This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa File: c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa (raw, json) Hash identifier: 7Q4pdn2AKVPtF47B4jPCjEsWMI8n+DHo4/aOdulys5c= Subject key identifier: 5D:9F:58:B5:A5:56:C8:75:3D:4A:80:97:EF:6F:A0:EA:DF:54:DF:7D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5BDEBD3D18ADA1435E4C1266CC0058514565BC23 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa Signing time: Wed 10 Dec 2025 06:11:04 +0000 ROA not before: Wed 10 Dec 2025 06:11:04 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d018::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:de:bd:3d:18:ad:a1:43:5e:4c:12:66:cc:00:58:51:45:65:bc:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:11:04 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=1fec5fe3b0eff7fcd8a6ea27a75cf407a590417550b3344fccdd418083bf6fef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:51:e3:4a:5e:fc:86:79:28:fe:fb:b7:c8: 03:c1:45:65:5d:b0:c5:d5:91:ce:47:a4:d5:87:b1: 33:e6:8f:35:7f:61:5b:af:da:3c:07:3e:91:0e:af: 3c:00:53:d8:88:29:67:66:76:7e:ca:8e:23:96:06: 81:09:09:80:13:53:1b:8c:2e:e2:69:4f:00:1f:b1: d6:d4:24:e6:c8:d7:7b:d7:82:8b:0e:a9:84:59:21: a4:61:eb:e1:43:54:8f:cf:09:16:68:9f:80:cf:a9: 7e:10:09:29:5a:48:51:81:d3:72:91:b0:9d:43:8e: 00:36:da:b7:97:24:40:95:c3:54:c7:be:d2:f9:96: 4e:9c:bd:40:cd:3a:d0:ec:15:77:11:a5:1b:cf:71: d1:01:a8:72:57:b2:cf:2c:44:cd:f8:18:73:65:e6: 9d:1c:37:15:de:73:53:f0:f8:20:aa:cf:d5:81:2d: 23:ff:6e:f5:c9:fd:82:12:89:83:21:ea:67:ef:f8: 86:a1:d7:09:c4:29:0b:22:2d:38:66:db:65:e3:86: 70:00:ae:65:95:6e:45:5f:21:6a:7f:96:2f:4b:2c: 9f:e1:fe:8b:f6:5c:2b:1e:1f:60:9e:14:09:4b:ce: 2e:e9:02:e0:cc:6a:84:9b:46:c7:e8:36:a6:ba:54: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9F:58:B5:A5:56:C8:75:3D:4A:80:97:EF:6F:A0:EA:DF:54:DF:7D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d018::/38 Signature Algorithm: sha256WithRSAEncryption 17:e6:d5:4f:81:37:67:6c:30:84:99:51:20:d6:10:ba:86:bc: 24:65:90:50:cc:28:da:6a:59:c1:80:8d:a7:8a:18:7e:7f:fa: 85:15:29:73:6a:9a:ed:54:cb:b0:34:a8:e3:a0:6c:90:48:d0: a5:60:1b:2b:9b:21:1f:e7:b6:3d:98:5a:84:88:55:47:a7:03: 05:b1:9a:c4:87:85:7d:bc:73:c6:05:93:bb:03:27:81:73:b4: 8d:39:2a:0f:9e:ce:0c:e3:96:ff:30:37:19:7a:b5:3d:7f:b4: 4a:ec:dd:9e:f8:41:9b:98:59:ef:a6:9a:a9:8c:12:95:9a:0a: 48:a4:e9:fe:ea:f5:88:d4:1e:ce:d5:4b:95:1b:03:3b:69:ff: 00:66:b8:32:4e:f4:ab:26:5e:24:9e:0c:ce:90:32:f4:71:30: 0e:41:1c:3d:3c:01:4c:c2:2c:fc:e0:0c:68:51:4c:4f:55:1d: 74:d2:8d:19:cd:db:e5:c8:31:e5:07:84:70:5c:f8:5a:05:e0: 94:ed:d7:d3:93:42:73:30:96:7c:99:19:78:ce:d8:b5:e4:85: e3:07:2b:3a:83:26:ab:4a:ba:2c:8b:ff:52:79:e2:6b:d4:77: 88:fd:94:75:4a:ee:de:e9:71:7a:81:e2:03:42:57:37:ff:16: 02:ac:71:4f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUW969PRitoUNeTBJmzABYUUVlvCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjExMDRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDFmZWM1ZmUzYjBlZmY3ZmNkOGE2ZWEyN2E3NWNmNDA3YTU5MDQxNzU1MGIz MzQ0ZmNjZGQ0MTgwODNiZjZmZWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI3RUeNKXvyGeSj++7fIA8FFZV2wxdWRzkek1YexM+aPNX9hW6/aPAc+kQ6v PABT2IgpZ2Z2fsqOI5YGgQkJgBNTG4wu4mlPAB+x1tQk5sjXe9eCiw6phFkhpGHr 4UNUj88JFmifgM+pfhAJKVpIUYHTcpGwnUOOADbat5ckQJXDVMe+0vmWTpy9QM06 0OwVdxGlG89x0QGocleyzyxEzfgYc2XmnRw3Fd5zU/D4IKrP1YEtI/9u9cn9ghKJ gyHqZ+/4hqHXCcQpCyItOGbbZeOGcACuZZVuRV8han+WL0ssn+H+i/ZcKx4fYJ4U CUvOLukC4MxqhJtGx+g2prpUDX8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRdn1i1 pVbIdT1KgJfvb6Dq31TffTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzZjZTk2YTQtZWI2Yi00YmVkLWIxNWItYjFlM2NkY2FjNDE4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BgA MA0GCSqGSIb3DQEBCwUAA4IBAQAX5tVPgTdnbDCEmVEg1hC6hrwkZZBQzCjaalnB gI2nihh+f/qFFSlzaprtVMuwNKjjoGyQSNClYBsrmyEf57Y9mFqEiFVHpwMFsZrE h4V9vHPGBZO7AyeBc7SNOSoPns4M45b/MDcZerU9f7RK7N2e+EGbmFnvppqpjBKV mgpIpOn+6vWI1B7O1UuVGwM7af8AZrgyTvSrJl4kngzOkDL0cTAOQRw9PAFMwiz8 4AxoUUxPVR100o0ZzdvlyDHlB4RwXPhaBeCU7dfTk0JzMJZ8mRl4zti15IXjBys6 gyarSrosi/9SeeJr1HeI/ZR1Su7e6XF6geIDQlc3/xYCrHFP -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:29 2026 by rpki-client