This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa File: 60c499a8-e470-4a76-9095-20d8554a426a.roa (raw, json) Hash identifier: su6kQV4yUxA7pzbTzejPFQdIit+Jj30NTSgyyyXkhoM= Subject key identifier: B9:A3:0C:68:6C:6C:BE:B5:9C:27:78:F9:DD:41:54:34:1A:B5:4F:53 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4C6000CFA719383FB599427AB7A8BA6A9383E525 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa Signing time: Sat 15 Nov 2025 06:20:36 +0000 ROA not before: Sat 15 Nov 2025 06:20:36 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d018:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:60:00:cf:a7:19:38:3f:b5:99:42:7a:b7:a8:ba:6a:93:83:e5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:36 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=6141708ece86ddccb969e3530ce54e8baa8c300fe57e5f75177da62261cb5fc3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:f1:d2:5e:17:fd:96:ee:c5:bb:46:8d:7a: 7e:14:5c:11:0f:46:9f:b9:d0:b5:23:7e:2b:d9:b7: 4d:a2:b1:67:2d:a9:e6:92:f6:b2:df:61:7c:c1:e3: dc:70:be:81:9e:59:44:1d:ef:62:26:f8:83:12:b4: 71:b3:f8:86:b2:ec:01:3f:24:4a:13:cb:d7:2e:f2: 17:8f:94:19:60:20:59:b4:fe:83:e4:15:4b:3f:4c: cf:c5:50:0c:e9:e1:d8:ca:38:6c:b5:15:1d:ea:90: 17:fa:33:cc:e5:35:22:a0:ae:13:b4:90:d8:ce:e1: c4:32:5b:d2:c4:00:a5:da:5d:3c:54:54:b7:f6:e4: de:cb:a5:ce:e5:09:e7:e5:20:46:30:ce:2e:4a:b1: 29:7e:1b:3d:97:d2:25:0e:64:cd:9f:72:60:49:3f: 58:a7:c7:8c:3a:14:51:7d:95:93:a9:88:4d:e4:39: b8:aa:4a:52:7a:7e:84:a5:e8:aa:a3:fc:d0:39:90: da:35:74:c5:fa:f5:a1:74:73:9a:1e:35:4f:77:33: f8:df:fc:83:ff:8b:c8:e6:1c:2f:8e:4a:18:f6:eb: 87:b9:44:41:5f:1d:67:09:a0:30:b8:f3:dd:a1:9b: db:dc:44:87:46:c7:cc:c6:4d:89:18:a7:42:9f:cc: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:0C:68:6C:6C:BE:B5:9C:27:78:F9:DD:41:54:34:1A:B5:4F:53 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d018:c00::/38 Signature Algorithm: sha256WithRSAEncryption bb:3e:32:16:c6:ac:54:f7:d7:18:08:1e:27:78:46:de:c0:b2: 6a:65:b1:21:76:f3:bd:4b:8f:cb:3b:1d:f4:5c:4c:80:b5:bf: 4d:16:60:68:37:06:05:40:f5:33:8d:ed:3c:8b:8c:db:ec:f0: 91:53:fb:21:72:e5:6f:f1:8c:7c:38:4a:46:ca:65:92:f2:97: bf:42:8b:3a:68:09:5f:8d:40:9e:0e:6f:a0:67:17:af:72:39: 3d:43:1f:6a:2f:c6:73:75:91:62:ba:12:8e:e5:a1:35:7e:86: 4f:bf:5a:fb:18:1a:85:a1:e8:9d:99:3e:78:c4:39:b8:83:c9: 35:bf:2f:3f:f6:14:dd:bc:98:18:85:90:a4:a3:54:fd:8f:12: 6d:a3:a9:9c:3d:19:3f:9f:d2:61:f2:9e:8a:2a:35:42:e2:09: a6:87:4f:73:df:50:dd:a3:31:f6:82:2b:05:0c:f6:c5:64:65: 49:d8:eb:f6:8e:7e:38:e8:b1:13:28:7d:20:2e:bd:9e:37:10: bd:45:ff:24:f7:9a:b1:e1:07:73:1a:97:9e:c1:52:57:08:98: 96:91:91:54:83:e1:ed:21:7c:2a:5e:93:61:b7:a7:22:d1:e5: 09:d3:2e:f2:fc:7d:64:34:bc:4b:e4:28:05:f8:3d:ee:70:15: c2:7f:84:b5 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUTGAAz6cZOD+1mUJ6t6i6apOD5SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwMzZaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDYxNDE3MDhlY2U4NmRkY2NiOTY5ZTM1MzBjZTU0ZThiYWE4YzMwMGZlNTdl NWY3NTE3N2RhNjIyNjFjYjVmYzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoL8dJeF/2W7sW7Ro16fhRcEQ9Gn7nQtSN+K9m3TaKxZy2p5pL2st9hfMHj 3HC+gZ5ZRB3vYib4gxK0cbP4hrLsAT8kShPL1y7yF4+UGWAgWbT+g+QVSz9Mz8VQ DOnh2Mo4bLUVHeqQF/ozzOU1IqCuE7SQ2M7hxDJb0sQApdpdPFRUt/bk3sulzuUJ 5+UgRjDOLkqxKX4bPZfSJQ5kzZ9yYEk/WKfHjDoUUX2Vk6mITeQ5uKpKUnp+hKXo qqP80DmQ2jV0xfr1oXRzmh41T3cz+N/8g/+LyOYcL45KGPbrh7lEQV8dZwmgMLjz 3aGb29xEh0bHzMZNiRinQp/MsWMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS5owxo bGy+tZwnePndQVQ0GrVPUzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NjBjNDk5YTgtZTQ3MC00YTc2LTkwOTUtMjBkODU1NGE0MjZhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BgM MA0GCSqGSIb3DQEBCwUAA4IBAQC7PjIWxqxU99cYCB4neEbewLJqZbEhdvO9S4/L Ox30XEyAtb9NFmBoNwYFQPUzje08i4zb7PCRU/shcuVv8Yx8OEpGymWS8pe/Qos6 aAlfjUCeDm+gZxevcjk9Qx9qL8ZzdZFiuhKO5aE1foZPv1r7GBqFoeidmT54xDm4 g8k1vy8/9hTdvJgYhZCko1T9jxJto6mcPRk/n9Jh8p6KKjVC4gmmh09z31DdozH2 gisFDPbFZGVJ2Ov2jn446LETKH0gLr2eNxC9Rf8k95qx4QdzGpeewVJXCJiWkZFU g+HtIXwqXpNht6ci0eUJ0y7y/H1kNLxL5CgF+D3ucBXCf4S1 -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:33 2025 by rpki-client