This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa File: 492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa (raw, json) Hash identifier: 0k9dmKTN4/OLtWQZyVSguPWC5smvMuwOL6HHBrtFuqM= Subject key identifier: AE:9D:B9:A4:C8:78:C4:0D:D9:A0:75:F8:7C:94:2B:72:FB:8E:A4:11 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 243ED25957E9EEC8516045D82B928EDF053F86E5 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa Signing time: Sun 23 Nov 2025 01:30:18 +0000 ROA not before: Sun 23 Nov 2025 01:30:18 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3e:d2:59:57:e9:ee:c8:51:60:45:d8:2b:92:8e:df:05:3f:86:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:18 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=1e903a8ded4ebb51ef4616217ddcb9ca3f366166b0676c457311942278efc344, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:02:64:6f:8e:25:48:f8:33:cd:1a:f0:de:b2: 57:08:dd:80:08:72:03:ed:30:76:66:6b:eb:e1:80: 34:85:f4:eb:b2:28:5d:89:9d:c6:d6:6e:8a:4d:ff: 73:26:84:4b:d4:71:12:36:bf:56:9f:87:8f:e3:ae: 9b:97:cb:53:85:dd:1d:72:c9:d0:cf:e6:81:1e:d2: 7a:35:7f:07:79:94:b8:6e:89:bd:71:14:f8:9a:21: ce:eb:b8:5f:f8:82:f1:b5:96:4d:56:e2:12:47:63: 5e:52:97:a0:79:af:90:c8:a3:e5:a3:25:ac:14:58: a8:a3:26:d8:51:ed:d9:8e:1d:84:df:a9:4b:64:39: fd:7a:8a:c5:d6:e6:95:5f:07:b5:0b:1a:74:44:95: d7:42:58:5b:2d:21:dc:d3:bf:65:65:eb:93:fc:3d: 19:96:c3:d1:1e:bd:e3:77:f3:cc:78:2c:b5:78:02: 3f:00:10:32:38:a9:55:62:d2:81:39:30:7a:f8:99: 75:93:c2:e7:c0:55:df:83:bf:9b:62:c1:1f:88:f9: 11:01:0f:4c:bf:c1:04:5d:54:81:49:13:a8:91:c9: 37:1c:fa:7b:41:42:ea:27:7a:b4:49:b0:17:ab:c2: ca:09:e1:74:e8:1b:ff:72:e3:ef:b8:9f:fd:bc:6e: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9D:B9:A4:C8:78:C4:0D:D9:A0:75:F8:7C:94:2B:72:FB:8E:A4:11 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/492df7df-ebf8-4fa1-9952-ea9391eed5cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:2080::/48 Signature Algorithm: sha256WithRSAEncryption 19:4e:98:fe:6e:2f:d7:ab:34:73:93:4d:41:7e:56:3b:61:a9: 8c:ae:b6:84:a7:74:15:bc:67:47:9d:ad:c0:09:08:8e:ab:73: 44:31:c3:35:18:c3:9b:6d:65:fd:a6:0f:99:86:c7:46:ce:aa: 7c:65:fc:67:b8:4d:22:70:19:5c:06:ff:f4:d2:53:82:37:a0: ff:c3:bd:40:a3:80:45:89:e0:85:96:11:fb:92:5a:4f:f5:bb: 09:af:f6:c1:48:81:a4:de:b5:f1:c7:d1:50:8d:65:bd:91:ac: d8:d8:5e:51:71:1d:0c:b5:e3:0f:73:2c:ca:72:23:ba:ec:00: d5:34:a7:d5:82:f3:48:80:96:39:d8:88:ae:fa:e4:8d:14:e5: 36:06:2d:df:81:27:b9:db:f8:91:ed:5d:e6:07:de:26:39:bc: 4c:f2:30:95:10:06:8f:88:8a:a4:61:36:cc:48:d0:ca:19:64: 30:56:ff:ed:29:39:af:36:e0:7a:3f:35:62:09:d9:fe:dd:72: 41:2c:8f:6d:71:dc:c8:01:3c:df:f1:cb:75:f6:88:ed:e8:ee: 62:fe:c7:8a:67:22:3d:d0:b7:d3:ac:31:4a:d0:9e:a3:8b:5c: 3e:4a:d8:9f:21:99:a7:55:87:85:ea:17:96:e9:ce:39:d0:8d: 48:64:9f:03 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUJD7SWVfp7shRYEXYK5KO3wU/huUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMThaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDFlOTAzYThkZWQ0ZWJiNTFlZjQ2MTYyMTdkZGNiOWNhM2YzNjYxNjZiMDY3 NmM0NTczMTE5NDIyNzhlZmMzNDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPQCZG+OJUj4M80a8N6yVwjdgAhyA+0wdmZr6+GANIX067IoXYmdxtZuik3/ cyaES9RxEja/Vp+Hj+Oum5fLU4XdHXLJ0M/mgR7SejV/B3mUuG6JvXEU+Johzuu4 X/iC8bWWTVbiEkdjXlKXoHmvkMij5aMlrBRYqKMm2FHt2Y4dhN+pS2Q5/XqKxdbm lV8HtQsadESV10JYWy0h3NO/ZWXrk/w9GZbD0R6943fzzHgstXgCPwAQMjipVWLS gTkweviZdZPC58BV34O/m2LBH4j5EQEPTL/BBF1UgUkTqJHJNxz6e0FC6id6tEmw F6vCygnhdOgb/3Lj77if/bxuKA0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSunbmk yHjEDdmgdfh8lCty+46kETAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDkyZGY3ZGYtZWJmOC00ZmExLTk5NTItZWE5MzkxZWVkNWNjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gog gDANBgkqhkiG9w0BAQsFAAOCAQEAGU6Y/m4v16s0c5NNQX5WO2GpjK62hKd0Fbxn R52twAkIjqtzRDHDNRjDm21l/aYPmYbHRs6qfGX8Z7hNInAZXAb/9NJTgjeg/8O9 QKOARYnghZYR+5JaT/W7Ca/2wUiBpN618cfRUI1lvZGs2NheUXEdDLXjD3MsynIj uuwA1TSn1YLzSICWOdiIrvrkjRTlNgYt34Enudv4ke1d5gfeJjm8TPIwlRAGj4iK pGE2zEjQyhlkMFb/7Sk5rzbgej81YgnZ/t1yQSyPbXHcyAE83/HLdfaI7ejuYv7H imciPdC306wxStCeo4tcPkrYnyGZp1WHheoXlunOOdCNSGSfAw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:15 2025 by rpki-client