This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa File: c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa (raw, json) Hash identifier: ztmm8qNZzzZQBg/CkcUAkaYPKK4igA7iIh0N83S3oOg= Subject key identifier: 30:9A:96:1A:3B:0D:F5:74:01:EE:9B:C3:73:21:FA:72:83:13:0C:7C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 02264788FD06B6B71EA8F32D965BAF695706A380 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa Signing time: Tue 25 Nov 2025 20:00:41 +0000 ROA not before: Tue 25 Nov 2025 20:00:41 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:5080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:26:47:88:fd:06:b6:b7:1e:a8:f3:2d:96:5b:af:69:57:06:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:41 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=2632fd8fa212ef5e93cc668b545aa58f11fa608b321514095449e9e8c5988d9c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:09:fd:e2:ef:4d:73:77:8d:46:2e:5c:34: 68:46:4c:89:7f:f6:75:38:b9:36:7b:5e:b8:47:b7: 85:ea:d6:2a:67:60:a2:c0:64:52:4e:3c:8f:6b:a2: 4b:0a:0a:3a:95:f1:ef:96:94:42:85:60:fd:1b:63: 3a:10:28:ec:64:b8:6f:7a:04:f1:7d:4d:4b:03:11: 96:97:63:ca:5f:b3:81:8a:93:91:b1:27:39:a6:af: c1:d2:fa:3e:8b:7d:5b:f8:b5:5b:68:88:de:66:c1: a3:28:d5:f5:c7:70:e3:4d:c3:f2:97:39:27:a1:63: 10:87:9f:c2:07:a0:fc:23:a8:a2:29:7c:03:99:5c: 31:d5:34:38:ae:3d:b3:93:ba:6c:c1:38:8b:41:1a: 3a:5b:9c:fe:f3:b8:fa:87:e5:26:ed:18:6e:57:ca: 5c:c4:39:8a:2a:63:9e:28:da:fb:f4:ae:8d:a0:8c: 6d:64:4e:87:db:ce:5f:05:e7:c7:7d:5d:42:8c:7a: a0:23:f9:10:05:1f:be:00:27:14:12:46:85:32:01: 94:ac:8b:ce:2c:bb:73:f8:c7:d1:24:82:61:79:b0: a6:fb:95:69:fb:10:46:24:2c:ab:a4:59:59:71:cb: 1c:e9:85:2b:81:4d:ee:91:d7:ce:f3:b9:7d:3a:ac: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9A:96:1A:3B:0D:F5:74:01:EE:9B:C3:73:21:FA:72:83:13:0C:7C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c27c5e40-fe20-4bc1-90d4-97d3b12a5ecb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:5080::/46 Signature Algorithm: sha256WithRSAEncryption 3b:7c:e0:83:a3:54:86:f8:b9:b6:48:f4:5d:19:7a:0d:c8:42: fe:5c:b9:c0:68:cb:73:c9:51:66:70:89:6d:e9:27:86:d1:46: 32:b5:64:27:4e:97:86:c2:84:b1:d7:29:2f:da:24:26:19:d3: 96:c8:31:62:96:22:cc:9e:d2:f0:b2:23:e1:2a:8b:bc:6b:5d: 4b:cb:24:91:17:1e:48:65:26:f9:8d:9e:83:3f:35:b7:23:ca: 4b:f6:f5:9c:e1:ce:60:f3:a5:60:0b:94:a3:05:d6:d2:64:9c: 9e:77:7b:98:86:e8:22:cf:10:bc:25:26:17:8d:c9:ab:dc:52: b9:6f:8e:bd:76:3f:a4:19:b1:a9:4f:1e:ef:a8:8e:0a:d2:88: a4:08:75:18:d2:f5:85:81:aa:cd:8f:01:33:d8:d1:0f:97:88: 08:3a:8c:e3:ac:f0:11:01:34:be:22:55:32:22:34:3a:42:4a: 3b:28:e0:7d:f6:c1:d8:31:a0:b1:c5:30:30:da:a6:cf:15:f4: d0:75:0b:a7:20:e4:c1:a1:6d:d3:1a:d6:86:fb:ca:f5:86:ed: d0:3b:ae:b6:2f:4f:15:e0:2f:68:ab:e4:75:b7:79:1e:58:d6: fe:27:fb:18:d8:7d:c4:b8:2f:fe:29:26:2c:ef:06:39:72:31: 22:0f:f6:38 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAiZHiP0GtrceqPMtlluvaVcGo4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwNDFaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDI2MzJmZDhmYTIxMmVmNWU5M2NjNjY4YjU0NWFhNThmMTFmYTYwOGIzMjE1 MTQwOTU0NDllOWU4YzU5ODhkOWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6SCf3i701zd41GLlw0aEZMiX/2dTi5NnteuEe3herWKmdgosBkUk48j2ui SwoKOpXx75aUQoVg/RtjOhAo7GS4b3oE8X1NSwMRlpdjyl+zgYqTkbEnOaavwdL6 Pot9W/i1W2iI3mbBoyjV9cdw403D8pc5J6FjEIefwgeg/COooil8A5lcMdU0OK49 s5O6bME4i0EaOluc/vO4+oflJu0YblfKXMQ5iipjnija+/SujaCMbWROh9vOXwXn x31dQox6oCP5EAUfvgAnFBJGhTIBlKyLziy7c/jH0SSCYXmwpvuVafsQRiQsq6RZ WXHLHOmFK4FN7pHXzvO5fTqssj0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQwmpYa Ow31dAHum8NzIfpygxMMfDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzI3YzVlNDAtZmUyMC00YmMxLTkwZDQtOTdkM2IxMmE1ZWNiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HNQ gDANBgkqhkiG9w0BAQsFAAOCAQEAO3zgg6NUhvi5tkj0XRl6DchC/ly5wGjLc8lR ZnCJbeknhtFGMrVkJ06XhsKEsdcpL9okJhnTlsgxYpYizJ7S8LIj4SqLvGtdS8sk kRceSGUm+Y2egz81tyPKS/b1nOHOYPOlYAuUowXW0mScnnd7mIboIs8QvCUmF43J q9xSuW+OvXY/pBmxqU8e76iOCtKIpAh1GNL1hYGqzY8BM9jRD5eICDqM46zwEQE0 viJVMiI0OkJKOyjgffbB2DGgscUwMNqmzxX00HULpyDkwaFt0xrWhvvK9Ybt0Duu ti9PFeAvaKvkdbd5HljW/if7GNh9xLgv/ikmLO8GOXIxIg/2OA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:41 2025 by rpki-client