This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c003c5ac-b21f-4a15-a460-19115830800b.roa File: c003c5ac-b21f-4a15-a460-19115830800b.roa (raw, json) Hash identifier: 4PrvSqs0WD8ByIzxsROHHZ6gKBdREj+cOGtgV0QE3eQ= Subject key identifier: 86:A1:86:AF:D4:8B:BB:E6:EC:89:66:50:5E:7B:73:F0:73:70:0A:C5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 313FC8B6C0D6AA1EE672573F95808099A71B8EF7 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c003c5ac-b21f-4a15-a460-19115830800b.roa Signing time: Sun 23 Nov 2025 01:30:32 +0000 ROA not before: Sun 23 Nov 2025 01:30:32 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3f:c8:b6:c0:d6:aa:1e:e6:72:57:3f:95:80:80:99:a7:1b:8e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:32 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=defaba6dacc2e0db010da664ff2e3345b2e2b1821551f57da6732f6c17aa38a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:d4:58:e0:d6:f3:54:e7:6f:46:ba:33:cf: 50:57:fe:2d:6c:e4:51:e9:32:d7:f6:62:ae:a8:47: 62:e7:31:4c:ee:66:16:9f:b2:6e:6a:f7:e2:14:f2: b6:5c:19:0c:bc:bc:54:43:8f:b2:fa:08:d9:60:d3: 85:c8:ca:f9:1c:ec:ea:6c:fc:b6:98:6b:9c:16:5c: 3a:16:2d:02:69:27:d0:0b:77:81:18:8c:dc:75:8b: c3:f1:3b:97:55:a4:9b:30:fc:47:35:6d:af:f6:66: 5b:4a:45:f5:03:bb:df:9f:4d:61:ac:b7:a8:56:d3: d8:78:15:43:76:56:8c:c6:c0:ff:41:24:c1:43:8a: 3a:41:fd:a5:29:bc:40:40:04:98:a3:42:c2:0c:3d: cd:ee:8d:d5:a5:92:51:dc:b2:8c:c1:ca:50:2b:dd: 6a:04:c1:04:92:96:5a:5e:34:90:a6:7a:17:11:75: 2d:d9:04:33:a3:fe:98:c1:80:9c:f9:9c:87:c0:f8: af:5b:7c:59:9d:9b:7e:33:2f:6b:a2:e9:3e:5d:31: ef:a7:8d:03:a7:b0:eb:1f:72:1e:3b:1d:ec:80:53: b7:89:fd:12:94:66:dc:99:9a:5b:33:f5:bb:43:41: d2:24:8d:15:0e:20:5b:5a:f2:a6:ec:42:bb:25:1e: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A1:86:AF:D4:8B:BB:E6:EC:89:66:50:5E:7B:73:F0:73:70:0A:C5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c003c5ac-b21f-4a15-a460-19115830800b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:b000::/40 Signature Algorithm: sha256WithRSAEncryption 71:9c:fb:99:74:84:e2:a6:84:6b:ff:f1:0f:94:84:86:f4:ba: 5c:a8:30:82:f9:82:89:bd:29:75:2b:b7:a8:15:c6:df:1f:bf: 47:2d:b6:b3:62:93:5e:ce:4f:aa:83:50:0d:ab:1e:8c:50:d7: b2:26:da:12:a4:af:3f:d6:47:5e:1d:f1:0d:b7:39:ce:4f:c0: e1:bf:f7:c0:f8:71:44:33:7a:be:05:e5:61:b4:e8:26:4d:b7: 70:b5:3d:5a:be:b4:a2:2a:17:71:6d:6f:ea:74:e1:0a:64:67: 08:4f:36:37:ac:f6:f2:f2:00:38:30:8f:e5:29:13:8d:79:c3: 92:bb:4d:4b:7b:22:7a:ac:95:33:83:f1:b7:fe:5b:85:58:7b: 11:a6:12:21:1c:23:c3:3c:53:0c:a9:64:82:b0:f8:bd:0a:75: 4c:3b:7c:5f:54:01:1b:7c:78:a1:a5:58:73:d2:fb:b8:8c:08: 50:95:10:99:a9:23:b6:d1:e6:44:c0:fd:ab:e8:2f:4d:cc:1a: 3d:e2:d5:3b:91:18:c1:5a:21:f9:a4:62:37:2c:9b:87:e8:35: ee:75:29:9e:b5:0d:6b:97:41:c6:49:81:aa:f4:a1:4c:d5:73: 8f:ae:fe:ab:6f:50:03:d6:28:82:2b:a4:9f:39:88:c3:83:08: 22:a2:78:cf -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUMT/ItsDWqh7mclc/lYCAmacbjvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMzJaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGRlZmFiYTZkYWNjMmUwZGIwMTBkYTY2NGZmMmUzMzQ1YjJlMmIxODIxNTUx ZjU3ZGE2NzMyZjZjMTdhYTM4YTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI4p1Fjg1vNU529GujPPUFf+LWzkUeky1/ZirqhHYucxTO5mFp+ybmr34hTy tlwZDLy8VEOPsvoI2WDThcjK+Rzs6mz8tphrnBZcOhYtAmkn0At3gRiM3HWLw/E7 l1WkmzD8RzVtr/ZmW0pF9QO7359NYay3qFbT2HgVQ3ZWjMbA/0EkwUOKOkH9pSm8 QEAEmKNCwgw9ze6N1aWSUdyyjMHKUCvdagTBBJKWWl40kKZ6FxF1LdkEM6P+mMGA nPmch8D4r1t8WZ2bfjMva6LpPl0x76eNA6ew6x9yHjsd7IBTt4n9EpRm3JmaWzP1 u0NB0iSNFQ4gW1rypuxCuyUeymsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSGoYav 1Iu75uyJZlBee3Pwc3AKxTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzAwM2M1YWMtYjIxZi00YTE1LWE0NjAtMTkxMTU4MzA4MDBiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gqw MA0GCSqGSIb3DQEBCwUAA4IBAQBxnPuZdITipoRr//EPlISG9LpcqDCC+YKJvSl1 K7eoFcbfH79HLbazYpNezk+qg1ANqx6MUNeyJtoSpK8/1kdeHfENtznOT8Dhv/fA +HFEM3q+BeVhtOgmTbdwtT1avrSiKhdxbW/qdOEKZGcITzY3rPby8gA4MI/lKRON ecOSu01LeyJ6rJUzg/G3/luFWHsRphIhHCPDPFMMqWSCsPi9CnVMO3xfVAEbfHih pVhz0vu4jAhQlRCZqSO20eZEwP2r6C9NzBo94tU7kRjBWiH5pGI3LJuH6DXudSme tQ1rl0HGSYGq9KFM1XOPrv6rb1AD1iiCK6SfOYjDgwgionjP -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:24 2025 by rpki-client