This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa File: c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa (raw, json) Hash identifier: w2uawRLTlHU8XTJ8Ig4WDAa5ZIFurToh/rwKfjqvjYU= Subject key identifier: EF:07:91:38:06:28:3E:3A:30:18:AB:C8:CE:32:C4:91:19:EC:32:29 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 13381BD70556EB270A9E4838123BA3F169C871DF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa Signing time: Tue 25 Nov 2025 20:01:04 +0000 ROA not before: Tue 25 Nov 2025 20:01:04 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:38:1b:d7:05:56:eb:27:0a:9e:48:38:12:3b:a3:f1:69:c8:71:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:01:04 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=2a9ed22b0e4cd923048e68085131e553d7e5e538bfa0b1ec39740c72d05438ad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:52:4e:71:9a:59:b3:a3:fe:6a:17:25:35: 75:d0:b5:1e:b1:3d:0e:6a:c1:e6:f2:ea:ab:36:08: ca:fe:d4:d9:64:b2:c1:00:1b:46:fd:1c:1c:d1:0f: 89:55:b0:98:53:76:c4:d1:ef:48:5b:bf:99:8e:5b: 8d:b0:c0:bf:31:8b:2e:6e:29:9d:cc:4e:61:18:73: 63:20:1f:f0:db:d9:ab:8a:0e:11:f7:64:b8:9d:ee: 3d:53:94:6f:10:c2:e1:5c:59:50:7c:8c:ed:b9:93: 6c:8c:e6:d8:13:bd:be:9f:70:d2:80:b2:3d:ea:42: 12:26:ec:c6:24:83:f1:1b:f9:6e:59:3c:73:ef:d9: e6:90:61:d0:d1:69:e9:99:e4:4c:3a:1a:c3:eb:60: 9b:b0:33:54:f4:79:52:40:c6:7f:cb:61:cb:d0:14: bd:e0:25:03:de:47:8d:a8:ad:73:27:ba:4a:b9:7e: ad:4d:36:11:97:3c:c0:84:35:86:08:96:ba:a0:94: 2f:39:2d:88:66:71:87:6f:7f:39:03:70:4c:71:c9: ce:e1:f8:80:22:27:54:59:47:6f:ce:2e:0b:f7:09: 20:4e:00:0b:81:c3:0c:59:65:a5:fe:42:d9:4a:e9: e0:a2:a0:9b:cd:23:bd:7b:0f:49:f0:2b:0d:7b:4a: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:07:91:38:06:28:3E:3A:30:18:AB:C8:CE:32:C4:91:19:EC:32:29 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:40c0::/46 Signature Algorithm: sha256WithRSAEncryption 66:ac:86:50:21:78:da:08:22:f8:95:90:07:bd:74:1a:58:41: a7:57:1c:3b:cd:4e:52:d7:a6:4d:b4:d4:9b:6d:af:4a:15:3a: d1:5d:3e:72:59:6b:27:68:1f:88:b3:d7:92:eb:56:c5:7b:f3: b7:c4:97:a8:19:a0:7c:65:df:83:e6:3a:26:e5:6f:68:ac:bc: 3d:60:ba:49:a0:48:f5:a1:6f:2a:bf:b4:a4:ef:24:4e:1d:7c: ed:b8:45:02:28:63:44:aa:6d:6f:66:0b:fd:26:df:24:1f:0e: 5a:59:0f:07:dd:da:ab:1d:33:e3:e4:26:27:7d:a9:0e:2e:2a: b1:95:f4:5c:a8:1f:fe:e5:2c:82:5d:44:14:01:d7:7a:25:36: 51:1d:69:3d:ec:7f:34:ad:10:59:4a:31:a5:ea:1f:ae:2f:4f: 94:5f:29:66:08:8f:a6:6e:b4:3c:1b:e5:c6:7d:de:a2:59:24: 32:41:e8:b2:12:66:47:40:2b:a9:8b:d9:58:09:9a:3e:8b:a6: 25:6d:5e:94:23:a6:47:34:16:49:81:9c:dc:51:e9:75:e5:a8: 5a:b0:13:77:66:ae:23:2e:95:c5:39:57:52:92:e6:48:41:24: 3f:1a:18:87:c8:b9:b6:74:2a:c0:59:1b:ff:80:42:1a:dc:0a: 22:58:51:8d -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUEzgb1wVW6ycKnkg4Ejuj8WnIcd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAxMDRaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDJhOWVkMjJiMGU0Y2Q5MjMwNDhlNjgwODUxMzFlNTUzZDdlNWU1MzhiZmEw YjFlYzM5NzQwYzcyZDA1NDM4YWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJOMUk5xmlmzo/5qFyU1ddC1HrE9DmrB5vLqqzYIyv7U2WSywQAbRv0cHNEP iVWwmFN2xNHvSFu/mY5bjbDAvzGLLm4pncxOYRhzYyAf8NvZq4oOEfdkuJ3uPVOU bxDC4VxZUHyM7bmTbIzm2BO9vp9w0oCyPepCEibsxiSD8Rv5blk8c+/Z5pBh0NFp 6ZnkTDoaw+tgm7AzVPR5UkDGf8thy9AUveAlA95Hjaitcye6Srl+rU02EZc8wIQ1 hgiWuqCULzktiGZxh29/OQNwTHHJzuH4gCInVFlHb84uC/cJIE4AC4HDDFllpf5C 2Urp4KKgm80jvXsPSfArDXtKyIsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTvB5E4 Big+OjAYq8jOMsSRGewyKTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzQ3ZDliZjctM2U5Yi00YWQ1LTk1OGEtZGRlN2NhZGZhODlmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HNA wDANBgkqhkiG9w0BAQsFAAOCAQEAZqyGUCF42ggi+JWQB710GlhBp1ccO81OUtem TbTUm22vShU60V0+cllrJ2gfiLPXkutWxXvzt8SXqBmgfGXfg+Y6JuVvaKy8PWC6 SaBI9aFvKr+0pO8kTh187bhFAihjRKptb2YL/SbfJB8OWlkPB93aqx0z4+QmJ32p Di4qsZX0XKgf/uUsgl1EFAHXeiU2UR1pPex/NK0QWUoxpeofri9PlF8pZgiPpm60 PBvlxn3eolkkMkHoshJmR0ArqYvZWAmaPoumJW1elCOmRzQWSYGc3FHpdeWoWrAT d2auIy6VxTlXUpLmSEEkPxoYh8i5tnQqwFkb/4BCGtwKIlhRjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:11 2025 by rpki-client