This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa File: cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa (raw, json) Hash identifier: CApIjt4ZZEp9+2oF1/N2EDfizABjSfkXMtYowYFfUU0= Subject key identifier: 58:2E:0F:23:18:0F:1A:36:21:C5:36:C8:35:FD:84:E3:EB:55:4C:7B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 652A322E428FDA5E1BED171F86284F866F9A907C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa Signing time: Sun 23 Nov 2025 01:30:30 +0000 ROA not before: Sun 23 Nov 2025 01:30:30 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2a:32:2e:42:8f:da:5e:1b:ed:17:1f:86:28:4f:86:6f:9a:90:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:30 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=16eff40c68eef1f80eb59d15e5a22bd151ae3e411af83eead2a4a1ccf279e63c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:57:36:a3:da:7b:32:3d:75:fd:d6:ef:e5: 09:41:b0:8d:cc:7b:e3:61:37:2f:13:2e:b4:af:7a: 4a:8d:12:0a:1b:0f:8b:96:1e:8f:3c:97:de:e4:c6: 95:81:34:f9:c9:e0:3d:59:b8:cf:23:17:27:2c:aa: 4f:66:ef:d2:a3:f7:ab:f6:0d:47:46:85:29:a2:3f: 73:81:ba:c4:b1:e7:95:a5:2c:3d:4a:03:e0:fd:9e: d4:8e:12:52:60:d0:a5:49:0e:80:63:5d:9b:78:26: 18:4e:90:dd:ac:b5:43:bc:6f:33:02:e3:06:e7:0c: 7e:04:01:dd:09:c1:3a:47:63:0a:15:fe:5b:9d:4c: ec:b6:4d:55:e1:c9:7f:5e:7d:9e:5f:44:2d:8b:6a: 68:4c:c4:3c:0d:fb:dd:9c:be:e2:a0:9e:19:fd:48: f8:c4:3a:62:9f:6c:34:6d:87:07:7d:f3:cc:56:ed: f4:b4:63:1e:fa:97:6e:fa:a4:0e:f1:48:f7:a4:52: e7:75:dd:91:f5:ee:db:1a:9d:46:c0:97:55:d5:d6: 22:fd:82:57:6a:82:c7:ec:e2:5a:f3:7a:8d:da:aa: 33:c0:c7:ba:26:a8:f1:37:a4:c1:68:89:13:af:f9: 4c:37:60:22:04:6e:1c:5f:a8:97:03:c9:aa:93:8f: 89:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2E:0F:23:18:0F:1A:36:21:C5:36:C8:35:FD:84:E3:EB:55:4C:7B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:c020::/48 Signature Algorithm: sha256WithRSAEncryption 94:ae:66:98:93:21:50:7e:0b:b6:f7:ba:4e:51:11:ee:f9:22: 9d:28:bb:b2:36:59:80:20:e6:c6:04:0b:ee:cd:4e:3f:56:54: 00:dd:46:b8:82:6e:94:33:c8:57:dc:37:5c:49:94:bd:a7:db: f0:b6:ed:91:e1:ab:cc:8c:c3:25:d4:2e:cb:fa:14:ca:b1:4d: e3:bb:3c:24:e7:f6:44:4c:a9:3a:7b:bd:04:f1:06:5d:c4:f9: ba:ec:da:9c:59:48:5a:e2:16:bb:a1:49:a9:e6:dc:b2:2a:36: 55:d2:a8:85:1d:0c:21:d6:3f:2d:34:2f:a0:d9:d1:80:3e:3a: c2:47:54:28:1c:f6:ad:d1:91:b6:9e:4c:db:dd:e8:56:1c:19: 54:3e:95:d1:a6:fd:78:ce:d5:e4:3b:63:17:46:17:da:fc:48: 7c:b7:b5:26:a4:a7:53:e4:7a:01:94:91:e6:78:4b:0c:a0:c8: 5d:f4:d2:52:19:d8:d1:3d:d5:c5:00:1a:78:01:64:56:a6:73: b4:24:24:df:9e:f7:38:d0:90:00:f4:5d:0e:83:7c:a3:97:85: ec:0b:3e:41:4e:aa:c2:00:ee:b1:a8:89:e3:79:a8:16:e8:44: 59:e1:18:82:cb:31:ea:f6:01:35:00:92:56:6e:c7:64:a9:c8: f0:7f:d2:67 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUZSoyLkKP2l4b7RcfhihPhm+akHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMzBaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDE2ZWZmNDBjNjhlZWYxZjgwZWI1OWQxNWU1YTIyYmQxNTFhZTNlNDExYWY4 M2VlYWQyYTRhMWNjZjI3OWU2M2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKncVzaj2nsyPXX91u/lCUGwjcx742E3LxMutK96So0SChsPi5YejzyX3uTG lYE0+cngPVm4zyMXJyyqT2bv0qP3q/YNR0aFKaI/c4G6xLHnlaUsPUoD4P2e1I4S UmDQpUkOgGNdm3gmGE6Q3ay1Q7xvMwLjBucMfgQB3QnBOkdjChX+W51M7LZNVeHJ f159nl9ELYtqaEzEPA373Zy+4qCeGf1I+MQ6Yp9sNG2HB33zzFbt9LRjHvqXbvqk DvFI96RS53XdkfXu2xqdRsCXVdXWIv2CV2qCx+ziWvN6jdqqM8DHuiao8TekwWiJ E6/5TDdgIgRuHF+olwPJqpOPibcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRYLg8j GA8aNiHFNsg1/YTj61VMezAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2Q0N2E1YTItNWJiNC00ZmUxLWJkNTktN2Y2NGVkNGJmYTJiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GrA IDANBgkqhkiG9w0BAQsFAAOCAQEAlK5mmJMhUH4Ltve6TlER7vkinSi7sjZZgCDm xgQL7s1OP1ZUAN1GuIJulDPIV9w3XEmUvafb8LbtkeGrzIzDJdQuy/oUyrFN47s8 JOf2REypOnu9BPEGXcT5uuzanFlIWuIWu6FJqebcsio2VdKohR0MIdY/LTQvoNnR gD46wkdUKBz2rdGRtp5M293oVhwZVD6V0ab9eM7V5DtjF0YX2vxIfLe1JqSnU+R6 AZSR5nhLDKDIXfTSUhnY0T3VxQAaeAFkVqZztCQk3573ONCQAPRdDoN8o5eF7As+ QU6qwgDusaiJ43moFuhEWeEYgssx6vYBNQCSVm7HZKnI8H/SZw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:24 2025 by rpki-client