This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa File: e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa (raw, json) Hash identifier: fn1p4NNIL3rtp99mJkuiRv1b1gW0NvKbrspQ4AH/0rk= Subject key identifier: E6:60:B7:BE:38:DD:7B:E5:3A:A5:D4:88:55:D0:AD:86:51:DD:B5:87 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0B520A9B9DDD080A6C61F38BCB57297A2402E4A2 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa Signing time: Fri 05 Dec 2025 01:00:09 +0000 ROA not before: Fri 05 Dec 2025 01:00:09 +0000 ROA not after: Thu 05 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d076:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:52:0a:9b:9d:dd:08:0a:6c:61:f3:8b:cb:57:29:7a:24:02:e4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 5 01:00:09 2025 GMT Not After : Mar 5 23:59:59 2026 GMT Subject: serialNumber=eb346a0075de6e83fdee52e7d19e725d67c747ad025e71fd3f44f0ec95bc8f60, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:53:6c:e5:3b:d2:01:b7:17:03:a2:63:87: 35:7d:69:2a:9b:2d:fd:d8:27:1c:38:6b:c3:f2:ad: 16:bc:c0:bd:42:4a:bd:46:cd:b6:43:49:72:11:94: 8f:f9:e0:07:54:93:5e:5e:6e:a5:aa:2a:74:e2:a0: 13:8f:ab:f2:0e:80:85:e9:e9:a1:6a:69:30:9d:e6: e4:03:cf:bf:dd:c1:81:ca:25:27:dd:fc:8f:4b:ba: bc:c8:c7:8f:7b:b4:34:35:c6:3e:f8:18:59:f9:2e: f6:e8:ca:dc:ad:ed:e7:6a:c4:91:ca:99:69:8e:b7: 3a:51:68:05:24:17:aa:c0:81:cc:0a:0f:d7:2f:fb: 14:7b:51:0f:c4:e8:6b:2f:93:f9:84:f8:6b:27:27: fc:46:3e:11:a3:7e:23:7f:07:d3:b1:32:31:09:d8: a1:5b:cc:3c:f6:19:f6:57:c0:91:a8:b6:2a:bd:09: f6:e9:e3:0e:f3:95:38:bb:70:07:37:76:c4:d9:82: 1f:2d:1f:1e:1e:57:a4:bd:43:f5:49:f8:db:a8:19: 10:9a:03:7c:37:df:07:4c:7d:87:bb:11:d6:0a:a3: 50:79:75:24:af:69:32:78:54:5f:90:1b:fb:58:3c: bc:4a:6d:f8:24:2d:6a:97:0b:f3:29:ad:39:29:73: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:60:B7:BE:38:DD:7B:E5:3A:A5:D4:88:55:D0:AD:86:51:DD:B5:87 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d076:6000::/48 Signature Algorithm: sha256WithRSAEncryption 0b:22:94:cf:7e:42:f1:07:c6:30:63:10:63:9b:f3:a3:0a:d8: a3:da:14:3d:ba:47:45:f4:9c:09:1e:d4:39:02:ae:2e:55:37: 81:a8:99:e4:8b:f1:4d:6b:78:b5:63:ec:95:1e:9c:f2:50:e2: 5b:71:67:52:cc:a2:80:5d:b6:c1:f5:ea:1c:94:45:0f:f8:59: e2:ca:6e:e3:2a:70:78:d4:d2:ba:b6:d8:65:65:88:0a:c6:fd: 18:29:22:e3:f1:8f:39:04:bd:cd:7c:b5:7b:12:8c:2a:ee:14: c4:81:05:07:f9:aa:e8:85:9a:26:9c:f1:2d:ec:93:5d:5c:bb: 2d:57:e0:6b:92:d8:26:b8:0b:cd:f7:5f:6f:62:3e:14:ea:69: 0a:7d:3a:27:5e:01:a6:e1:31:40:ef:cd:10:db:79:e4:2c:96: 8a:09:8f:34:c8:b4:2e:e6:5e:2f:93:29:90:f9:ac:d5:e2:22: 5c:91:82:08:a6:f5:40:90:4c:5c:50:65:48:0f:48:15:fb:6e: 98:18:6a:5b:02:4f:cb:20:47:6c:30:66:cf:c2:b0:f8:94:17: b8:df:42:b6:d5:12:c1:11:70:69:53:4f:88:59:4c:29:db:12: 1d:13:e7:c1:a2:e6:dc:92:65:82:be:6f:e6:4e:29:61:0a:73: c3:38:4b:04 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUC1IKm53dCApsYfOLy1cpeiQC5KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDUwMTAwMDlaFw0yNjAzMDUyMzU5NTlaMHoxSTBHBgNV BAUTQGViMzQ2YTAwNzVkZTZlODNmZGVlNTJlN2QxOWU3MjVkNjdjNzQ3YWQwMjVl NzFmZDNmNDRmMGVjOTViYzhmNjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGdU2zlO9IBtxcDomOHNX1pKpst/dgnHDhrw/KtFrzAvUJKvUbNtkNJchGU j/ngB1STXl5upaoqdOKgE4+r8g6AhenpoWppMJ3m5APPv93BgcolJ938j0u6vMjH j3u0NDXGPvgYWfku9ujK3K3t52rEkcqZaY63OlFoBSQXqsCBzAoP1y/7FHtRD8To ay+T+YT4aycn/EY+EaN+I38H07EyMQnYoVvMPPYZ9lfAkai2Kr0J9unjDvOVOLtw Bzd2xNmCHy0fHh5XpL1D9Un426gZEJoDfDffB0x9h7sR1gqjUHl1JK9pMnhUX5Ab +1g8vEpt+CQtapcL8ymtOSlzJPMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTmYLe+ ON175Tql1IhV0K2GUd21hzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTliMjRhZDEtMDY5Yi00OTE2LTlkMzMtMzFhZDY5MzdmYjJmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HZg ADANBgkqhkiG9w0BAQsFAAOCAQEACyKUz35C8QfGMGMQY5vzowrYo9oUPbpHRfSc CR7UOQKuLlU3gaiZ5IvxTWt4tWPslR6c8lDiW3FnUsyigF22wfXqHJRFD/hZ4spu 4ypweNTSurbYZWWICsb9GCki4/GPOQS9zXy1exKMKu4UxIEFB/mq6IWaJpzxLeyT XVy7LVfga5LYJrgLzfdfb2I+FOppCn06J14BpuExQO/NENt55CyWigmPNMi0LuZe L5MpkPms1eIiXJGCCKb1QJBMXFBlSA9IFftumBhqWwJPyyBHbDBmz8Kw+JQXuN9C ttUSwRFwaVNPiFlMKdsSHRPnwaLm3JJlgr5v5k4pYQpzwzhLBA== -----END CERTIFICATE-----Generated at Sun Dec 7 08:41:17 2025 by rpki-client