This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa File: 8c18535d-3e9d-4891-b30b-4807af4b80f1.roa (raw, json) Hash identifier: BLKM9Gqf2PmzM0zH7fuAH5AzHCc0QQ0jXTw29PV0rr4= Subject key identifier: 82:ED:13:79:FB:AE:CE:70:A7:5A:4C:CC:C0:86:6C:8F:12:08:30:B5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 566F2901359837994BDFFB2CB4E4C6C576FC2FA0 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa Signing time: Sat 06 Dec 2025 04:00:38 +0000 ROA not before: Sat 06 Dec 2025 04:00:38 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06c:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6f:29:01:35:98:37:99:4b:df:fb:2c:b4:e4:c6:c5:76:fc:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=9a9a929572c80d3380b3f9d492edddc6380c9ba5f2de18913981694393c3d25a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:5b:64:b8:44:9c:04:84:d7:de:36:cf:5f: 74:48:ec:6d:e4:f7:66:9d:c1:35:7f:2d:04:3d:67: d9:dd:5d:70:fd:e8:41:07:e9:9a:5e:9e:95:e9:12: 09:60:c2:c6:75:e6:4c:b9:a3:84:03:84:7b:29:7d: 5a:3c:db:10:89:b1:a7:69:17:66:cd:bc:e6:70:fa: 67:6f:cf:10:0e:5d:29:c3:d4:54:4e:f4:37:5a:a5: ae:0b:25:b3:50:ac:88:00:d6:d4:12:48:37:80:24: 9f:34:a7:d4:81:e9:52:3c:0a:97:aa:9c:82:33:52: a2:5d:bd:1f:29:c2:d9:01:ec:e4:08:03:48:aa:71: 6c:a8:9f:e7:c9:d9:c2:2d:2a:a0:53:34:60:74:c8: f4:0d:64:72:ea:cc:07:f2:a9:be:e9:8a:a9:8f:29: 4e:96:c0:2c:30:43:92:21:79:ff:52:6f:46:3c:95: f1:af:52:c7:37:57:e3:b9:e2:dc:0a:75:11:b7:be: 3a:f3:12:8e:2f:24:e6:f1:65:4d:4e:c2:bc:c3:5f: 60:25:83:59:71:55:ce:db:4d:59:79:53:91:a5:6c: 5d:b8:f4:eb:7e:0f:89:6d:fa:1a:95:56:6d:c0:86: e6:15:13:21:4d:02:e9:19:99:14:90:c7:ba:44:16: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:ED:13:79:FB:AE:CE:70:A7:5A:4C:CC:C0:86:6C:8F:12:08:30:B5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06c:5000::/48 Signature Algorithm: sha256WithRSAEncryption 1d:9b:f0:56:94:89:77:0f:46:28:a6:28:da:e1:ea:8a:c9:90: 0a:3f:89:19:1d:8d:85:a4:ee:08:11:95:01:31:5a:ad:94:ff: 08:07:5d:c7:05:b6:b8:6b:90:64:ad:ae:52:41:79:4e:05:42: a0:0f:f7:b7:38:53:d1:ca:29:19:64:4b:d2:35:14:bd:94:a9: 96:b1:bb:fd:a9:62:52:80:e7:f6:6b:43:36:e8:5a:91:83:81: 7f:85:b7:96:75:98:98:80:9e:63:bd:13:b1:2b:57:a8:6a:be: af:b6:51:9b:6f:74:ba:bf:80:db:69:47:9c:03:6b:5a:9e:3b: 1d:4e:6e:0c:86:b2:bf:5b:69:5b:bc:f2:36:0d:14:b3:96:62: 98:40:c9:34:09:89:37:a4:a4:98:8c:c2:4c:5d:3e:49:7a:b6: f9:97:49:dd:e8:e3:f9:89:75:4c:3b:13:4a:08:1e:44:bb:d9: 68:aa:a8:1a:c0:8b:25:46:df:b3:a7:1e:91:78:06:7c:c0:d5: ec:db:93:19:60:1c:78:f7:21:70:ce:ed:d8:4e:11:31:1e:79: 46:d3:9f:cc:ba:34:b2:3c:aa:82:80:2d:7a:72:f9:d1:b2:ea: 3b:93:cf:f2:82:54:42:62:fb:17:3b:70:22:46:0d:cd:a3:00: 9c:6f:2d:e1 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUVm8pATWYN5lL3/sstOTGxXb8L6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMzhaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDlhOWE5Mjk1NzJjODBkMzM4MGIzZjlkNDkyZWRkZGM2MzgwYzliYTVmMmRl MTg5MTM5ODE2OTQzOTNjM2QyNWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBhW2S4RJwEhNfeNs9fdEjsbeT3Zp3BNX8tBD1n2d1dcP3oQQfpml6elekS CWDCxnXmTLmjhAOEeyl9WjzbEImxp2kXZs285nD6Z2/PEA5dKcPUVE70N1qlrgsl s1CsiADW1BJIN4AknzSn1IHpUjwKl6qcgjNSol29HynC2QHs5AgDSKpxbKif58nZ wi0qoFM0YHTI9A1kcurMB/KpvumKqY8pTpbALDBDkiF5/1JvRjyV8a9SxzdX47ni 3Ap1Ebe+OvMSji8k5vFlTU7CvMNfYCWDWXFVzttNWXlTkaVsXbj0634PiW36GpVW bcCG5hUTIU0C6RmZFJDHukQWmf8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSC7RN5 +67OcKdaTMzAhmyPEggwtTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OGMxODUzNWQtM2U5ZC00ODkxLWIzMGItNDgwN2FmNGI4MGYxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GxQ ADANBgkqhkiG9w0BAQsFAAOCAQEAHZvwVpSJdw9GKKYo2uHqismQCj+JGR2NhaTu CBGVATFarZT/CAddxwW2uGuQZK2uUkF5TgVCoA/3tzhT0copGWRL0jUUvZSplrG7 /aliUoDn9mtDNuhakYOBf4W3lnWYmICeY70TsStXqGq+r7ZRm290ur+A22lHnANr Wp47HU5uDIayv1tpW7zyNg0Us5ZimEDJNAmJN6SkmIzCTF0+SXq2+ZdJ3ejj+Yl1 TDsTSggeRLvZaKqoGsCLJUbfs6cekXgGfMDV7NuTGWAcePchcM7t2E4RMR55RtOf zLo0sjyqgoAtenL50bLqO5PP8oJUQmL7FztwIkYNzaMAnG8t4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:25 2025 by rpki-client