This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa File: fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa (raw, json) Hash identifier: wbI8kkMINXVBalYs942aTgaHaQJHw4Hw42/ALcl/p8A= Subject key identifier: C8:53:35:9C:BB:34:FA:97:D3:3E:BD:B1:B2:21:23:A0:7F:A1:6B:65 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0737D7A70FECA95286A92BE207E70400A5B4B74D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa Signing time: Sat 15 Nov 2025 06:11:03 +0000 ROA not before: Sat 15 Nov 2025 06:11:03 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:37:d7:a7:0f:ec:a9:52:86:a9:2b:e2:07:e7:04:00:a5:b4:b7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:11:03 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=0c99af652bc387617ad192a97f766d2a96abac91136a3f9fcb5cdab2936a328d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:45:a8:01:57:70:42:b3:3e:19:8b:30:ed: 9d:b8:40:ae:dd:03:2d:d1:02:33:6b:5a:bd:7b:c9: 17:d2:40:40:88:f3:d5:36:16:2b:66:c0:f1:ac:7c: f9:07:6e:2b:b5:1c:6d:84:ed:40:ae:66:68:d2:10: 89:d1:91:63:8a:ab:1c:ae:ea:f1:c6:76:43:d4:13: 72:73:d0:7b:b5:77:f8:a7:1f:7f:1c:ff:47:96:65: 29:77:ae:0e:5f:71:0d:39:6e:17:15:a0:a9:ee:fe: 99:39:b9:05:54:42:65:ed:46:e8:ca:7e:7b:a1:c2: a5:ee:3b:a6:cb:21:21:33:9c:a6:b7:66:5f:cf:92: 53:b2:63:e3:e5:64:3e:18:68:13:93:cd:54:39:f3: a4:a9:c9:cc:19:9c:bc:c2:d7:f5:59:83:01:a4:45: 0f:9f:ed:29:6d:d9:32:51:e6:5f:1c:27:d7:c3:ce: be:80:70:8a:ca:49:01:c4:fc:54:43:30:3c:5f:ba: d9:d3:7e:45:27:f5:70:8f:46:33:b1:31:0c:e6:5d: fd:6e:7a:94:92:1b:2d:a4:44:8a:3f:cf:31:f1:7c: b8:40:41:e5:57:b0:47:ba:d3:e3:f5:e2:28:42:5b: 71:59:d4:cf:f7:a6:04:49:e9:0b:3a:1e:a5:fb:e3: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:53:35:9C:BB:34:FA:97:D3:3E:BD:B1:B2:21:23:A0:7F:A1:6B:65 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:2080::/48 Signature Algorithm: sha256WithRSAEncryption 36:d3:95:e4:be:dc:62:75:80:54:c5:17:f5:42:0b:32:38:b1: 94:26:48:e7:0c:2f:94:93:f3:2e:d4:10:78:b9:4a:31:01:f9: 08:19:10:1b:7b:71:8d:4d:0c:27:a6:0b:ea:85:e8:d3:f9:81: 38:bc:2b:3d:d2:eb:61:29:2e:26:8c:ff:6a:b3:58:c0:62:9c: 03:fa:42:f7:7b:00:20:47:d7:70:04:f7:0f:e2:e9:79:c0:c1: e6:6f:cf:a6:8f:22:01:09:65:64:80:a9:29:ce:36:77:de:75: c0:f2:25:12:3f:8b:7a:ac:c3:19:7d:6c:4e:10:7d:c1:f5:9c: 0a:ad:3b:fd:06:b4:83:2f:de:e1:59:37:1c:5e:c6:1c:9b:d1: 87:50:06:4c:0c:d0:40:40:9a:02:51:58:2e:cf:e6:7a:63:c2: 35:87:65:a8:a9:d3:93:b1:2f:e8:1a:d7:53:99:70:d8:e4:58: e5:97:e9:78:3a:1a:c6:d5:cc:d6:19:9d:12:a3:7c:7a:fc:02: aa:03:a6:76:e0:89:d7:de:ec:e7:87:26:70:2e:a5:ff:b6:51: f7:09:37:05:b0:87:31:1b:2d:d4:a6:60:fa:c8:6f:a2:02:51: 10:64:09:e5:3a:fe:39:c4:d4:49:2d:45:58:57:53:5d:4c:83: d6:7e:01:31 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUBzfXpw/sqVKGqSviB+cEAKW0t00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjExMDNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDBjOTlhZjY1MmJjMzg3NjE3YWQxOTJhOTdmNzY2ZDJhOTZhYmFjOTExMzZh M2Y5ZmNiNWNkYWIyOTM2YTMyOGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyjRagBV3BCsz4ZizDtnbhArt0DLdECM2tavXvJF9JAQIjz1TYWK2bA8ax8 +QduK7UcbYTtQK5maNIQidGRY4qrHK7q8cZ2Q9QTcnPQe7V3+Kcffxz/R5ZlKXeu Dl9xDTluFxWgqe7+mTm5BVRCZe1G6Mp+e6HCpe47psshITOcprdmX8+SU7Jj4+Vk PhhoE5PNVDnzpKnJzBmcvMLX9VmDAaRFD5/tKW3ZMlHmXxwn18POvoBwispJAcT8 VEMwPF+62dN+RSf1cI9GM7ExDOZd/W56lJIbLaREij/PMfF8uEBB5VewR7rT4/Xi KEJbcVnUz/emBEnpCzoepfvjyDsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTIUzWc uzT6l9M+vbGyISOgf6FrZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmI5ZDQ3MTYtYmYwZi00MGU1LWJlYjEtNGVhNWVmMDFiZDFjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEg gDANBgkqhkiG9w0BAQsFAAOCAQEANtOV5L7cYnWAVMUX9UILMjixlCZI5wwvlJPz LtQQeLlKMQH5CBkQG3txjU0MJ6YL6oXo0/mBOLwrPdLrYSkuJoz/arNYwGKcA/pC 93sAIEfXcAT3D+LpecDB5m/Ppo8iAQllZICpKc42d951wPIlEj+LeqzDGX1sThB9 wfWcCq07/Qa0gy/e4Vk3HF7GHJvRh1AGTAzQQECaAlFYLs/memPCNYdlqKnTk7Ev 6BrXU5lw2ORY5ZfpeDoaxtXM1hmdEqN8evwCqgOmduCJ197s54cmcC6l/7ZR9wk3 BbCHMRst1KZg+shvogJREGQJ5Tr+OcTUSS1FWFdTXUyD1n4BMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:37 2025 by rpki-client