This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa File: 05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa (raw, json) Hash identifier: jUdF3Pl07jizkILJRgTILdvpY+JWZj7mFheNC1q/Yn4= Subject key identifier: 0D:23:82:6F:A9:88:9E:48:74:8E:8D:59:FB:DC:0B:80:7E:36:FE:18 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 42B601D5F20EA386C4019C8094D32AA2A65BF89C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa Signing time: Sat 15 Nov 2025 06:30:51 +0000 ROA not before: Sat 15 Nov 2025 06:30:51 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b6:01:d5:f2:0e:a3:86:c4:01:9c:80:94:d3:2a:a2:a6:5b:f8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:51 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=c72515a6f1a329760ca0e044abc30879f501f66d0e1c1452159beba58fd37340, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:67:68:14:70:19:f1:a6:1c:a3:8b:84:1f: 88:24:df:2f:2d:b9:3d:56:e3:de:06:2f:a0:5f:a3: a3:ba:65:e6:aa:55:3a:db:49:aa:0a:ce:de:21:84: 88:8c:23:34:1c:68:fb:96:c7:50:8b:50:2b:26:5b: 2a:b7:5c:fb:c2:56:50:16:75:4e:c2:38:b0:6b:48: 77:db:dc:23:fa:72:ba:53:d8:34:c0:b3:39:3d:5b: 70:18:ba:9e:27:3c:3f:c5:05:42:0c:f0:5c:99:71: 17:b5:2e:ab:bc:d8:35:b7:1e:cf:62:89:45:03:f1: e3:d0:1a:9f:e8:c2:29:37:8e:8d:56:58:b2:53:c4: 7c:83:89:e0:7c:06:06:9b:84:38:62:a6:aa:85:1d: a6:98:8c:36:59:40:c0:1c:81:0b:26:77:fc:c1:6e: 2e:98:16:9d:71:ad:0c:e8:04:b4:ae:40:4f:6a:8b: eb:d2:98:ef:7a:e6:5c:88:d3:b1:da:86:f8:19:2f: c4:6c:bc:6d:ad:1b:3d:95:0f:c0:8f:e0:ad:c3:d4: d4:56:db:6d:3a:60:9a:cf:2b:20:e0:1d:73:12:be: 6e:b0:ce:65:93:8b:7c:3b:b5:26:e6:5f:de:70:aa: d4:ba:f6:31:a2:df:1c:26:4d:4c:c5:d5:47:e5:9b: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:23:82:6F:A9:88:9E:48:74:8E:8D:59:FB:DC:0B:80:7E:36:FE:18 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:8050::/48 Signature Algorithm: sha256WithRSAEncryption 95:b3:2b:32:c0:f1:a6:b2:90:4d:e2:5d:aa:10:cd:4b:f3:d6: 96:87:c3:aa:69:22:a9:85:da:6d:2b:e8:e5:1c:d6:a3:0e:05: 39:f1:6b:c8:2e:ce:e7:37:22:48:24:70:54:64:66:df:34:8e: b0:59:7b:09:f5:bd:68:36:0f:40:2b:33:00:2f:4d:3c:4d:22: 9c:39:6e:b6:bb:54:bc:82:b1:7c:91:d9:bc:93:22:ed:30:c5: 68:98:3a:2a:a4:f6:d8:ba:74:a7:3f:e6:15:ed:02:2d:6e:36: cd:df:63:79:0f:83:c8:b0:6b:09:9c:23:90:79:fe:c8:19:fd: 0c:47:30:f2:7e:d3:6b:c7:ba:0f:c1:c3:23:a2:23:7f:08:09: 31:df:a3:28:1f:7f:28:48:0a:6c:cd:b9:13:3d:99:17:f1:08: 6b:14:f3:c9:38:b0:ef:79:05:9c:1e:dc:a3:ea:85:06:3d:92: df:13:9d:0e:81:41:83:28:97:d6:ea:d3:47:f6:9b:67:6f:5b: 8e:2d:9e:f8:ae:c7:38:5a:3c:7a:53:80:6c:b4:36:3b:44:5b: bc:9c:f9:9a:8a:df:71:b8:d8:43:88:9e:92:c2:61:a4:7b:1e: 75:bd:89:88:c6:14:93:03:8a:bd:e5:ec:e5:bc:a8:57:23:00: bf:3d:37:5f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUQrYB1fIOo4bEAZyAlNMqoqZb+JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwNTFaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGM3MjUxNWE2ZjFhMzI5NzYwY2EwZTA0NGFiYzMwODc5ZjUwMWY2NmQwZTFj MTQ1MjE1OWJlYmE1OGZkMzczNDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmjZ2gUcBnxphyji4QfiCTfLy25PVbj3gYvoF+jo7pl5qpVOttJqgrO3iGE iIwjNBxo+5bHUItQKyZbKrdc+8JWUBZ1TsI4sGtId9vcI/pyulPYNMCzOT1bcBi6 nic8P8UFQgzwXJlxF7Uuq7zYNbcez2KJRQPx49Aan+jCKTeOjVZYslPEfIOJ4HwG BpuEOGKmqoUdppiMNllAwByBCyZ3/MFuLpgWnXGtDOgEtK5AT2qL69KY73rmXIjT sdqG+BkvxGy8ba0bPZUPwI/grcPU1FbbbTpgms8rIOAdcxK+brDOZZOLfDu1JuZf 3nCq1Lr2MaLfHCZNTMXVR+WbsqUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQNI4Jv qYieSHSOjVn73AuAfjb+GDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDVmN2FiM2YtY2I3My00OWE2LWFhZGEtNDQwYmY0ZGJmM2I1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA UDANBgkqhkiG9w0BAQsFAAOCAQEAlbMrMsDxprKQTeJdqhDNS/PWlofDqmkiqYXa bSvo5RzWow4FOfFryC7O5zciSCRwVGRm3zSOsFl7CfW9aDYPQCszAC9NPE0inDlu trtUvIKxfJHZvJMi7TDFaJg6KqT22Lp0pz/mFe0CLW42zd9jeQ+DyLBrCZwjkHn+ yBn9DEcw8n7Ta8e6D8HDI6IjfwgJMd+jKB9/KEgKbM25Ez2ZF/EIaxTzyTiw73kF nB7co+qFBj2S3xOdDoFBgyiX1urTR/abZ29bji2e+K7HOFo8elOAbLQ2O0RbvJz5 morfcbjYQ4ieksJhpHsedb2JiMYUkwOKveXs5byoVyMAvz03Xw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:16 2025 by rpki-client