This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fa19511-0738-48ff-a25a-e667f5ca90f8.roa File: 9fa19511-0738-48ff-a25a-e667f5ca90f8.roa (raw, json) Hash identifier: ZdmvB0YyMELGwOgPefh3MFMko9/6utGdsI6TbhA/xbQ= Subject key identifier: 63:72:28:7B:DF:BD:C9:A4:0D:22:4A:E7:EE:3E:C9:16:F8:FC:61:8B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1E7130073A357051FBF110632AE64B549AD74D92 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fa19511-0738-48ff-a25a-e667f5ca90f8.roa Signing time: Tue 11 Nov 2025 04:00:31 +0000 ROA not before: Tue 11 Nov 2025 04:00:31 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d077::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:71:30:07:3a:35:70:51:fb:f1:10:63:2a:e6:4b:54:9a:d7:4d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 11 04:00:31 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=78abe18280e0fa5a977ca9751ceb178bc16186451802ec6f10840a8f09e933dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:fb:10:d8:1e:53:54:55:48:f0:56:3e:62:2c: 0b:37:b3:d3:46:30:fd:4b:cc:7a:37:69:39:da:8c: 4b:e7:1a:83:25:25:35:9f:ee:bd:05:8d:24:29:c1: 94:d3:65:23:b1:8d:b0:32:a6:fc:12:14:ae:a9:51: 84:a8:e5:25:bb:27:1d:cb:e2:3a:48:c7:91:b7:90: 0e:b3:46:3e:32:2f:cf:4c:9b:af:ea:d6:b9:00:3b: 8d:9f:60:9e:f2:04:a1:8c:ff:7e:ad:3d:b1:d6:e4: 9d:65:75:21:de:a9:4a:13:c5:87:ac:14:91:95:ce: 83:00:65:e2:a3:fd:cd:73:52:8e:9e:a2:f2:ff:00: ff:2b:87:e1:4e:7a:44:d6:e6:9a:a8:fb:a2:bf:df: 61:c0:41:ea:09:5e:ed:56:23:ab:d6:2f:96:37:5b: 59:4f:b6:6d:0c:c8:d9:44:62:64:c0:5b:72:ec:9a: a4:47:c7:63:fd:1c:f1:da:c3:61:02:a4:e4:e3:6e: ed:aa:e1:46:05:93:4d:24:36:07:d8:b0:a3:49:f4: 85:b0:18:f1:7b:e2:64:cb:21:76:23:6e:81:70:7e: 8f:4a:5e:ca:66:79:2c:af:3b:b4:94:f8:dd:61:b2: a0:63:46:93:41:1b:c1:11:5a:5e:00:e6:4d:a6:5c: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:72:28:7B:DF:BD:C9:A4:0D:22:4A:E7:EE:3E:C9:16:F8:FC:61:8B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9fa19511-0738-48ff-a25a-e667f5ca90f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d077::/32 Signature Algorithm: sha256WithRSAEncryption a7:79:ee:7c:da:36:51:9e:c2:44:90:47:68:4f:9b:7e:f6:1a: 49:d7:97:13:4e:e1:53:24:7e:8c:ab:af:cb:56:44:59:72:87: fa:ad:33:67:12:77:5e:ea:73:25:d0:c0:96:a8:06:71:7c:58: 9c:5c:29:b7:08:d2:0f:9c:49:c2:11:eb:dc:dd:d9:d7:16:b7: 1d:3e:bf:9c:e3:6e:a3:5b:9f:01:ad:d4:1f:fe:7d:7a:df:50: 72:4f:5d:23:55:e5:0e:47:31:2e:f6:2c:ca:b3:87:65:52:cb: 93:3c:ca:ac:c9:e3:ac:b6:21:bf:ee:a0:ca:92:f0:50:5f:f1: d8:86:40:fd:c7:ad:2a:a8:13:a2:9a:64:a9:7e:ff:3d:57:1a: 85:45:de:99:4e:2f:f6:63:a0:d3:9a:4e:14:53:b8:02:5d:3a: 98:67:91:83:1b:eb:cb:92:bf:4b:7e:f9:5e:d1:5d:03:09:59: 2b:31:89:b1:98:ce:ac:f1:4d:ff:46:67:0b:2b:fe:3a:bf:ce: bb:5a:d9:c8:4f:5d:61:86:f5:fa:34:13:8c:4b:b6:e8:af:37: 60:64:0d:58:80:f5:67:8b:6f:6e:35:10:a1:fc:ef:36:fb:bf: 9e:e1:92:61:0f:1c:f8:9e:f2:cf:81:74:0e:3f:2e:a0:cc:33: f7:e7:23:84 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUHnEwBzo1cFH78RBjKuZLVJrXTZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTEwNDAwMzFaFw0yNTEyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDc4YWJlMTgyODBlMGZhNWE5NzdjYTk3NTFjZWIxNzhiYzE2MTg2NDUxODAy ZWM2ZjEwODQwYThmMDllOTMzZGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPr7ENgeU1RVSPBWPmIsCzez00Yw/UvMejdpOdqMS+cagyUlNZ/uvQWNJCnB lNNlI7GNsDKm/BIUrqlRhKjlJbsnHcviOkjHkbeQDrNGPjIvz0ybr+rWuQA7jZ9g nvIEoYz/fq09sdbknWV1Id6pShPFh6wUkZXOgwBl4qP9zXNSjp6i8v8A/yuH4U56 RNbmmqj7or/fYcBB6gle7VYjq9YvljdbWU+2bQzI2URiZMBbcuyapEfHY/0c8drD YQKk5ONu7arhRgWTTSQ2B9iwo0n0hbAY8XviZMshdiNugXB+j0peymZ5LK87tJT4 3WGyoGNGk0EbwRFaXgDmTaZc5FsCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBRjcih7 373JpA0iSufuPskW+PxhizAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWZhMTk1MTEtMDczOC00OGZmLWEyNWEtZTY2N2Y1Y2E5MGY4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Hcw DQYJKoZIhvcNAQELBQADggEBAKd57nzaNlGewkSQR2hPm372GknXlxNO4VMkfoyr r8tWRFlyh/qtM2cSd17qcyXQwJaoBnF8WJxcKbcI0g+cScIR69zd2dcWtx0+v5zj bqNbnwGt1B/+fXrfUHJPXSNV5Q5HMS72LMqzh2VSy5M8yqzJ46y2Ib/uoMqS8FBf 8diGQP3HrSqoE6KaZKl+/z1XGoVF3plOL/ZjoNOaThRTuAJdOphnkYMb68uSv0t+ +V7RXQMJWSsxibGYzqzxTf9GZwsr/jq/zrta2chPXWGG9fo0E4xLtuivN2BkDViA 9WeLb241EKH87zb7v57hkmEPHPie8s+BdA4/LqDMM/fnI4Q= -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:55 2025 by rpki-client