This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa File: c0520c80-698f-4538-b32e-e9663caeb979.roa (raw, json) Hash identifier: rqfXSiaSbggxqZb3sBkEty9X6USxdf9XD+3ue75uy7g= Subject key identifier: DC:3C:50:18:B1:5A:4E:50:EA:76:AE:A9:DA:A2:2C:E7:F8:37:4D:9D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4BB198D2ED608A8BA4B193725CA5BEC7BBF2E3FF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa Signing time: Wed 10 Dec 2025 06:00:10 +0000 ROA not before: Wed 10 Dec 2025 06:00:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b1:98:d2:ed:60:8a:8b:a4:b1:93:72:5c:a5:be:c7:bb:f2:e3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:00:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=5cf10c0e43afb0771e6820af809d20a693bf7c61bc5b3b0aeeb368155bc5f986, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:be:1c:f8:cc:0d:33:5c:b1:3e:02:30:ca: 02:db:6e:22:fd:fd:38:77:35:ab:f2:af:0d:64:4a: 7e:03:4c:da:9f:d1:8f:d2:bc:2b:42:ac:f4:d9:74: b3:fc:86:02:de:80:48:06:b1:8e:af:21:b5:36:53: 3f:6a:f7:09:6f:1a:06:94:14:5d:72:f8:08:1d:c6: 8f:48:86:46:1f:b5:8e:dc:db:df:c2:84:1a:b3:74: 96:d1:a0:27:6f:bf:83:f8:3d:3f:52:59:9d:26:bf: 59:82:9a:0e:f6:84:bd:4c:fc:a6:39:39:37:51:cc: 65:a3:f7:b8:19:48:e7:03:b9:da:cd:12:19:dc:9f: a6:fc:4d:6b:a6:1d:8b:9c:a9:ec:23:1c:e4:9b:36: a5:42:fb:0d:21:fb:32:0a:82:cb:a2:f3:41:b0:8a: 7f:83:93:c2:02:95:93:6f:74:97:40:65:26:cc:ea: 4c:3c:31:e2:bd:9b:44:22:68:97:a0:b2:9c:24:8e: f5:bf:e3:3d:39:6f:2a:13:f3:91:2d:52:91:4e:eb: 17:a8:3c:c4:56:70:a0:e1:d7:87:96:c4:e2:5e:33: ee:9a:07:7a:fa:68:fa:c9:89:f3:ae:fc:c2:90:25: f7:4f:3a:0e:7d:e7:12:98:9a:48:4d:d8:e2:e4:f4: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3C:50:18:B1:5A:4E:50:EA:76:AE:A9:DA:A2:2C:E7:F8:37:4D:9D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:8050::/48 Signature Algorithm: sha256WithRSAEncryption 6c:9e:23:cc:bf:83:31:23:a4:9d:8c:81:55:ff:7c:e1:d5:a0: 92:e8:67:96:ab:61:e9:fe:1e:d6:db:27:74:2d:55:da:69:36: 3a:4c:85:81:74:f9:ac:0b:48:5f:6c:1b:4c:43:69:50:ab:ef: c8:0a:56:82:c7:db:66:ac:fb:1f:7d:a6:8a:f1:d5:f1:5a:34: d8:8f:9b:59:17:fb:85:60:64:b5:dc:1d:af:98:92:33:0c:47: 11:7b:eb:af:54:d3:8e:d9:32:eb:8b:04:5b:c9:0f:e3:1a:1d: 65:e9:9a:2e:c7:4f:17:78:1b:27:0b:c1:87:d3:22:ad:1b:89: ef:f4:2b:95:50:7c:72:44:82:47:bf:50:37:b2:aa:c4:b7:43: 16:48:e4:4d:ae:03:70:8e:e3:f6:ba:f5:cf:39:d4:5d:f6:01: 2d:23:35:19:29:84:9e:c0:e3:17:e7:d6:37:43:87:18:e0:c2: 63:98:94:3e:94:7c:07:57:be:3c:64:25:1e:39:02:1f:e4:ed: 56:46:f3:ac:aa:7b:ff:d0:89:07:60:21:23:4a:86:80:53:b4: 01:88:89:4d:3a:71:2a:dc:84:5d:0c:11:d2:ef:a7:87:96:02: d6:a9:b0:d7:fb:f0:d5:74:6f:ca:33:b6:8d:5a:7b:42:d1:a0: 91:38:bb:45 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUS7GY0u1giouksZNyXKW+x7vy4/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAwMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDVjZjEwYzBlNDNhZmIwNzcxZTY4MjBhZjgwOWQyMGE2OTNiZjdjNjFiYzVi M2IwYWVlYjM2ODE1NWJjNWY5ODYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKSvhz4zA0zXLE+AjDKAttuIv39OHc1q/KvDWRKfgNM2p/Rj9K8K0Ks9Nl0 s/yGAt6ASAaxjq8htTZTP2r3CW8aBpQUXXL4CB3Gj0iGRh+1jtzb38KEGrN0ltGg J2+/g/g9P1JZnSa/WYKaDvaEvUz8pjk5N1HMZaP3uBlI5wO52s0SGdyfpvxNa6Yd i5yp7CMc5Js2pUL7DSH7MgqCy6LzQbCKf4OTwgKVk290l0BlJszqTDwx4r2bRCJo l6CynCSO9b/jPTlvKhPzkS1SkU7rF6g8xFZwoOHXh5bE4l4z7poHevpo+smJ8678 wpAl9086Dn3nEpiaSE3Y4uT0bvsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTcPFAY sVpOUOp2rqnaoizn+DdNnTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzA1MjBjODAtNjk4Zi00NTM4LWIzMmUtZTk2NjNjYWViOTc5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+A UDANBgkqhkiG9w0BAQsFAAOCAQEAbJ4jzL+DMSOknYyBVf984dWgkuhnlqth6f4e 1tsndC1V2mk2OkyFgXT5rAtIX2wbTENpUKvvyApWgsfbZqz7H32mivHV8Vo02I+b WRf7hWBktdwdr5iSMwxHEXvrr1TTjtky64sEW8kP4xodZemaLsdPF3gbJwvBh9Mi rRuJ7/QrlVB8ckSCR79QN7KqxLdDFkjkTa4DcI7j9rr1zznUXfYBLSM1GSmEnsDj F+fWN0OHGODCY5iUPpR8B1e+PGQlHjkCH+TtVkbzrKp7/9CJB2AhI0qGgFO0AYiJ TTpxKtyEXQwR0u+nh5YC1qmw1/vw1XRvyjO2jVp7QtGgkTi7RQ== -----END CERTIFICATE-----Generated at Mon Dec 15 15:30:01 2025 by rpki-client