This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa File: 2e678418-1e4d-4843-bded-3c28c17eebf8.roa (raw, json) Hash identifier: TxUtvwNZ28rk/EbWoMqh50IBf5ySvIis7uK1LjL1sd8= Subject key identifier: E7:25:A1:07:2A:12:8E:08:1A:D8:2B:C3:01:0F:0B:23:48:6F:2C:A8 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 569E80F84DB1862F645E898F7189056A549DE98A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa Signing time: Sat 29 Nov 2025 03:00:28 +0000 ROA not before: Sat 29 Nov 2025 03:00:28 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d059:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9e:80:f8:4d:b1:86:2f:64:5e:89:8f:71:89:05:6a:54:9d:e9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:28 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=0774350d5966d15b63a0b1b25448a14cc1797c205ccd1e03a535caf6d8f19224, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:72:52:22:b7:0a:95:74:ea:4d:a5:56:7a: 47:0e:1b:43:cc:e3:ec:26:6f:19:7f:7e:f5:da:7a: f6:3c:53:1c:d8:1f:2a:06:25:6b:69:2c:a2:d6:c1: d4:90:c1:8b:a0:ab:81:a1:38:39:1d:52:52:f7:3a: 23:32:fc:07:0a:30:9b:cc:ca:4d:87:16:b6:4e:3b: 69:67:d4:05:e9:bb:1e:96:58:49:e3:35:98:82:f7: 56:33:18:3d:38:61:f4:25:5f:88:22:11:5a:51:70: 82:2e:1d:56:ce:86:30:3f:13:ea:4d:2b:97:fa:35: 92:7b:67:f5:95:c2:fd:f6:b4:ca:72:fe:9f:ad:b2: dc:3a:c0:64:61:e3:12:6d:0e:f3:77:a1:50:da:44: a9:f6:00:28:5b:8b:0b:ca:bc:40:e4:6d:51:5f:a9: 97:2a:c0:37:05:a8:ee:72:36:32:30:25:af:9d:05: 6d:2c:89:d7:dc:b6:4d:b0:50:94:1c:c5:42:74:ed: 11:9a:f8:b1:83:51:72:c3:9a:ed:1c:53:57:2f:37: 89:15:ba:cf:7a:cb:be:65:17:36:c3:0d:76:a4:e3: ec:c6:6a:e5:b1:5c:be:13:74:5d:84:83:82:b1:31: 26:0e:a2:2b:e7:01:78:3e:76:18:0d:5e:3c:87:95: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:A1:07:2A:12:8E:08:1A:D8:2B:C3:01:0F:0B:23:48:6F:2C:A8 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e678418-1e4d-4843-bded-3c28c17eebf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d059:5000::/40 Signature Algorithm: sha256WithRSAEncryption bc:af:6f:cb:4f:3e:b1:23:65:5c:f8:93:1b:14:dc:20:5e:4b: cf:30:e0:1f:1e:e2:77:8c:8b:57:c1:51:19:48:95:ea:6e:40: 33:8d:4b:09:7c:1b:e7:6a:2e:8f:36:35:0d:9a:5f:93:09:51: ba:2d:0a:ab:b6:82:f8:49:68:20:52:eb:62:47:2a:e7:9e:8d: 17:5b:ba:9f:3d:4b:5d:78:9f:64:3e:80:d1:ac:00:bb:29:99: aa:ca:6f:49:93:10:a9:73:70:26:24:25:c5:02:fd:8b:af:20: 1e:d2:33:cc:91:b7:9b:80:60:f7:7c:ba:23:31:83:5d:60:12: f3:ea:0d:56:c3:b4:46:4b:95:97:23:1f:5d:d5:c5:fc:d7:4d: 26:a1:fd:0a:91:e8:3e:4c:08:95:95:4e:88:7f:f4:57:1b:a9: 0f:60:7c:b3:12:ca:21:d1:6a:46:4c:5e:19:94:89:8e:dd:b2: 02:69:bb:53:fb:4e:31:a6:78:26:3b:6f:63:03:02:3e:95:44: aa:a3:fc:15:07:40:c7:67:46:11:54:5b:7a:af:c5:9a:1a:2c: 54:b4:aa:b1:80:5f:eb:29:8f:3b:96:8e:49:7a:cd:aa:91:d3: d2:3c:7e:0f:f0:e1:56:66:63:b6:80:cb:bc:8d:59:66:6d:a2: 77:f9:9a:3e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUVp6A+E2xhi9kXomPcYkFalSd6YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMjhaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDA3NzQzNTBkNTk2NmQxNWI2M2EwYjFiMjU0NDhhMTRjYzE3OTdjMjA1Y2Nk MWUwM2E1MzVjYWY2ZDhmMTkyMjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfDclIitwqVdOpNpVZ6Rw4bQ8zj7CZvGX9+9dp69jxTHNgfKgYla2ksotbB 1JDBi6CrgaE4OR1SUvc6IzL8Bwowm8zKTYcWtk47aWfUBem7HpZYSeM1mIL3VjMY PThh9CVfiCIRWlFwgi4dVs6GMD8T6k0rl/o1kntn9ZXC/fa0ynL+n62y3DrAZGHj Em0O83ehUNpEqfYAKFuLC8q8QORtUV+plyrANwWo7nI2MjAlr50FbSyJ19y2TbBQ lBzFQnTtEZr4sYNRcsOa7RxTVy83iRW6z3rLvmUXNsMNdqTj7MZq5bFcvhN0XYSD grExJg6iK+cBeD52GA1ePIeVw5ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTnJaEH KhKOCBrYK8MBDwsjSG8sqDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmU2Nzg0MTgtMWU0ZC00ODQzLWJkZWQtM2MyOGMxN2VlYmY4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FlQ MA0GCSqGSIb3DQEBCwUAA4IBAQC8r2/LTz6xI2Vc+JMbFNwgXkvPMOAfHuJ3jItX wVEZSJXqbkAzjUsJfBvnai6PNjUNml+TCVG6LQqrtoL4SWggUutiRyrnno0XW7qf PUtdeJ9kPoDRrAC7KZmqym9JkxCpc3AmJCXFAv2LryAe0jPMkbebgGD3fLojMYNd YBLz6g1Ww7RGS5WXIx9d1cX8100mof0Kkeg+TAiVlU6If/RXG6kPYHyzEsoh0WpG TF4ZlImO3bICabtT+04xpngmO29jAwI+lUSqo/wVB0DHZ0YRVFt6r8WaGixUtKqx gF/rKY87lo5Jes2qkdPSPH4P8OFWZmO2gMu8jVlmbaJ3+Zo+ -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:03 2025 by rpki-client