This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa File: f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa (raw, json) Hash identifier: iX8V0xot1EPvbBSBt0or7+0qjxIIlz73lbHmnNUFEC4= Subject key identifier: 18:27:C7:E7:DB:8E:0B:98:08:8A:D8:A7:5A:C5:F6:5F:AF:1A:2E:ED Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5C44B5FB40653A49DEBCA3FC30023D19A11A6B47 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa Signing time: Thu 13 Nov 2025 02:00:12 +0000 ROA not before: Thu 13 Nov 2025 02:00:12 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:44:b5:fb:40:65:3a:49:de:bc:a3:fc:30:02:3d:19:a1:1a:6b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:12 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=1f560345ee552f41478afdc0ab8bc46093e727d02fd9b3f830fef0b82e2e0d77, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:c8:c5:6f:76:c7:4c:8b:07:37:97:6f:6a: ec:f8:45:c3:f9:0e:d9:2a:96:07:95:56:88:75:1a: 03:02:ba:0a:62:6d:e2:b4:18:62:36:1a:23:07:ba: 78:d2:1b:d8:a9:30:4c:7c:bc:7f:8a:aa:18:5a:fa: 03:29:d8:c7:5a:b7:96:86:d4:8c:52:b0:08:8f:c0: ee:0e:e3:7e:ac:3b:e6:fb:9f:b9:f8:d9:08:bf:46: 65:85:af:11:7b:70:7f:28:b1:d5:95:ed:47:30:57: 4a:2d:d2:ac:25:bf:f5:8c:c6:9c:15:42:04:5a:91: 9f:5e:c1:ba:60:b0:c4:f5:b4:84:30:4f:01:01:45: d1:62:18:42:2b:05:fc:26:2a:3e:4b:74:88:90:98: 85:b2:d6:5f:46:f5:f1:c9:bf:4c:54:e0:c2:ab:3f: e5:cc:88:7a:88:a6:a0:15:4a:4a:df:8f:30:d1:57: 01:1f:39:c8:fe:3e:3a:59:2f:c5:c4:09:5a:a7:61: 70:97:88:0c:09:71:d5:6a:05:8d:a2:0f:df:ef:60: a2:87:3a:ee:86:72:9b:fd:4e:5b:9e:1c:c9:b9:cd: 8e:3b:59:56:9e:42:8f:ea:15:5e:aa:bb:ec:ab:7e: ff:31:c6:60:5f:f3:68:af:16:b6:2e:d6:18:37:82: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:27:C7:E7:DB:8E:0B:98:08:8A:D8:A7:5A:C5:F6:5F:AF:1A:2E:ED X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:cc:27:1e:22:3c:83:88:df:5c:55:4b:f7:ea:9e:b5:b3:ac: 69:78:a9:9d:39:83:51:94:ae:14:0d:d0:bd:c7:00:ca:1a:69: 40:1b:de:18:4a:b5:fc:b7:42:f8:5e:4c:c3:6d:23:97:82:6a: 8f:59:22:38:14:cc:b8:5e:17:58:73:6f:91:4e:8b:72:5e:db: d2:06:d5:0a:36:1c:d0:25:2e:22:18:2b:98:9b:4e:fd:6d:34: d9:d3:28:9e:0d:25:c0:00:3c:51:d0:b6:43:80:b4:99:1d:93: 4c:40:84:ae:0d:09:2c:5a:9e:3a:ec:6b:8e:7f:ee:76:19:76: 8b:01:34:e2:7e:41:4e:9c:a8:c7:2a:f7:ce:a6:40:d3:e8:f0: 23:ca:5c:60:52:c5:c5:03:89:5a:5f:0b:94:07:97:a7:7d:bf: 10:27:b9:39:7f:1b:49:ca:1f:45:ec:4d:90:26:42:ef:13:ff: 1f:df:a9:1e:ab:60:0d:f1:b5:0e:94:c5:90:3f:5c:ef:82:2c: 5d:63:97:73:36:a2:78:98:ae:ae:d1:4d:36:53:8a:03:c4:1d: 4a:9b:b1:73:a3:1e:6e:a5:cf:7a:92:e5:19:ec:fc:53:01:99: 8b:46:59:dd:5f:c5:c5:6a:12:dd:20:a3:16:fa:a5:af:55:e2: 98:6d:4a:56 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUXES1+0BlOknevKP8MAI9GaEaa0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMTJaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQDFmNTYwMzQ1ZWU1NTJmNDE0NzhhZmRjMGFiOGJjNDYwOTNlNzI3ZDAyZmQ5 YjNmODMwZmVmMGI4MmUyZTBkNzcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0syMVvdsdMiwc3l29q7PhFw/kO2SqWB5VWiHUaAwK6CmJt4rQYYjYaIwe6 eNIb2KkwTHy8f4qqGFr6AynYx1q3lobUjFKwCI/A7g7jfqw75vufufjZCL9GZYWv EXtwfyix1ZXtRzBXSi3SrCW/9YzGnBVCBFqRn17BumCwxPW0hDBPAQFF0WIYQisF /CYqPkt0iJCYhbLWX0b18cm/TFTgwqs/5cyIeoimoBVKSt+PMNFXAR85yP4+Olkv xcQJWqdhcJeIDAlx1WoFjaIP3+9gooc67oZym/1OW54cybnNjjtZVp5Cj+oVXqq7 7Kt+/zHGYF/zaK8Wti7WGDeCYyMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQYJ8fn 244LmAiK2KdaxfZfrxou7TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZjIzMWY3YWUtN2RiZi00ZGJiLThmN2EtOTFiNDEwMzIxOGFhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HII wDANBgkqhkiG9w0BAQsFAAOCAQEAe8wnHiI8g4jfXFVL9+qetbOsaXipnTmDUZSu FA3QvccAyhppQBveGEq1/LdC+F5Mw20jl4Jqj1kiOBTMuF4XWHNvkU6Lcl7b0gbV CjYc0CUuIhgrmJtO/W002dMong0lwAA8UdC2Q4C0mR2TTECErg0JLFqeOuxrjn/u dhl2iwE04n5BTpyoxyr3zqZA0+jwI8pcYFLFxQOJWl8LlAeXp32/ECe5OX8bScof RexNkCZC7xP/H9+pHqtgDfG1DpTFkD9c74IsXWOXczaieJiurtFNNlOKA8QdSpux c6MebqXPepLlGez8UwGZi0ZZ3V/FxWoS3SCjFvqlr1XimG1KVg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:57 2025 by rpki-client