This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa File: fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa (raw, json) Hash identifier: pIxZb+5GLnQWELmkY776hTy1Y8qCPJvXIAP4sJbucyM= Subject key identifier: E9:7F:FD:67:DE:C1:0E:41:22:8D:17:BC:55:A2:CA:36:6D:2D:21:17 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1326E3D44A4E7AD7DB944464D09C782258A5C617 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa Signing time: Tue 25 Nov 2025 20:10:05 +0000 ROA not before: Tue 25 Nov 2025 20:10:05 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d073:e040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:26:e3:d4:4a:4e:7a:d7:db:94:44:64:d0:9c:78:22:58:a5:c6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:10:05 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=f0f554899912bdf06330f2110aed9f575ff0ca73ad0d98d3dca36f97ae9cc9f7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:c2:66:f5:7d:47:2b:ca:bb:1a:07:d2:a1: 37:62:3f:58:a6:4c:5e:9f:6b:72:7d:bb:15:79:8f: 57:8d:37:70:19:86:6a:ee:2a:a7:04:c6:c4:63:fe: c9:16:9a:c2:83:00:4d:4f:35:59:69:76:0a:0f:cf: 01:1d:e0:ea:c1:96:6d:73:e0:a5:02:d9:68:df:11: 58:90:ac:c3:cb:e5:8b:d6:f8:d8:5e:05:09:7f:bd: 3b:07:84:de:18:d4:26:71:c1:36:a9:1e:78:6e:03: e7:bd:0d:08:34:cf:5f:a0:a6:5a:8c:37:48:be:e1: ae:d3:fb:da:ba:57:67:af:c3:15:83:e4:6e:ec:97: fd:6e:5d:08:a7:89:65:b3:62:91:ae:4c:12:cd:40: aa:6e:93:d7:8a:d0:42:7b:90:48:96:5b:00:53:3b: 16:be:d2:99:2c:66:b8:f6:ab:94:1b:32:d3:7a:b4: 29:6c:d3:e4:e6:55:58:aa:04:bd:b3:b1:88:47:88: 71:0b:85:de:78:6e:2c:e3:e4:e9:71:52:6e:4c:01: 36:db:14:93:40:8d:36:1b:7a:b6:98:67:7e:ad:83: 90:a5:ab:a3:69:bc:b3:6e:4f:75:d3:5b:d5:9a:25: a6:e3:88:81:b3:9d:ec:1b:01:8b:91:f0:f1:1f:59: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:FD:67:DE:C1:0E:41:22:8D:17:BC:55:A2:CA:36:6D:2D:21:17 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d073:e040::/46 Signature Algorithm: sha256WithRSAEncryption 19:54:e5:a9:6c:1f:32:fe:5e:cf:a5:49:14:90:46:07:9a:78: 09:1f:de:98:37:95:cf:1d:d5:22:7e:f1:47:08:cf:df:1c:38: 75:f5:6e:58:ff:9b:b6:50:bc:9e:a9:a7:7b:23:26:9a:bb:c5: 94:01:d0:ff:26:ea:7d:43:18:fc:cb:21:42:88:c6:07:d0:65: 18:59:90:83:22:b5:fe:5a:d8:36:a8:00:b6:04:27:ad:a0:33: 57:70:d7:67:c0:f4:8e:f5:eb:e8:5e:7b:c9:13:15:9a:8d:7b: ad:a3:5b:6b:ff:1a:39:ef:e4:da:6f:86:a5:56:48:25:e6:0d: d4:72:1b:48:71:64:89:89:4e:b7:d2:60:3d:08:09:99:75:ae: 41:c9:63:09:64:af:4e:82:5c:d0:fe:5a:49:05:42:ee:9d:8f: 9b:24:1d:b8:e7:7d:f9:e8:84:b9:ef:b4:9d:0e:08:df:19:dd: 2f:2e:74:c1:d0:49:ac:f5:15:dd:cf:88:15:58:e5:8e:cc:6f: 51:c0:42:b7:7d:dc:8a:f5:4e:13:8e:f9:3e:78:0f:d9:86:16: 28:33:20:fc:dc:b9:77:ee:18:7d:58:c8:58:dc:41:9c:49:6e: e5:5f:de:50:8b:59:e8:33:fc:c3:f0:24:06:d5:bc:4e:38:00: 12:28:04:2b -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUEybj1EpOetfblERk0Jx4IlilxhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDEwMDVaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQGYwZjU1NDg5OTkxMmJkZjA2MzMwZjIxMTBhZWQ5ZjU3NWZmMGNhNzNhZDBk OThkM2RjYTM2Zjk3YWU5Y2M5ZjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJulwmb1fUcryrsaB9KhN2I/WKZMXp9rcn27FXmPV403cBmGau4qpwTGxGP+ yRaawoMATU81WWl2Cg/PAR3g6sGWbXPgpQLZaN8RWJCsw8vli9b42F4FCX+9OweE 3hjUJnHBNqkeeG4D570NCDTPX6CmWow3SL7hrtP72rpXZ6/DFYPkbuyX/W5dCKeJ ZbNika5MEs1Aqm6T14rQQnuQSJZbAFM7Fr7SmSxmuParlBsy03q0KWzT5OZVWKoE vbOxiEeIcQuF3nhuLOPk6XFSbkwBNtsUk0CNNht6tphnfq2DkKWro2m8s25PddNb 1ZolpuOIgbOd7BsBi5Hw8R9ZPakCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTpf/1n 3sEOQSKNF7xVoso2bS0hFzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmU2ZmNiOWEtOGNhNy00NjgxLTgyZTYtNDBlYTVmODAxOTgwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HPg QDANBgkqhkiG9w0BAQsFAAOCAQEAGVTlqWwfMv5ez6VJFJBGB5p4CR/emDeVzx3V In7xRwjP3xw4dfVuWP+btlC8nqmneyMmmrvFlAHQ/ybqfUMY/MshQojGB9BlGFmQ gyK1/lrYNqgAtgQnraAzV3DXZ8D0jvXr6F57yRMVmo17raNba/8aOe/k2m+GpVZI JeYN1HIbSHFkiYlOt9JgPQgJmXWuQcljCWSvToJc0P5aSQVC7p2PmyQduOd9+eiE ue+0nQ4I3xndLy50wdBJrPUV3c+IFVjljsxvUcBCt33civVOE475PngP2YYWKDMg /Ny5d+4YfVjIWNxBnElu5V/eUItZ6DP8w/AkBtW8TjgAEigEKw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:39 2025 by rpki-client