This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa File: 2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa (raw, json) Hash identifier: gVVrY1szg59fVI/dF7ax49Kcgz7KGvKs7nwJ0P/PknU= Subject key identifier: 08:62:9E:EE:2C:FE:7E:ED:C7:88:F6:03:9D:E8:D8:06:6C:93:EC:23 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6E7AEEC72CA3F37EDEEC4F0E078CED0B9B3ED9E9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa Signing time: Tue 18 Nov 2025 00:30:12 +0000 ROA not before: Tue 18 Nov 2025 00:30:12 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d06d:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7a:ee:c7:2c:a3:f3:7e:de:ec:4f:0e:07:8c:ed:0b:9b:3e:d9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:30:12 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=553e822ee0bd6e60b49cfaf534bf88b1f5e3b19178c549b6d16894f56b7397aa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:e8:be:98:d8:bd:47:79:b2:30:4b:5b:78: f7:4d:68:2f:2a:6d:15:97:a4:e8:d4:28:71:c2:b7: 41:a3:1d:18:6c:a3:c2:cf:bb:e8:5e:a0:02:17:66: 1d:ab:27:37:c8:eb:fb:ad:db:b0:ad:5b:3c:89:95: f5:57:bc:e3:95:5e:f6:ed:df:43:04:89:a3:29:32: b0:62:c8:22:51:ab:a3:62:d9:d3:98:b3:ff:b4:c0: bf:dc:ed:50:bd:a1:4f:71:66:db:f3:b7:d4:9a:cf: 84:24:79:9b:97:79:ae:b3:a7:00:c1:4d:27:52:fc: db:e2:9b:37:16:d6:49:7e:b8:88:22:76:16:af:bf: ef:07:6d:2f:20:80:ee:1a:c7:5f:b4:25:a2:7e:5e: ec:20:fd:d8:48:ad:85:0e:cc:1a:55:25:1a:00:53: 6b:3a:c7:2b:e8:8d:90:de:64:ee:46:e8:03:b8:29: 2c:43:6a:52:32:00:90:42:08:9a:cb:1e:16:7c:6d: 90:86:dd:19:10:29:83:df:f0:fc:9e:6d:65:06:30: d6:7d:37:34:a5:0d:d5:aa:52:01:b1:d0:2c:c7:ef: 9e:40:27:d9:fa:19:dd:a7:eb:18:e4:c2:69:0d:ae: 2b:3f:01:da:cb:6a:82:ef:01:6a:bc:3c:11:49:60: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:62:9E:EE:2C:FE:7E:ED:C7:88:F6:03:9D:E8:D8:06:6C:93:EC:23 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06d:6040::/48 Signature Algorithm: sha256WithRSAEncryption 69:5b:49:cc:e1:43:7e:17:d4:b8:c2:c9:29:51:a1:c2:0a:43: d5:d1:23:72:1d:6e:bd:d3:a8:b2:fc:b8:87:e9:6b:f8:64:82: 98:83:da:fe:97:1a:84:50:80:e5:31:6a:83:b2:ba:2c:e9:06: a7:b3:77:fd:54:aa:1a:32:c5:7b:53:34:21:56:79:33:69:85: 86:c3:88:a7:4a:39:36:9d:d7:dc:fa:55:6a:de:6d:62:7d:fc: 52:3d:15:fd:0d:3d:38:e0:8b:a8:c2:85:44:2d:ef:e3:63:36: 2d:61:3a:82:2a:18:ff:2d:39:de:a2:ae:fc:4f:66:db:be:3d: f2:03:8f:48:cf:55:48:9b:58:f1:39:ad:60:fb:73:65:d5:6e: f9:f3:76:12:72:44:0d:fd:9f:2e:93:a9:ce:cd:b9:6e:57:a5: 3a:54:82:cf:3d:ca:2b:56:7d:36:42:4a:68:0a:d0:f0:eb:83: 0f:eb:94:dd:8a:26:05:4d:f3:29:e4:ec:a3:5d:eb:c0:72:36: 91:1f:96:1f:3e:ed:99:c0:41:89:ce:d8:24:b5:0f:8a:1d:3c: 5f:37:f9:d7:a7:d5:61:26:fa:10:d0:d9:eb:6b:3f:ed:9d:2c: 18:47:05:4e:5d:04:17:e2:1f:62:7a:51:32:d4:c0:5b:ef:6d: 30:f1:69:d1 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUbnruxyyj837e7E8OB4ztC5s+2ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDMwMTJaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDU1M2U4MjJlZTBiZDZlNjBiNDljZmFmNTM0YmY4OGIxZjVlM2IxOTE3OGM1 NDliNmQxNjg5NGY1NmI3Mzk3YWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsk6L6Y2L1HebIwS1t4901oLyptFZek6NQoccK3QaMdGGyjws+76F6gAhdm HasnN8jr+63bsK1bPImV9Ve845Ve9u3fQwSJoykysGLIIlGro2LZ05iz/7TAv9zt UL2hT3Fm2/O31JrPhCR5m5d5rrOnAMFNJ1L82+KbNxbWSX64iCJ2Fq+/7wdtLyCA 7hrHX7Qlon5e7CD92EithQ7MGlUlGgBTazrHK+iNkN5k7kboA7gpLENqUjIAkEII msseFnxtkIbdGRApg9/w/J5tZQYw1n03NKUN1apSAbHQLMfvnkAn2foZ3afrGOTC aQ2uKz8B2stqgu8Barw8EUlgIb8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQIYp7u LP5+7ceI9gOd6NgGbJPsIzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmU0OWExYTItZGM0Yy00MGM0LTljN2UtZjQxYzkzN2ZmYjYxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G1g QDANBgkqhkiG9w0BAQsFAAOCAQEAaVtJzOFDfhfUuMLJKVGhwgpD1dEjch1uvdOo svy4h+lr+GSCmIPa/pcahFCA5TFqg7K6LOkGp7N3/VSqGjLFe1M0IVZ5M2mFhsOI p0o5Np3X3PpVat5tYn38Uj0V/Q09OOCLqMKFRC3v42M2LWE6gioY/y053qKu/E9m 27498gOPSM9VSJtY8TmtYPtzZdVu+fN2EnJEDf2fLpOpzs25blelOlSCzz3KK1Z9 NkJKaArQ8OuDD+uU3YomBU3zKeTso13rwHI2kR+WHz7tmcBBic7YJLUPih08Xzf5 16fVYSb6ENDZ62s/7Z0sGEcFTl0EF+IfYnpRMtTAW+9tMPFp0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:06 2025 by rpki-client