This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa File: 275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa (raw, json) Hash identifier: qPRjf5w7IrjC1upMhI0gHXfzjBL878UBwO+2MBXhOCI= Subject key identifier: D6:0C:47:63:5A:01:E8:97:26:64:39:74:AA:8E:98:95:E4:DD:DA:48 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3C60C894B0DFEC2DE9A1EDF96C6F11BB80DA794D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa Signing time: Sun 23 Nov 2025 01:31:01 +0000 ROA not before: Sun 23 Nov 2025 01:31:01 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:60:c8:94:b0:df:ec:2d:e9:a1:ed:f9:6c:6f:11:bb:80:da:79:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:31:01 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=69763324d6d504e3a033b3ae360c99f5cf7bfecf5c974fe8e4e8536056a4f516, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5f:c5:31:6b:15:2e:bc:db:89:37:19:38:7a: 0d:5e:c4:b0:39:27:68:3a:bd:49:df:61:ce:4e:9f: 84:4c:06:45:e5:78:32:54:47:96:20:59:80:e9:be: fc:06:6d:d5:01:9d:04:56:f6:e4:e8:7a:a7:fa:9e: fc:d6:67:20:d1:aa:8a:e0:b6:90:8d:32:55:f6:ca: c5:54:32:e5:1c:eb:93:be:fe:bf:ef:23:86:e0:25: c1:a9:6b:a3:03:b0:ce:c0:ee:79:bb:5d:5b:bd:26: f2:54:7c:5d:99:03:f8:71:5d:5b:5f:18:e2:3e:d9: a6:f5:aa:b5:13:97:ca:bb:95:2a:bf:03:e9:03:46: e2:26:44:61:cb:6f:03:de:e6:03:ad:fa:62:df:1b: 37:42:4c:84:16:c1:74:8b:e8:72:8c:3d:f5:13:00: 1b:68:e4:5e:ef:28:ac:e0:99:b6:71:4a:1e:07:68: 08:36:b1:d9:d4:46:98:52:1b:ca:99:be:51:40:e4: f7:ae:51:7e:71:68:fb:1e:02:ad:3f:0b:e4:33:dc: 53:68:e0:50:1e:d8:e7:7a:28:60:08:bf:ef:ef:72: b5:46:5f:82:b2:ec:a2:d2:0c:03:6a:ed:4c:98:59: 8a:ce:eb:a9:90:bb:8f:b1:1d:ba:03:ef:9d:95:08: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0C:47:63:5A:01:E8:97:26:64:39:74:AA:8E:98:95:E4:DD:DA:48 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:4040::/48 Signature Algorithm: sha256WithRSAEncryption 60:fa:0c:33:8b:23:af:1d:66:17:83:d5:b2:23:25:65:63:93: 23:e0:ce:78:9d:6c:51:21:17:be:0f:a5:cd:58:73:10:22:f4: aa:ae:cd:d3:6d:57:a0:d1:24:77:91:6c:02:5a:aa:10:39:15: 92:72:80:c0:6f:24:c0:6d:f7:90:33:91:2b:c2:0e:3e:7f:ee: bc:05:92:5e:d6:6e:fc:01:04:39:a9:55:92:a0:67:62:29:43: a5:e7:ac:5c:16:f2:d3:5c:15:0d:c3:7b:53:b7:d2:8c:cb:ac: b0:4d:b7:fe:e3:fc:a9:be:18:5a:16:1a:a4:bf:5a:2a:de:90: 7d:57:94:cb:c0:36:48:18:1d:89:8b:04:33:c5:7b:1a:86:1e: af:4b:31:78:e7:25:19:67:d3:dd:1d:20:46:4f:5f:54:cc:ce: 42:c9:90:9e:33:34:07:24:66:40:38:07:d1:8b:74:d8:21:0e: a7:b7:1c:29:53:8e:be:f8:20:34:8d:fa:30:cd:49:56:d6:c8: a8:54:6e:3f:6c:dd:00:2b:6e:38:71:90:89:bf:c7:5c:2e:26: d9:fd:fb:ba:ec:4b:02:1d:2c:f9:d6:e1:71:1b:be:d4:e9:ea: 35:6f:d4:02:55:b9:20:40:8e:92:78:9b:47:68:3e:30:ff:dd: ed:d1:b4:6d -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUPGDIlLDf7C3poe35bG8Ru4DaeU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMxMDFaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDY5NzYzMzI0ZDZkNTA0ZTNhMDMzYjNhZTM2MGM5OWY1Y2Y3YmZlY2Y1Yzk3 NGZlOGU0ZTg1MzYwNTZhNGY1MTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO1fxTFrFS6824k3GTh6DV7EsDknaDq9Sd9hzk6fhEwGReV4MlRHliBZgOm+ /AZt1QGdBFb25Oh6p/qe/NZnINGqiuC2kI0yVfbKxVQy5Rzrk77+v+8jhuAlwalr owOwzsDuebtdW70m8lR8XZkD+HFdW18Y4j7ZpvWqtROXyruVKr8D6QNG4iZEYctv A97mA636Yt8bN0JMhBbBdIvocow99RMAG2jkXu8orOCZtnFKHgdoCDax2dRGmFIb ypm+UUDk965RfnFo+x4CrT8L5DPcU2jgUB7Y53ooYAi/7+9ytUZfgrLsotIMA2rt TJhZis7rqZC7j7EdugPvnZUIVTUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTWDEdj WgHolyZkOXSqjpiV5N3aSDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Mjc1YjVhY2ItYWYxYi00NWMxLThkMmMtZWU4NGUxNzA2OWMxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA QDANBgkqhkiG9w0BAQsFAAOCAQEAYPoMM4sjrx1mF4PVsiMlZWOTI+DOeJ1sUSEX vg+lzVhzECL0qq7N021XoNEkd5FsAlqqEDkVknKAwG8kwG33kDORK8IOPn/uvAWS XtZu/AEEOalVkqBnYilDpeesXBby01wVDcN7U7fSjMussE23/uP8qb4YWhYapL9a Kt6QfVeUy8A2SBgdiYsEM8V7GoYer0sxeOclGWfT3R0gRk9fVMzOQsmQnjM0ByRm QDgH0Yt02CEOp7ccKVOOvvggNI36MM1JVtbIqFRuP2zdACtuOHGQib/HXC4m2f37 uuxLAh0s+dbhcRu+1OnqNW/UAlW5IECOknibR2g+MP/d7dG0bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:24 2025 by rpki-client