This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa File: 11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa (raw, json) Hash identifier: AO/85bkKUj6juPX7C8N9nrSKCxGzLCXOkeSePDnY7Mo= Subject key identifier: 26:84:02:91:99:98:54:E6:A2:1E:92:59:B1:66:3F:B3:81:1F:4E:BF Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 08513F7F39FD71E8324CCA03E923B3D3A7A7E778 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa Signing time: Sat 15 Nov 2025 06:31:08 +0000 ROA not before: Sat 15 Nov 2025 06:31:08 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d01b:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:51:3f:7f:39:fd:71:e8:32:4c:ca:03:e9:23:b3:d3:a7:a7:e7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:31:08 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=08441cb224a2bed8af0601eae9dd2d4f52e258d7102cadd9e2ff7b000a114146, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:6c:50:95:5f:1d:00:9e:eb:a8:1e:2f:e9: 34:e3:24:52:11:fc:40:6f:20:66:82:60:0a:74:c1: bf:ca:fd:2b:4d:ea:dd:b9:c4:db:75:cb:0a:e0:84: 52:c8:13:c3:22:44:e2:91:69:da:2b:9f:5c:84:a9: eb:22:91:d6:d3:2d:88:6b:c6:25:dd:b0:a6:0b:cd: 6d:98:42:86:7d:ef:ff:74:6c:9b:32:79:fc:9c:99: 31:7a:39:dc:4d:2d:0b:f1:67:10:ef:b7:e4:ca:b9: 31:c0:36:9e:17:35:3e:e0:21:d6:5c:d6:4e:42:62: 18:2c:37:09:c0:43:e6:21:4c:58:4f:9b:bd:07:ef: 5d:b4:55:5a:d0:80:b9:6c:3c:8c:99:9d:16:32:cf: 0b:4c:42:72:c0:82:15:e4:23:67:a2:e4:a4:9d:d7: 05:48:3d:cd:10:4d:b9:b0:00:4f:54:61:21:54:84: 80:2a:ef:43:c9:32:39:3a:51:61:75:7e:b5:fe:19: 70:f9:d0:3b:92:4f:c8:43:88:42:76:04:0b:21:2c: ae:fc:5d:6c:c6:1f:07:75:c6:d7:d5:8d:7c:26:88: 64:95:08:81:bd:a1:89:df:c0:f5:31:02:2e:06:11: 78:01:14:98:78:a4:9b:ec:2b:4c:38:08:1e:6f:e8: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:84:02:91:99:98:54:E6:A2:1E:92:59:B1:66:3F:B3:81:1F:4E:BF X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d01b:800::/37 Signature Algorithm: sha256WithRSAEncryption 8d:bb:59:2a:80:bb:2c:f4:0f:11:42:7a:d6:f5:40:9c:d6:cb: b2:de:d7:c0:00:47:53:1b:d8:99:59:17:21:be:e7:3f:51:63: d0:80:7a:3a:5c:a7:e1:93:04:e5:a2:0d:ec:b2:73:6d:0a:9a: e6:ea:be:a9:17:ed:3b:9e:fb:74:93:d0:f4:81:2e:33:ba:6a: f4:2a:4b:20:e0:9c:3c:bf:ba:ff:7d:1a:07:fa:1c:80:25:79: 4b:85:55:5f:94:a1:ef:4f:db:13:c5:5a:fc:a4:f7:5c:82:ec: 6e:ef:2b:ab:6b:66:63:32:e3:87:ae:98:34:4f:bd:ee:75:f2: 8c:39:f0:88:28:fd:d3:c7:94:52:92:19:ae:a4:d1:7d:36:1c: f3:53:0c:36:03:58:36:b6:aa:f0:8a:48:01:8d:d9:96:d9:66: d7:93:0a:2b:52:b4:bd:1a:e2:03:26:55:90:2a:18:4f:be:c6: 51:ad:94:af:77:28:3a:24:e7:f9:5e:a0:ad:7f:6b:f4:ae:0a: 65:45:ef:d7:4d:e1:19:4d:7e:80:23:59:6b:64:97:e9:81:c6: f6:eb:33:13:c3:60:37:fa:6b:f3:95:70:b3:98:de:1a:cd:5b: b1:a8:6d:69:99:6c:fb:79:66:e1:f1:52:38:5a:9c:73:31:c3: 87:c3:90:1f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUCFE/fzn9cegyTMoD6SOz06en53gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMxMDhaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDA4NDQxY2IyMjRhMmJlZDhhZjA2MDFlYWU5ZGQyZDRmNTJlMjU4ZDcxMDJj YWRkOWUyZmY3YjAwMGExMTQxNDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp3bFCVXx0AnuuoHi/pNOMkUhH8QG8gZoJgCnTBv8r9K03q3bnE23XLCuCE UsgTwyJE4pFp2iufXISp6yKR1tMtiGvGJd2wpgvNbZhChn3v/3RsmzJ5/JyZMXo5 3E0tC/FnEO+35Mq5McA2nhc1PuAh1lzWTkJiGCw3CcBD5iFMWE+bvQfvXbRVWtCA uWw8jJmdFjLPC0xCcsCCFeQjZ6LkpJ3XBUg9zRBNubAAT1RhIVSEgCrvQ8kyOTpR YXV+tf4ZcPnQO5JPyEOIQnYECyEsrvxdbMYfB3XG19WNfCaIZJUIgb2hid/A9TEC LgYReAEUmHikm+wrTDgIHm/ouzcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQmhAKR mZhU5qIeklmxZj+zgR9OvzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTFjMTUwZmMtZGNiNS00MDJjLTliZjAtNWE0NmMyYjU4ZDM1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0BsI MA0GCSqGSIb3DQEBCwUAA4IBAQCNu1kqgLss9A8RQnrW9UCc1suy3tfAAEdTG9iZ WRchvuc/UWPQgHo6XKfhkwTlog3ssnNtCprm6r6pF+07nvt0k9D0gS4zumr0Kksg 4Jw8v7r/fRoH+hyAJXlLhVVflKHvT9sTxVr8pPdcguxu7yura2ZjMuOHrpg0T73u dfKMOfCIKP3Tx5RSkhmupNF9NhzzUww2A1g2tqrwikgBjdmW2WbXkworUrS9GuID JlWQKhhPvsZRrZSvdyg6JOf5XqCtf2v0rgplRe/XTeEZTX6AI1lrZJfpgcb26zMT w2A3+mvzlXCzmN4azVuxqG1pmWz7eWbh8VI4WpxzMcOHw5Af -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:52 2025 by rpki-client