This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa File: c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa (raw, json) Hash identifier: +QEux+omTsQGkA0W37By4eNEXE7qk01XglxXTEYWFtQ= Subject key identifier: 4F:12:B9:A5:B8:75:2F:DE:28:4B:79:96:CC:53:C3:AB:DF:64:C8:55 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2F103D66B7553696FF444AF83569B250ED6EB085 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa Signing time: Sun 23 Nov 2025 01:30:47 +0000 ROA not before: Sun 23 Nov 2025 01:30:47 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:10:3d:66:b7:55:36:96:ff:44:4a:f8:35:69:b2:50:ed:6e:b0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:47 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=ce92eb8c16f142f1e4bf9b9e956081d298a0bbf46abcb8cf84faf1623bfdf73d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:d5:66:a8:47:3f:f9:c6:f7:66:c8:ad:6e: ca:1d:19:3b:80:5e:59:83:73:8e:d7:45:44:ab:8e: 70:50:f2:ed:9d:6b:6c:b9:9e:fe:d0:b9:5d:5a:1c: f1:a5:af:7f:bd:5d:9a:a2:42:da:01:3c:7d:c0:f8: 7d:9c:3d:f1:8b:c7:67:75:93:42:4b:bf:f3:be:60: 89:34:10:05:3a:26:31:96:02:eb:67:f6:30:3b:c7: 73:1d:b4:14:0e:09:7e:01:de:a2:94:94:47:91:70: 5d:63:b6:10:f9:2e:e9:c3:dc:34:59:53:bf:b3:e4: b4:6b:f9:0a:4a:ba:e8:cc:d3:1d:d6:64:a3:3e:9c: 99:a4:80:62:4d:41:ad:28:95:c0:e5:11:6a:2d:a2: a4:1a:ca:21:3c:cd:52:d4:68:e2:4a:5a:b2:f0:ca: a0:b2:77:f7:d1:84:33:10:5e:15:ec:bb:c1:4b:49: 4e:5c:6a:4f:09:9f:de:d1:8e:db:df:32:cb:d2:07: a4:cc:a6:ca:eb:e6:ad:68:22:2d:4b:8c:5d:a1:ee: 67:3e:3c:61:51:5f:d4:3c:1d:9e:0e:01:9f:1d:8e: d4:99:46:97:df:a4:11:ac:7b:e5:81:4c:75:15:b3: 31:67:dc:ab:b4:18:99:e9:a2:c5:1e:3f:e5:54:b2: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:12:B9:A5:B8:75:2F:DE:28:4B:79:96:CC:53:C3:AB:DF:64:C8:55 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c780e7ee-ebe6-478f-ac91-2a224c5ecf26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:6080::/48 Signature Algorithm: sha256WithRSAEncryption ac:92:01:05:98:10:d0:e9:0f:cf:72:b5:f8:a5:72:98:8e:2c: d4:38:2f:cb:9a:10:32:ca:bf:e6:81:c5:06:bf:3c:63:6b:77: 6b:80:00:ea:5a:25:01:69:9a:ce:a5:73:36:ff:46:af:a3:eb: 8f:f4:0d:db:1d:5f:e7:14:17:03:0c:0a:1e:46:02:fc:6f:b2: f1:47:75:f8:72:3f:9f:a2:2b:23:85:41:f0:f7:e6:69:e9:94: c7:7d:53:1c:17:e2:8e:5b:1e:ee:a4:ab:76:3b:e4:b9:46:67: 97:4b:f7:86:37:23:a7:57:7d:bb:31:32:2a:ae:6c:f7:56:58: 5d:97:33:81:84:40:d6:11:a3:7b:16:da:ee:06:eb:5b:ca:97: 8c:0e:1e:f7:72:11:f3:5d:75:cb:7d:f8:9c:81:c8:5b:65:28: 6b:a6:7f:03:35:a1:be:a8:79:76:e4:8a:71:26:92:71:d8:c4: 3c:e9:bd:6d:09:ac:7f:4d:5c:1e:79:d7:f7:73:f9:d6:84:6d: ad:99:85:6d:47:9d:70:bc:58:96:2b:27:97:3a:25:7b:bd:e3: 9f:05:fc:44:a1:34:93:0a:95:2e:c1:16:58:ec:2c:11:21:b4: ab:51:30:c1:3c:8a:03:e1:08:94:c6:79:45:e4:af:fb:b4:9e: 36:52:ce:67 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIULxA9ZrdVNpb/REr4NWmyUO1usIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwNDdaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGNlOTJlYjhjMTZmMTQyZjFlNGJmOWI5ZTk1NjA4MWQyOThhMGJiZjQ2YWJj YjhjZjg0ZmFmMTYyM2JmZGY3M2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNI1WaoRz/5xvdmyK1uyh0ZO4BeWYNzjtdFRKuOcFDy7Z1rbLme/tC5XVoc 8aWvf71dmqJC2gE8fcD4fZw98YvHZ3WTQku/875giTQQBTomMZYC62f2MDvHcx20 FA4JfgHeopSUR5FwXWO2EPku6cPcNFlTv7PktGv5Ckq66MzTHdZkoz6cmaSAYk1B rSiVwOURai2ipBrKITzNUtRo4kpasvDKoLJ399GEMxBeFey7wUtJTlxqTwmf3tGO 298yy9IHpMymyuvmrWgiLUuMXaHuZz48YVFf1Dwdng4Bnx2O1JlGl9+kEax75YFM dRWzMWfcq7QYmemixR4/5VSyFPsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRPErml uHUv3ihLeZbMU8Or32TIVTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Yzc4MGU3ZWUtZWJlNi00NzhmLWFjOTEtMmEyMjRjNWVjZjI2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gpg gDANBgkqhkiG9w0BAQsFAAOCAQEArJIBBZgQ0OkPz3K1+KVymI4s1Dgvy5oQMsq/ 5oHFBr88Y2t3a4AA6lolAWmazqVzNv9Gr6Prj/QN2x1f5xQXAwwKHkYC/G+y8Ud1 +HI/n6IrI4VB8PfmaemUx31THBfijlse7qSrdjvkuUZnl0v3hjcjp1d9uzEyKq5s 91ZYXZczgYRA1hGjexba7gbrW8qXjA4e93IR8111y334nIHIW2Uoa6Z/AzWhvqh5 duSKcSaScdjEPOm9bQmsf01cHnnX93P51oRtrZmFbUedcLxYlisnlzole73jnwX8 RKE0kwqVLsEWWOwsESG0q1EwwTyKA+EIlMZ5ReSv+7SeNlLOZw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:32 2025 by rpki-client