This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa File: cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa (raw, json) Hash identifier: k81BT/6m7X+Wl6s233c4PxnIbVRQCwIAwjMisFtrI+M= Subject key identifier: 65:98:D0:90:10:65:0A:94:46:DF:7F:0F:9A:7F:1B:DF:F4:E6:D7:D9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6D1965DC7D27F2FD9908FBCE22EC38573324E237 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa Signing time: Mon 08 Dec 2025 02:10:23 +0000 ROA not before: Mon 08 Dec 2025 02:10:23 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:19:65:dc:7d:27:f2:fd:99:08:fb:ce:22:ec:38:57:33:24:e2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:23 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=a997f59a644c8367571bf7931cdd3a6c8423eafb1effe1d1112d576631882ff7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:ae:f3:b4:64:30:c1:e1:e5:0f:48:b1:e4: a2:77:50:8b:18:eb:d6:e0:9b:1b:fc:55:b0:3b:7c: e4:2a:1a:14:d7:f8:bf:2e:d8:62:a9:ed:6d:09:1f: 40:63:00:ee:36:f0:8a:3c:e1:a6:f6:f5:3a:62:f8: 0f:d2:63:11:12:99:48:10:24:72:b5:77:69:8c:f1: 88:ee:c3:8c:be:48:60:66:6e:74:9f:9c:18:34:b6: 92:fd:82:19:81:15:90:12:18:83:21:fd:af:3e:d0: 42:bd:12:ad:d0:0b:05:48:06:23:3b:2e:45:90:05: 7c:a0:9c:0b:9c:93:6b:f2:8e:89:17:e4:79:c1:3e: 6f:6e:7d:d8:e8:60:49:4c:00:23:77:ea:e0:1a:38: 32:96:31:95:8c:b1:2f:2d:19:22:c9:c5:40:a5:54: 2e:0b:a9:fd:75:03:5d:c4:34:8a:ee:f8:fa:6c:0e: 79:fe:d0:c4:6b:30:57:d0:17:8a:fd:de:30:60:01: 7c:33:e8:0e:63:f6:c3:a0:08:0e:2d:e2:84:f1:8a: 66:ff:26:c6:16:5b:e6:ca:18:7a:6a:ae:f4:b7:6a: 3b:15:3f:ea:9a:df:09:3a:4c:d0:cf:99:75:59:bb: e3:9d:ce:88:4b:e4:be:7d:4f:0e:70:37:3c:32:cd: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:98:D0:90:10:65:0A:94:46:DF:7F:0F:9A:7F:1B:DF:F4:E6:D7:D9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:800::/40 Signature Algorithm: sha256WithRSAEncryption 63:e5:c9:3b:f2:4f:f8:bd:e9:fc:17:d8:d1:57:c1:dd:9e:78: 65:8b:49:aa:4c:14:42:7e:33:7b:34:a8:6a:da:9b:63:c1:58: 88:de:e0:12:00:a7:4d:24:15:17:32:b6:2f:6c:6e:5f:3b:c3: 20:89:52:28:fc:5a:3c:a8:a7:eb:ba:ba:fe:22:8b:0a:27:0b: b4:61:12:00:89:f5:39:a6:0e:4c:d4:c8:5e:7b:87:4a:2f:6a: 18:66:e7:af:7c:85:70:59:dc:2a:d4:ce:69:08:f6:23:4b:db: 5a:dd:48:e4:15:af:f7:64:5c:cb:af:0d:cb:75:e0:bc:52:34: d3:3e:8f:59:21:bb:b7:18:83:a3:8f:eb:28:ec:31:77:af:b2: d4:74:ea:76:14:43:f8:11:61:23:39:a2:86:ca:94:d0:57:95: d0:e8:8f:42:63:c1:7d:1e:49:56:87:b2:d9:e8:a3:35:98:a2: db:82:c2:6c:d8:7a:46:35:d8:5e:bc:94:83:1b:2a:8e:28:9a: b8:e8:58:7b:80:80:02:ea:61:af:06:b2:58:78:ca:ab:f8:d7: 62:88:83:a0:0f:78:62:9e:2f:18:cb:c8:26:6b:95:07:d4:d4: 64:89:a0:70:b2:30:c3:79:a8:ad:01:c5:9f:9a:c3:b8:a4:86: 8c:97:80:b7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbRll3H0n8v2ZCPvOIuw4VzMk4jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMjNaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQGE5OTdmNTlhNjQ0YzgzNjc1NzFiZjc5MzFjZGQzYTZjODQyM2VhZmIxZWZm ZTFkMTExMmQ1NzY2MzE4ODJmZjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIurvO0ZDDB4eUPSLHkondQixjr1uCbG/xVsDt85CoaFNf4vy7YYqntbQkf QGMA7jbwijzhpvb1OmL4D9JjERKZSBAkcrV3aYzxiO7DjL5IYGZudJ+cGDS2kv2C GYEVkBIYgyH9rz7QQr0SrdALBUgGIzsuRZAFfKCcC5yTa/KOiRfkecE+b2592Ohg SUwAI3fq4Bo4MpYxlYyxLy0ZIsnFQKVULgup/XUDXcQ0iu74+mwOef7QxGswV9AX iv3eMGABfDPoDmP2w6AIDi3ihPGKZv8mxhZb5soYemqu9LdqOxU/6prfCTpM0M+Z dVm7453OiEvkvn1PDnA3PDLN+ZcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRlmNCQ EGUKlEbffw+afxvf9ObX2TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2Q0Y2U1ZDctMWRjYy00Nzc3LWIyOTktYjBkOTdkMzMxNWY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HII MA0GCSqGSIb3DQEBCwUAA4IBAQBj5ck78k/4ven8F9jRV8Hdnnhli0mqTBRCfjN7 NKhq2ptjwViI3uASAKdNJBUXMrYvbG5fO8MgiVIo/Fo8qKfrurr+IosKJwu0YRIA ifU5pg5M1Mhee4dKL2oYZuevfIVwWdwq1M5pCPYjS9ta3UjkFa/3ZFzLrw3LdeC8 UjTTPo9ZIbu3GIOjj+so7DF3r7LUdOp2FEP4EWEjOaKGypTQV5XQ6I9CY8F9HklW h7LZ6KM1mKLbgsJs2HpGNdhevJSDGyqOKJq46Fh7gIAC6mGvBrJYeMqr+NdiiIOg D3hini8Yy8gma5UH1NRkiaBwsjDDeaitAcWfmsO4pIaMl4C3 -----END CERTIFICATE-----Generated at Mon Dec 15 15:35:32 2025 by rpki-client