This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa File: bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa (raw, json) Hash identifier: +aU1fwfuOn4SAWAK07Jrd+7VBhtAo00F98jmV/WvnHE= Subject key identifier: 04:B6:07:4E:E5:94:70:95:3F:53:06:60:13:13:26:5B:C0:D9:AB:45 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1DA552B2AEA6FB16A67BBD384631D1E629F36E08 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa Signing time: Wed 10 Dec 2025 06:21:27 +0000 ROA not before: Wed 10 Dec 2025 06:21:27 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07e:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a5:52:b2:ae:a6:fb:16:a6:7b:bd:38:46:31:d1:e6:29:f3:6e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:21:27 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=df8aeda8bb48b95e29337df4d8a72c080c1f9c333e28e07922370c5cd27a46cb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:95:6b:b9:ef:37:c9:ba:2d:13:d6:a2:9d: 64:fa:39:da:c9:69:20:df:b3:5c:eb:e4:41:2e:de: 19:d0:db:f7:1f:db:75:8a:f9:61:84:99:ee:13:cd: f8:f8:f0:dd:ca:ad:70:c6:69:cf:13:9d:f1:cc:69: 85:f4:0e:5c:16:fd:53:62:bb:90:32:9d:51:1c:eb: b3:46:38:e0:f1:e5:e6:bf:22:96:b8:12:08:a0:6a: 81:bd:1c:27:1a:a2:cd:f7:0a:fe:72:b9:6d:84:65: c2:8e:12:7b:58:c8:5d:de:0d:b1:36:cf:3c:14:77: 87:40:14:2d:4e:4a:28:82:11:5f:69:75:f6:ef:84: b6:7c:aa:94:68:9d:61:aa:d6:a9:a7:86:57:c5:65: 05:da:3d:78:2d:2e:dd:f1:9f:9a:64:59:2b:41:f2: d3:cb:29:46:aa:37:70:f6:f4:18:68:2d:8a:84:74: db:b9:bb:17:df:4c:f4:1d:d8:9a:23:e1:47:03:5d: cc:c4:d7:ee:0d:86:1d:a1:0c:f7:48:b7:e7:60:42: 65:e2:48:2d:47:a1:a1:b3:d6:4c:45:1c:03:47:17: 03:5c:c1:1a:42:61:dd:80:82:96:c9:db:a7:65:b6: 90:e4:62:d7:08:3f:51:f7:34:d2:66:86:3e:b3:26: a4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B6:07:4E:E5:94:70:95:3F:53:06:60:13:13:26:5B:C0:D9:AB:45 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07e:4000::/40 Signature Algorithm: sha256WithRSAEncryption 85:20:8e:4b:77:d5:71:6a:ee:d1:1b:8e:93:54:ab:88:93:9d: d6:47:48:be:58:d0:d6:75:75:ca:a4:da:bf:c2:88:2e:a2:06: 71:ce:cd:bf:fe:27:b7:fa:77:02:4c:d2:1b:ff:67:da:ed:1d: de:cc:54:07:27:e5:c9:f4:1d:13:b7:a2:79:6d:cd:e4:64:ec: 5e:6b:e4:09:2a:9e:3a:7e:ef:dd:2a:bf:1b:7f:e6:67:ce:0a: f9:e2:7d:e7:0e:54:81:84:76:57:b8:0d:0a:05:4a:74:fe:0c: 83:53:83:7f:ad:62:bb:ec:c2:66:f1:b0:73:b2:62:80:7b:9f: 74:0a:5f:55:a1:03:e0:e3:b1:99:11:80:ba:1d:c3:b8:4d:e6: 4f:b7:49:61:ac:9c:5c:40:15:20:1e:09:31:55:d7:45:df:3b: 8c:27:66:be:bd:8b:62:31:1e:3b:20:49:0b:70:02:bf:30:ca: 00:59:e7:2a:ca:68:ad:0a:1e:05:8e:2f:d3:67:af:ad:89:5c: b5:33:32:f0:22:58:d5:21:a6:6c:c6:09:2e:6b:d1:d8:b4:17: fd:2e:66:6f:70:5b:5a:a8:af:94:e0:e5:ed:9a:49:7f:3b:e7: 3e:55:76:bb:26:d4:6d:3e:db:d2:27:08:28:bc:79:88:28:27: 40:0e:b7:7a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUHaVSsq6m+xame704RjHR5inzbggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIxMjdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGRmOGFlZGE4YmI0OGI5NWUyOTMzN2RmNGQ4YTcyYzA4MGMxZjljMzMzZTI4 ZTA3OTIyMzcwYzVjZDI3YTQ2Y2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9jlWu57zfJui0T1qKdZPo52slpIN+zXOvkQS7eGdDb9x/bdYr5YYSZ7hPN +Pjw3cqtcMZpzxOd8cxphfQOXBb9U2K7kDKdURzrs0Y44PHl5r8ilrgSCKBqgb0c JxqizfcK/nK5bYRlwo4Se1jIXd4NsTbPPBR3h0AULU5KKIIRX2l19u+EtnyqlGid YarWqaeGV8VlBdo9eC0u3fGfmmRZK0Hy08spRqo3cPb0GGgtioR027m7F99M9B3Y miPhRwNdzMTX7g2GHaEM90i352BCZeJILUehobPWTEUcA0cXA1zBGkJh3YCClsnb p2W2kORi1wg/Ufc00maGPrMmpKMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQEtgdO 5ZRwlT9TBmATEyZbwNmrRTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmIyMTcxMGEtYTM3YS00NDc2LWFiNmItM2QwNzllOWQxY2M5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H5A MA0GCSqGSIb3DQEBCwUAA4IBAQCFII5Ld9Vxau7RG46TVKuIk53WR0i+WNDWdXXK pNq/woguogZxzs2//ie3+ncCTNIb/2fa7R3ezFQHJ+XJ9B0Tt6J5bc3kZOxea+QJ Kp46fu/dKr8bf+Znzgr54n3nDlSBhHZXuA0KBUp0/gyDU4N/rWK77MJm8bBzsmKA e590Cl9VoQPg47GZEYC6HcO4TeZPt0lhrJxcQBUgHgkxVddF3zuMJ2a+vYtiMR47 IEkLcAK/MMoAWecqymitCh4Fji/TZ6+tiVy1MzLwIljVIaZsxgkua9HYtBf9LmZv cFtaqK+U4OXtmkl/O+c+VXa7JtRtPtvSJwgovHmIKCdADrd6 -----END CERTIFICATE-----Generated at Mon Dec 15 19:48:56 2025 by rpki-client