This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa File: 9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa (raw, json) Hash identifier: 2Xqm9ZhNXc3MN1ORNMgLQO54ICxAgBgsxT7S0WwoCkA= Subject key identifier: D8:AA:EF:64:9C:41:94:03:17:1F:88:81:D3:D2:53:5E:D9:D6:E8:46 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1BC4D50EEC8A28ED80B683993C5C6368011F3A81 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa Signing time: Sat 06 Dec 2025 00:40:08 +0000 ROA not before: Sat 06 Dec 2025 00:40:08 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c4:d5:0e:ec:8a:28:ed:80:b6:83:99:3c:5c:63:68:01:1f:3a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 00:40:08 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=ff3fa3410c93bae15629145213a2132333fad960f2c26627d3e26e9bfa1bfb0c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:1f:76:b3:b5:93:b1:9a:fb:a2:2b:35:7e: 50:4d:6d:bd:62:43:9b:95:d0:80:ca:7c:89:48:92: f1:5d:ba:1a:85:d2:7c:2d:df:ad:30:35:65:7d:a8: 14:92:8d:85:ce:ab:46:16:08:e1:0d:49:26:9b:76: 31:fe:3c:86:f6:ad:79:3d:a0:64:e0:18:6e:9b:3b: 39:04:16:18:d0:b1:00:a7:bc:5d:81:77:49:cf:6a: 7c:be:94:7d:7a:bf:2d:eb:93:6a:56:b9:6d:99:82: 14:6d:97:5f:3b:8d:91:12:54:17:0c:a8:01:c2:0e: 07:33:a2:95:e8:12:0a:3d:0f:51:1d:cd:e5:9d:5a: 0c:73:21:21:7e:9e:85:5c:26:62:84:4b:e5:84:7c: 40:80:66:9e:a9:95:69:58:9d:ef:c5:64:48:51:61: fe:e9:8a:e6:22:b5:28:8c:10:ad:d2:16:eb:4a:50: 50:cc:38:9f:0a:af:e7:96:ec:02:fa:64:db:b3:50: 88:1f:0e:25:09:82:c7:95:da:20:02:52:5a:5a:48: 4b:0c:98:8f:df:20:6e:5b:32:e4:bc:41:38:4c:69: 32:b4:85:7d:7a:7e:33:32:a8:54:18:54:b9:7e:e6: b5:d8:30:62:92:45:16:a9:eb:79:e4:a3:8e:96:2c: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:EF:64:9C:41:94:03:17:1F:88:81:D3:D2:53:5E:D9:D6:E8:46 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:a000::/48 Signature Algorithm: sha256WithRSAEncryption 86:01:8f:dc:0f:06:b0:09:1c:1a:8d:ef:2d:28:81:a9:6e:df: 77:33:bd:2c:a2:b8:53:c9:48:35:a8:a7:88:20:fe:d5:11:6e: 7d:76:0b:1c:91:89:db:df:5a:79:5f:31:06:39:3a:56:a9:2c: a2:92:02:3b:86:5b:b9:5d:47:c0:f7:87:60:b0:09:18:7c:e3: 09:52:8a:f5:0c:37:db:88:7d:b7:3f:a3:e6:b1:07:2f:d6:d3: e3:e7:15:ba:c3:30:ab:4a:f9:ca:b0:12:5c:d7:70:32:cf:0a: f5:43:e7:27:4e:78:55:5a:db:bc:2c:24:ed:cd:27:f1:33:7d: 1b:b7:f5:a5:53:af:86:d3:9e:07:c2:17:1e:b5:4b:ce:33:7f: 61:cc:30:10:23:19:64:11:5b:07:55:89:12:a6:c0:bd:e0:e6: bd:fd:76:ca:b8:01:80:84:a5:7d:00:e7:17:c1:d6:35:88:96: 82:2b:9b:ad:67:7a:89:7f:87:28:42:49:5b:1c:54:ed:5a:c9: c8:db:8f:91:77:8f:98:ab:fc:ca:b0:f8:bd:a7:26:27:73:56: 32:59:9e:85:b7:f9:77:54:17:1e:a6:48:69:a4:a2:2f:18:ca: d6:9a:70:65:04:bc:6d:ae:39:b4:d0:6c:78:93:d1:00:f6:d4: 22:82:86:16 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUG8TVDuyKKO2AtoOZPFxjaAEfOoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwMDQwMDhaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGZmM2ZhMzQxMGM5M2JhZTE1NjI5MTQ1MjEzYTIxMzIzMzNmYWQ5NjBmMmMy NjYyN2QzZTI2ZTliZmExYmZiMGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlAH3aztZOxmvuiKzV+UE1tvWJDm5XQgMp8iUiS8V26GoXSfC3frTA1ZX2o FJKNhc6rRhYI4Q1JJpt2Mf48hvateT2gZOAYbps7OQQWGNCxAKe8XYF3Sc9qfL6U fXq/LeuTala5bZmCFG2XXzuNkRJUFwyoAcIOBzOilegSCj0PUR3N5Z1aDHMhIX6e hVwmYoRL5YR8QIBmnqmVaVid78VkSFFh/umK5iK1KIwQrdIW60pQUMw4nwqv55bs Avpk27NQiB8OJQmCx5XaIAJSWlpISwyYj98gblsy5LxBOExpMrSFfXp+MzKoVBhU uX7mtdgwYpJFFqnreeSjjpYsa/0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTYqu9k nEGUAxcfiIHT0lNe2dboRjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWMxYTEwY2MtNWRjOS00NGJjLWE0ZDItOTM5NmJkOWJjOTU5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Hag ADANBgkqhkiG9w0BAQsFAAOCAQEAhgGP3A8GsAkcGo3vLSiBqW7fdzO9LKK4U8lI NainiCD+1RFufXYLHJGJ299aeV8xBjk6VqksopICO4ZbuV1HwPeHYLAJGHzjCVKK 9Qw324h9tz+j5rEHL9bT4+cVusMwq0r5yrASXNdwMs8K9UPnJ054VVrbvCwk7c0n 8TN9G7f1pVOvhtOeB8IXHrVLzjN/YcwwECMZZBFbB1WJEqbAveDmvf12yrgBgISl fQDnF8HWNYiWgiubrWd6iX+HKEJJWxxU7VrJyNuPkXePmKv8yrD4vacmJ3NWMlme hbf5d1QXHqZIaaSiLxjK1ppwZQS8ba45tNBseJPRAPbUIoKGFg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:07 2025 by rpki-client