This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa File: be610cc2-170e-494b-b1f3-db73bc5ff027.roa (raw, json) Hash identifier: Y0QnMtBmLgIaHG9c5+g1CmRIWEfqYmyGlYXGZl9TZhM= Subject key identifier: 5C:C1:B5:E0:D0:50:0B:07:98:3B:02:49:64:3C:09:E6:48:33:82:5C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1D9AEB36FB39CC62356A1A258C0C0D0E733E5710 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa Signing time: Wed 10 Dec 2025 06:10:09 +0000 ROA not before: Wed 10 Dec 2025 06:10:09 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9a:eb:36:fb:39:cc:62:35:6a:1a:25:8c:0c:0d:0e:73:3e:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:10:09 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=81e4cb80109be43e81cfa3e1a1e26a1372e417d40bf7ec41a29f2071a55a2ab8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:e0:65:60:90:91:75:e4:21:b8:c7:2a:21: 44:80:7e:25:12:48:3f:f9:b4:e7:8b:59:b8:1c:76: 49:e6:0c:c6:e1:54:a5:b7:e5:26:57:d0:dc:c6:30: 79:45:58:c9:fa:ca:52:e3:6f:62:fc:aa:56:cf:62: 38:ff:14:61:51:38:cd:a0:80:d9:c8:11:51:8d:85: 97:d0:c5:0e:e0:70:df:17:26:46:0c:c0:0b:5b:f8: a6:ef:08:d6:5d:8c:ac:dd:41:2c:9b:4a:a2:06:af: 4d:3c:d8:c7:d7:19:56:2c:c7:78:7d:fd:f1:4d:c3: fd:44:b7:da:f8:ed:fd:b1:b4:21:98:66:dc:6a:07: 4a:59:11:58:3d:ca:38:6d:85:3a:86:67:39:01:11: 53:87:c8:4a:b5:3b:84:9a:39:fc:b7:cd:6f:84:13: ef:16:15:6d:85:78:0a:63:73:52:4d:1b:c6:3d:68: e4:fb:0d:5f:fb:df:f8:3d:41:57:8e:ce:87:a5:5f: a7:18:ce:e0:73:44:54:b8:c1:a7:0e:de:39:b9:99: 47:30:a6:32:24:33:47:21:cd:df:92:84:8b:ab:26: 43:6d:ca:fd:5c:48:04:25:f0:ab:79:60:6f:a4:18: 13:78:f8:da:1a:b5:c4:24:ba:4a:d9:17:d5:b0:51: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C1:B5:E0:D0:50:0B:07:98:3B:02:49:64:3C:09:E6:48:33:82:5C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:6080::/48 Signature Algorithm: sha256WithRSAEncryption 66:74:9c:32:18:4f:5f:22:cb:a9:eb:5a:c3:ed:9a:13:ca:ae: 23:bc:4e:53:9a:d0:9b:f4:bb:c3:61:e0:40:49:d2:76:c9:62: c3:6a:e4:c2:b0:73:8b:27:e9:57:11:ee:e0:62:da:31:b5:ad: 88:f7:99:b1:fe:50:0b:76:d6:fd:03:f4:b9:b8:05:0a:b7:75: 0d:3c:db:36:ef:bb:66:96:ce:37:95:4b:81:a4:e2:06:d1:1c: f5:5c:28:b1:c3:3d:93:e6:6a:88:a6:b8:d4:55:22:59:e3:59: a3:cf:b4:06:32:12:0d:0d:5d:3b:b7:ae:ab:ab:01:d0:53:db: f3:69:5f:7d:ba:ef:ec:24:b6:49:8b:48:ee:ad:5a:f2:99:01: c8:ba:89:f1:d7:5e:b3:f9:aa:82:34:a9:32:e6:f3:c0:83:31: e6:71:1b:a9:d1:fb:f7:6e:c2:69:9b:fa:63:4e:6e:72:40:ce: 7b:b8:e2:90:da:ee:8a:46:cc:69:69:31:5f:39:e0:ff:26:b8: 4e:dc:92:97:38:bc:3a:83:d2:40:bb:2c:d1:a7:9e:9f:bb:b7: 75:a2:9c:c7:58:d9:37:8e:8a:b5:d2:52:31:0d:be:4e:8e:d2: ab:2f:29:7f:0c:6a:7c:07:d3:c2:39:f4:7a:3d:eb:d8:ea:52: 5d:39:9a:7b -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUHZrrNvs5zGI1aholjAwNDnM+VxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjEwMDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDgxZTRjYjgwMTA5YmU0M2U4MWNmYTNlMWExZTI2YTEzNzJlNDE3ZDQwYmY3 ZWM0MWEyOWYyMDcxYTU1YTJhYjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANb44GVgkJF15CG4xyohRIB+JRJIP/m054tZuBx2SeYMxuFUpbflJlfQ3MYw eUVYyfrKUuNvYvyqVs9iOP8UYVE4zaCA2cgRUY2Fl9DFDuBw3xcmRgzAC1v4pu8I 1l2MrN1BLJtKogavTTzYx9cZVizHeH398U3D/US32vjt/bG0IZhm3GoHSlkRWD3K OG2FOoZnOQERU4fISrU7hJo5/LfNb4QT7xYVbYV4CmNzUk0bxj1o5PsNX/vf+D1B V47Oh6VfpxjO4HNEVLjBpw7eObmZRzCmMiQzRyHN35KEi6smQ23K/VxIBCXwq3lg b6QYE3j42hq1xCS6StkX1bBR878CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRcwbXg 0FALB5g7AklkPAnmSDOCXDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmU2MTBjYzItMTcwZS00OTRiLWIxZjMtZGI3M2JjNWZmMDI3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9g gDANBgkqhkiG9w0BAQsFAAOCAQEAZnScMhhPXyLLqetaw+2aE8quI7xOU5rQm/S7 w2HgQEnSdsliw2rkwrBziyfpVxHu4GLaMbWtiPeZsf5QC3bW/QP0ubgFCrd1DTzb Nu+7ZpbON5VLgaTiBtEc9VwoscM9k+ZqiKa41FUiWeNZo8+0BjISDQ1dO7euq6sB 0FPb82lffbrv7CS2SYtI7q1a8pkByLqJ8ddes/mqgjSpMubzwIMx5nEbqdH7927C aZv6Y05uckDOe7jikNruikbMaWkxXzng/ya4TtySlzi8OoPSQLss0aeen7u3daKc x1jZN46KtdJSMQ2+To7Sqy8pfwxqfAfTwjn0ej3r2OpSXTmaew== -----END CERTIFICATE-----Generated at Mon Dec 15 15:29:10 2025 by rpki-client