD6 7qNYgjlppCFJDm5llYM27SejRxbm46R/w7YJn44c+Vop/LeYh3twWKPZ5A8dC82w 2PBqbQ4V2s/Z5ikpuCu+7Ufly+q8qrUOjIQOkv6/KnShkP3yxU8fOoN3R2QXaJls xP7u9MGJuChg5vjI/ptmzjO5MktPYUXmb0H1beVMMNsqiKdjGnkeKZAN2F82P00R FUSzgHf4Gjqo6bmOoGY9hNYMn9syk2ZaTL38pYcm1BCgjn6hBVVElT2gn+ztlFbg wlXDwhQaRMD214SMTIkWo5Q9kgF7p0iuVXLVaKmodw/WCWaF+A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:40 2025 by rpki-client