This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa File: 2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa (raw, json) Hash identifier: 9NlqVQGNGpzr/1bHh5H7hN4gKUmNI3j04U1Bfux1Amw= Subject key identifier: E9:C9:C5:05:07:B6:B3:1D:DA:FD:13:B6:90:99:28:6A:C3:16:FF:D5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 53D8A50275CC3749F64BAD2CD390D70624E4F5C6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa Signing time: Sun 23 Nov 2025 01:31:02 +0000 ROA not before: Sun 23 Nov 2025 01:31:02 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d8:a5:02:75:cc:37:49:f6:4b:ad:2c:d3:90:d7:06:24:e4:f5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:31:02 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=84744e798d77a059422f6e9656c595fd52036cfb9ab189d166a9f0b6f6cfa14b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:57:47:88:e3:4e:b4:b7:56:02:af:a1:ed: a6:df:04:1f:86:58:7c:af:18:0d:20:6c:d8:66:d5: 47:a7:63:61:05:c6:b9:1b:58:d4:ec:3d:28:5c:c5: ea:81:b8:a7:0f:1a:43:d5:7c:1b:d7:e0:45:f1:5d: 1e:6d:24:6f:4d:13:df:04:ae:b8:9f:73:d6:2e:a2: 4c:ee:0e:46:17:23:95:ac:0a:90:dc:01:30:d7:7f: d0:ac:1b:66:5f:05:53:da:7b:16:c7:15:56:0f:d7: a7:5c:e5:21:07:06:b4:3e:6d:9a:bb:63:35:cb:15: 3f:02:bc:65:c0:db:80:30:9e:fa:11:ce:30:e4:98: f7:3e:90:46:88:99:4c:56:13:a8:32:f6:68:8f:a5: 8c:2d:08:2a:84:eb:09:c8:ae:87:51:be:94:93:d5: 70:b6:b7:04:46:49:fb:8b:7a:59:5b:1f:93:08:63: 4c:45:16:50:0a:f6:96:6c:8b:bb:65:6b:ce:8d:f2: f6:09:28:f1:82:d9:f8:c5:11:4a:0e:da:bf:a0:65: 47:a2:4f:bb:e6:60:bf:93:12:18:3c:71:d3:ce:f9: ed:43:21:40:22:1b:57:fe:54:3f:c6:ca:40:b9:5e: 7b:a5:3d:e7:68:ce:ef:e5:69:f1:a2:ca:71:ef:2c: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C9:C5:05:07:B6:B3:1D:DA:FD:13:B6:90:99:28:6A:C3:16:FF:D5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6be02d-a1d0-4623-9c4b-9cec8272e2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:8080::/48 Signature Algorithm: sha256WithRSAEncryption a7:69:97:22:77:56:71:d0:23:e3:c7:f7:ff:81:2f:7a:f6:22: 3d:e8:2a:1d:75:ab:00:d9:6d:64:0e:c2:05:c9:84:69:78:fb: 8e:8b:1b:04:99:bb:22:6a:30:1c:3a:41:5e:41:41:85:ab:b5: 47:43:53:07:3b:4f:ec:02:31:a1:46:e3:b4:3e:fc:54:58:54: 7b:2c:3f:1b:d5:cf:af:bb:a6:0b:5a:e1:89:73:87:48:a8:92: 3e:1d:f1:ea:fc:46:e1:2c:da:07:27:9d:ac:c6:3d:d4:2e:31: 3e:cb:69:b8:13:5e:c2:10:23:27:8f:72:9f:07:19:c1:ab:3f: 4c:fa:fb:76:7d:29:2e:a3:c3:05:ed:96:48:e5:82:da:ec:88: a7:84:f8:68:b5:09:f1:f0:cf:cd:2e:93:d2:28:de:c4:d3:1a: 53:7e:ed:20:b4:bd:c0:30:8f:1b:3f:e3:6c:6c:b5:bc:90:75: c4:4e:32:00:f5:10:98:17:75:2c:7a:36:4d:8d:1d:38:2a:da: a9:75:74:31:0b:49:84:49:ba:34:47:4a:fc:f5:29:c2:8f:91: 1d:e5:89:0f:01:3a:95:af:a8:33:60:55:da:e4:a7:16:ec:75: 28:3a:e1:fb:62:c1:64:4a:96:2f:f5:c5:33:a1:d3:ec:b4:3f: b9:32:72:62 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUU9ilAnXMN0n2S60s05DXBiTk9cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMxMDJaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDg0NzQ0ZTc5OGQ3N2EwNTk0MjJmNmU5NjU2YzU5NWZkNTIwMzZjZmI5YWIx ODlkMTY2YTlmMGI2ZjZjZmExNGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOgV0eI4060t1YCr6Htpt8EH4ZYfK8YDSBs2GbVR6djYQXGuRtY1Ow9KFzF 6oG4pw8aQ9V8G9fgRfFdHm0kb00T3wSuuJ9z1i6iTO4ORhcjlawKkNwBMNd/0Kwb Zl8FU9p7FscVVg/Xp1zlIQcGtD5tmrtjNcsVPwK8ZcDbgDCe+hHOMOSY9z6QRoiZ TFYTqDL2aI+ljC0IKoTrCciuh1G+lJPVcLa3BEZJ+4t6WVsfkwhjTEUWUAr2lmyL u2Vrzo3y9gko8YLZ+MURSg7av6BlR6JPu+Zgv5MSGDxx08757UMhQCIbV/5UP8bK QLlee6U952jO7+Vp8aLKce8s+NMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTpycUF B7azHdr9E7aQmShqwxb/1TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmM2YmUwMmQtYTFkMC00NjIzLTljNGItOWNlYzgyNzJlMmQ3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GqA gDANBgkqhkiG9w0BAQsFAAOCAQEAp2mXIndWcdAj48f3/4EvevYiPegqHXWrANlt ZA7CBcmEaXj7josbBJm7ImowHDpBXkFBhau1R0NTBztP7AIxoUbjtD78VFhUeyw/ G9XPr7umC1rhiXOHSKiSPh3x6vxG4SzaByedrMY91C4xPstpuBNewhAjJ49ynwcZ was/TPr7dn0pLqPDBe2WSOWC2uyIp4T4aLUJ8fDPzS6T0ijexNMaU37tILS9wDCP Gz/jbGy1vJB1xE4yAPUQmBd1LHo2TY0dOCraqXV0MQtJhEm6NEdK/PUpwo+RHeWJ DwE6la+oM2BV2uSnFux1KDrh+2LBZEqWL/XFM6HT7LQ/uTJyYg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:07 2025 by rpki-client