This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa File: c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa (raw, json) Hash identifier: PTT9D8QTGVElkBQpIm6jQp3HD8OkSVcBytNQDN09nT4= Subject key identifier: C1:BF:05:FE:2D:40:EC:2B:29:6C:CF:70:1D:2C:B0:8B:5C:13:B6:2C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 39CCD6EFCD8DD02600FB3716FAE6F26BC8ADDC0A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa Signing time: Sat 29 Nov 2025 03:10:41 +0000 ROA not before: Sat 29 Nov 2025 03:10:41 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d059:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cc:d6:ef:cd:8d:d0:26:00:fb:37:16:fa:e6:f2:6b:c8:ad:dc:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:41 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=3347a24e113687ce853810bbdfd9cfd7e7c080eef1c255a80c9a5b74c8ac25c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:55:65:d4:a3:58:eb:46:72:d1:cc:ee:81: aa:93:e9:53:cc:fc:30:24:d0:0e:68:ca:65:67:8f: d4:9d:da:ef:e2:44:bf:6e:6b:2f:1a:38:b7:72:cf: 26:52:22:14:a2:6d:c8:03:55:b2:59:e0:98:18:1d: ec:d5:d8:76:35:d6:74:6c:6c:58:67:1c:91:b1:bd: cb:08:81:15:e5:70:b6:53:7b:76:ae:dd:c4:2e:67: fd:a2:8f:7f:25:93:a9:ce:54:6c:07:6b:99:5f:2a: df:54:a8:64:ae:99:8f:5c:9a:64:f2:dd:f4:8d:6c: 00:62:da:61:c4:e6:68:5d:66:02:30:7a:84:f2:cf: 56:9a:49:76:23:03:71:cb:ec:fa:38:df:25:43:69: c8:ba:c6:7d:ed:d8:db:97:50:16:78:25:96:81:48: b4:cc:5d:5e:c4:9a:ee:aa:ee:8f:83:5f:6c:16:2f: 66:14:33:3a:cc:50:9e:03:50:4a:4d:42:26:55:a6: 7e:00:63:28:e7:5b:9f:91:34:42:57:84:f1:26:1a: fd:52:89:61:fb:2e:97:29:af:72:d3:02:15:f3:55: a6:25:b0:1b:2b:26:02:11:70:f7:4c:8b:33:13:50: 59:71:15:84:0c:40:85:66:ec:4f:fa:1d:9f:28:db: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BF:05:FE:2D:40:EC:2B:29:6C:CF:70:1D:2C:B0:8B:5C:13:B6:2C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d059:c000::/40 Signature Algorithm: sha256WithRSAEncryption 38:85:74:39:87:2a:7b:8d:9b:8c:09:71:93:37:2a:c4:72:c4: 29:19:30:7f:cc:e1:31:4f:1d:50:3f:1e:ca:fa:15:3b:b3:65: 64:27:18:4b:2d:08:09:1d:35:ba:1e:44:7a:cc:ef:88:80:be: ea:ef:9f:ce:16:50:27:4e:8c:a3:87:6e:0c:4c:f3:9e:b3:3f: 6c:1b:02:84:21:c7:bc:4a:ff:49:3c:88:88:f1:70:e9:bf:8d: 04:e0:c7:14:58:cc:e3:b9:83:9b:1d:2a:15:58:51:3e:4f:21: e3:3d:1d:18:a9:9b:80:ee:00:1d:70:15:66:14:39:1b:83:8b: 0e:db:ee:10:5b:da:dc:14:9a:3a:30:55:f6:f6:5a:db:5c:69: 8e:ad:d9:6b:33:b7:9f:0f:d6:ed:b2:64:28:12:72:d5:32:5c: e4:9e:ee:81:93:6d:63:1c:fc:55:fc:2c:8e:fc:a7:31:fe:bb: 1b:d0:87:a8:a8:aa:5b:a9:1e:ce:38:46:95:d1:8e:c3:ca:77: 0e:3a:ac:a8:cd:04:fd:00:1c:97:30:c3:55:cf:6f:7d:f2:f3: 5a:f4:d0:c1:1c:f9:ae:21:71:30:ba:25:4a:73:3c:a2:57:87: 1e:a6:d2:24:e6:5a:c4:a4:30:da:57:3a:43:81:f6:1c:e6:f3: a5:db:31:a0 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUOczW782N0CYA+zcW+ubya8it3AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwNDFaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDMzNDdhMjRlMTEzNjg3Y2U4NTM4MTBiYmRmZDljZmQ3ZTdjMDgwZWVmMWMy NTVhODBjOWE1Yjc0YzhhYzI1YzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPVVWXUo1jrRnLRzO6BqpPpU8z8MCTQDmjKZWeP1J3a7+JEv25rLxo4t3LP JlIiFKJtyANVslngmBgd7NXYdjXWdGxsWGcckbG9ywiBFeVwtlN7dq7dxC5n/aKP fyWTqc5UbAdrmV8q31SoZK6Zj1yaZPLd9I1sAGLaYcTmaF1mAjB6hPLPVppJdiMD ccvs+jjfJUNpyLrGfe3Y25dQFnglloFItMxdXsSa7qruj4NfbBYvZhQzOsxQngNQ Sk1CJlWmfgBjKOdbn5E0QleE8SYa/VKJYfsulymvctMCFfNVpiWwGysmAhFw90yL MxNQWXEVhAxAhWbsT/odnyjb+i8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTBvwX+ LUDsKylsz3AdLLCLXBO2LDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzRhODkxMDUtZjFjMy00NGNkLWIyYmYtMjg3ZWQ2ODA1NWU5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FnA MA0GCSqGSIb3DQEBCwUAA4IBAQA4hXQ5hyp7jZuMCXGTNyrEcsQpGTB/zOExTx1Q Px7K+hU7s2VkJxhLLQgJHTW6HkR6zO+IgL7q75/OFlAnToyjh24MTPOesz9sGwKE Ice8Sv9JPIiI8XDpv40E4McUWMzjuYObHSoVWFE+TyHjPR0YqZuA7gAdcBVmFDkb g4sO2+4QW9rcFJo6MFX29lrbXGmOrdlrM7efD9btsmQoEnLVMlzknu6Bk21jHPxV /CyO/Kcx/rsb0IeoqKpbqR7OOEaV0Y7DyncOOqyozQT9AByXMMNVz2998vNa9NDB HPmuIXEwuiVKczyiV4ceptIk5lrEpDDaVzpDgfYc5vOl2zGg -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:54 2025 by rpki-client