This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa File: 1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa (raw, json) Hash identifier: A6Bw3+PdFKqYtuG0osovIQwdfMV2Ebr6pOckflvRMto= Subject key identifier: 6E:B7:9B:0F:94:BB:CF:3D:DB:E3:1E:CD:87:92:B2:13:CC:99:98:86 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 382AC73072EAD76B352214EB93D9E295ED3440F4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa Signing time: Sat 15 Nov 2025 05:20:43 +0000 ROA not before: Sat 15 Nov 2025 05:20:43 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06f:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2a:c7:30:72:ea:d7:6b:35:22:14:eb:93:d9:e2:95:ed:34:40:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:20:43 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=828ed5f863ff18731dedaa87f7c65d527fde895fd6bdb1ef237f3db2a673fe3e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:a2:3c:ac:7a:6b:53:c2:13:4c:98:84:88: 38:b0:de:59:5c:24:a0:00:13:af:21:bc:1e:9e:c2: 04:80:da:ad:29:74:69:27:a5:1d:c6:e4:dc:66:d1: da:60:fe:bd:62:61:26:49:cd:39:e4:0f:50:5e:60: 30:97:58:f1:a0:64:7e:f3:f3:f6:41:a5:7b:f2:f5: 9b:41:9d:aa:6c:62:8a:6e:61:c5:05:a0:cb:ef:a6: fd:e8:88:c3:65:fe:e2:6f:ac:4d:41:a0:bd:f8:b3: 85:77:eb:a3:77:96:53:61:f5:70:ea:f4:14:fd:58: ca:3a:ba:38:ed:b1:b0:3c:b5:89:b6:bd:01:a7:06: 35:3e:95:21:2d:ca:e7:17:37:b5:6c:f7:fe:f7:c1: 75:05:57:29:a8:14:85:f0:7f:ca:34:1f:f0:08:8d: 9a:24:c6:a2:fb:85:95:42:3c:ea:12:05:c3:c2:0e: 16:4c:bb:3a:02:4b:d0:f2:da:7f:d8:6a:d2:77:c3: 3b:8e:22:d5:5f:35:6c:38:77:62:d8:cd:5f:77:0f: 89:e0:d9:db:bb:69:d1:99:ee:fc:8a:97:35:dc:10: d7:b2:d2:a7:5f:66:5b:f6:7d:00:fb:1b:3d:64:20: ab:16:2a:d7:ab:85:b0:1a:76:7f:f3:81:32:58:35: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:9B:0F:94:BB:CF:3D:DB:E3:1E:CD:87:92:B2:13:CC:99:98:86 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:e000::/40 Signature Algorithm: sha256WithRSAEncryption c1:43:7e:1f:51:44:d2:45:c2:5a:ca:7a:03:1c:71:16:c5:dc: 6d:f1:c3:3c:72:11:76:b6:a3:88:00:a4:ee:e4:4a:b4:40:5e: c7:52:1c:c1:80:32:05:46:55:5b:a6:e3:4c:b1:18:03:d2:d2: 8d:f2:94:f7:c3:c4:34:f9:ba:c6:3e:f7:1d:26:06:49:f9:2e: 3c:e0:f0:e4:74:bf:65:c8:88:ef:5f:08:9b:34:45:c9:10:6b: 2c:13:e9:0a:3d:44:aa:36:3e:d5:4b:c2:3a:b3:0f:b1:e1:0d: 2e:7f:c3:bd:50:a1:6a:e0:c3:55:08:d5:6c:23:08:d7:ff:b1: ac:f1:f3:f6:2c:84:fa:e8:f4:aa:01:de:79:b1:13:f6:c6:aa: 76:04:7c:2e:a2:cc:2f:c6:03:45:97:9f:69:c1:ef:a0:0b:4a: 28:04:62:d5:a6:f3:7c:13:a7:11:bc:cc:15:58:98:08:22:a4: cd:b7:c4:6e:ee:80:da:3d:ec:20:47:22:1d:bb:ab:1b:db:bf: 1d:84:b6:61:d6:2a:a8:d3:cc:0e:a3:a9:6d:1b:bb:15:41:f0: a3:4c:15:9e:e2:20:eb:ac:87:55:bd:ca:5a:94:10:c6:55:1c: 19:10:5b:52:22:3e:b4:99:f5:e4:a9:11:10:b5:45:2a:71:30: 35:b1:dc:ff -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUOCrHMHLq12s1IhTrk9nile00QPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTIwNDNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDgyOGVkNWY4NjNmZjE4NzMxZGVkYWE4N2Y3YzY1ZDUyN2ZkZTg5NWZkNmJk YjFlZjIzN2YzZGIyYTY3M2ZlM2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvyojysemtTwhNMmISIOLDeWVwkoAATryG8Hp7CBIDarSl0aSelHcbk3GbR 2mD+vWJhJknNOeQPUF5gMJdY8aBkfvPz9kGle/L1m0Gdqmxiim5hxQWgy++m/eiI w2X+4m+sTUGgvfizhXfro3eWU2H1cOr0FP1Yyjq6OO2xsDy1iba9AacGNT6VIS3K 5xc3tWz3/vfBdQVXKagUhfB/yjQf8AiNmiTGovuFlUI86hIFw8IOFky7OgJL0PLa f9hq0nfDO44i1V81bDh3YtjNX3cPieDZ27tp0Znu/IqXNdwQ17LSp19mW/Z9APsb PWQgqxYq16uFsBp2f/OBMlg1sj8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRut5sP lLvPPdvjHs2HkrITzJmYhjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWNjZmEzNjQtMDdhYi00YTVlLTgxYTktOTlmOWQ2YjNhMDY3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G/g MA0GCSqGSIb3DQEBCwUAA4IBAQDBQ34fUUTSRcJaynoDHHEWxdxt8cM8chF2tqOI AKTu5Eq0QF7HUhzBgDIFRlVbpuNMsRgD0tKN8pT3w8Q0+brGPvcdJgZJ+S484PDk dL9lyIjvXwibNEXJEGssE+kKPUSqNj7VS8I6sw+x4Q0uf8O9UKFq4MNVCNVsIwjX /7Gs8fP2LIT66PSqAd55sRP2xqp2BHwuoswvxgNFl59pwe+gC0ooBGLVpvN8E6cR vMwVWJgIIqTNt8Ru7oDaPewgRyIdu6sb278dhLZh1iqo08wOo6ltG7sVQfCjTBWe 4iDrrIdVvcpalBDGVRwZEFtSIj60mfXkqREQtUUqcTA1sdz/ -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:11 2025 by rpki-client