This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa File: 2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa (raw, json) Hash identifier: gBTVFX2rpBrTIBQ9jzmHqQW05Bs/FuITkn1oS2BoY7w= Subject key identifier: 5F:CF:B3:FC:0F:4F:2E:38:E5:77:74:E0:8E:2C:20:C5:C3:2F:73:33 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6F0F2E5FD8D98DD955580E699D7489210A76799C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa Signing time: Sat 06 Dec 2025 04:00:36 +0000 ROA not before: Sat 06 Dec 2025 04:00:36 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06c:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0f:2e:5f:d8:d9:8d:d9:55:58:0e:69:9d:74:89:21:0a:76:79:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=d78ab9ea30f11a9d726be6d2cf512d3a7093789aa61a933943bfc5407cece4d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:4b:81:37:e6:2d:ca:ae:47:50:42:56:2e: 1c:81:47:34:ef:7a:a1:a1:a6:9f:10:6a:34:cd:29: 24:b1:cf:77:6e:cf:11:a5:94:88:27:3a:d4:64:eb: d1:43:68:f2:b7:85:78:e9:6f:4a:4f:b8:b5:27:28: 67:4f:af:69:bc:8c:a4:2d:0f:90:2c:c7:ef:c6:1d: 45:72:5a:4b:03:f0:e2:d0:4d:65:29:a2:9f:ae:5e: 73:12:24:03:21:00:63:8b:3d:71:33:e7:86:87:1d: 8d:4c:0b:58:2a:d8:e0:66:0e:fb:5b:1f:da:90:65: e4:65:95:13:40:f8:ca:00:eb:69:46:74:43:99:9a: a8:7a:9c:9b:a9:b1:6c:01:dd:58:e5:fc:dc:fe:ed: c3:a1:27:ce:4c:db:ba:c4:6a:3d:00:e5:59:fe:36: 06:e9:ec:b1:0c:87:93:19:0d:cf:79:0f:aa:3b:97: 44:cb:a5:e8:fb:b6:44:5a:f2:48:fb:9f:8c:3f:7f: e4:3f:5b:1e:83:10:e7:36:42:98:9a:b9:cb:09:70: 46:6b:15:76:e2:74:26:f8:fe:8a:1f:b9:3a:53:4b: ce:e9:ec:f2:a4:6c:e7:ce:51:e2:59:e3:05:c5:ba: b1:d0:b8:f1:ff:90:20:1e:3f:b1:8e:b8:17:09:d9: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CF:B3:FC:0F:4F:2E:38:E5:77:74:E0:8E:2C:20:C5:C3:2F:73:33 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c5bb9d6-7f51-42ab-8ae2-9776ef047d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06c:b000::/48 Signature Algorithm: sha256WithRSAEncryption b6:f9:08:af:d4:b2:83:8e:7b:d9:9d:46:84:39:bb:83:cb:8d: 12:03:2c:08:58:e4:6b:82:f7:ab:a5:99:58:39:26:19:0f:c3: 69:f6:94:07:14:70:c3:4a:6c:41:67:af:37:17:c3:42:21:49: a8:b7:8c:39:5d:c7:61:f2:53:e6:ce:34:ee:ca:f3:c2:3b:68: 95:b6:57:c3:83:62:44:26:27:20:98:22:78:a4:46:64:49:7d: 69:89:e2:61:84:f1:ff:a9:12:0e:c7:4f:d2:2d:82:91:31:af: a5:6f:27:ca:c6:4f:8c:89:00:a4:0e:cf:f5:29:e6:cf:74:4b: dc:aa:0c:87:e3:6b:a4:4d:54:3a:03:ad:30:31:d6:c3:7a:c9: ed:d9:03:32:9e:85:a3:f8:c0:98:44:08:84:fb:49:7c:0f:77: 7b:49:78:56:c2:8c:27:fc:84:67:ac:5c:8a:6c:30:c7:40:ed: f9:ae:a7:41:42:eb:0a:70:39:8b:04:66:ae:f4:c6:13:8b:8f: eb:a1:d6:2f:3c:d3:3b:c6:f4:4e:8a:52:23:5a:72:e2:6b:35: 2e:fd:cf:1c:32:54:f2:49:d8:57:03:f1:be:4c:95:53:33:4b: e6:b3:cf:69:bf:3e:d7:35:91:ec:87:7e:0d:c6:78:14:38:61: 79:02:b1:79 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUbw8uX9jZjdlVWA5pnXSJIQp2eZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMzZaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGQ3OGFiOWVhMzBmMTFhOWQ3MjZiZTZkMmNmNTEyZDNhNzA5Mzc4OWFhNjFh OTMzOTQzYmZjNTQwN2NlY2U0ZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANc5S4E35i3KrkdQQlYuHIFHNO96oaGmnxBqNM0pJLHPd27PEaWUiCc61GTr 0UNo8reFeOlvSk+4tScoZ0+vabyMpC0PkCzH78YdRXJaSwPw4tBNZSmin65ecxIk AyEAY4s9cTPnhocdjUwLWCrY4GYO+1sf2pBl5GWVE0D4ygDraUZ0Q5maqHqcm6mx bAHdWOX83P7tw6EnzkzbusRqPQDlWf42BunssQyHkxkNz3kPqjuXRMul6Pu2RFry SPufjD9/5D9bHoMQ5zZCmJq5ywlwRmsVduJ0Jvj+ih+5OlNLzuns8qRs585R4lnj BcW6sdC48f+QIB4/sY64FwnZ5+0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRfz7P8 D08uOOV3dOCOLCDFwy9zMzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmM1YmI5ZDYtN2Y1MS00MmFiLThhZTItOTc3NmVmMDQ3ZDgxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gyw ADANBgkqhkiG9w0BAQsFAAOCAQEAtvkIr9Syg4572Z1GhDm7g8uNEgMsCFjka4L3 q6WZWDkmGQ/DafaUBxRww0psQWevNxfDQiFJqLeMOV3HYfJT5s407srzwjtolbZX w4NiRCYnIJgieKRGZEl9aYniYYTx/6kSDsdP0i2CkTGvpW8nysZPjIkApA7P9Snm z3RL3KoMh+NrpE1UOgOtMDHWw3rJ7dkDMp6Fo/jAmEQIhPtJfA93e0l4VsKMJ/yE Z6xcimwwx0Dt+a6nQULrCnA5iwRmrvTGE4uP66HWLzzTO8b0TopSI1py4ms1Lv3P HDJU8knYVwPxvkyVUzNL5rPPab8+1zWR7Id+DcZ4FDhheQKxeQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:35:51 2025 by rpki-client