This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa File: 35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa (raw, json) Hash identifier: ETLIto+/z5iIE3O50BPP3Pt5RdVzhbI6fuNRRRFJGGs= Subject key identifier: 2F:46:56:AA:05:8F:6A:F0:1F:99:39:EF:9D:9E:BA:25:8F:FA:72:EC Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6C7E059E186CBB91D5476ECD1233AA5961D99AF0 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa Signing time: Tue 02 Dec 2025 01:51:26 +0000 ROA not before: Tue 02 Dec 2025 01:51:26 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d030:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7e:05:9e:18:6c:bb:91:d5:47:6e:cd:12:33:aa:59:61:d9:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:51:26 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=7a3f573980634fa26e6a2b6f48e3863c958a3fc6471b68d0fb4d452fd018c77c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:79:f5:15:2a:8e:a0:4b:a9:6f:b1:46:5c: a7:92:a2:65:0f:e1:84:d3:50:56:3d:68:25:b6:5b: a1:17:76:5c:e8:cb:b3:32:89:f4:57:99:eb:4b:d7: da:63:b4:60:4e:c7:e5:31:65:1b:4e:d9:61:39:51: c5:95:77:26:a3:5c:08:52:f0:a9:e8:d6:b8:c5:4e: 35:a5:c6:ae:b8:cd:d8:61:b6:13:00:f0:80:af:d1: d4:05:83:9e:9a:46:4d:ea:1d:66:06:f5:b8:38:9b: 5f:46:11:b5:b2:0b:9c:b3:42:90:21:2b:00:61:07: 0f:ab:84:07:f4:e3:62:7c:a1:a4:5a:d0:2e:e1:9c: 89:69:22:42:1a:c2:8f:e2:a1:59:22:e8:c5:34:a4: 37:c0:0f:17:34:94:bf:41:e4:fc:77:b3:a6:7f:08: 25:47:bd:ce:14:18:f4:07:4e:a2:58:06:82:8f:2d: 16:81:e6:5a:b6:81:71:35:bf:46:00:8d:65:ea:06: a2:a9:34:c0:bb:22:9f:8e:b7:ab:64:33:c8:4c:7b: 76:cc:f6:6b:15:6e:18:1a:75:10:92:d2:d4:c1:90: 75:1a:4d:7c:5c:61:7c:24:3f:df:6a:27:41:5d:e8: 62:a0:4f:a4:53:bb:f9:8e:c9:0f:d5:e0:2b:ca:9d: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:56:AA:05:8F:6A:F0:1F:99:39:EF:9D:9E:BA:25:8F:FA:72:EC X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d030:b000::/40 Signature Algorithm: sha256WithRSAEncryption 03:55:be:0e:e5:49:49:ed:f4:06:38:9c:0e:c0:47:ed:43:ad: 65:82:1e:3b:6b:40:e8:6a:fa:02:4c:01:18:07:9f:5e:48:c1: f6:3c:6a:5d:1b:df:83:31:15:3b:60:07:a8:0f:a1:07:1b:c4: 27:77:c9:52:45:32:67:82:3a:bc:e0:d9:7a:42:d8:a5:fe:92: 42:e9:30:9c:f9:25:97:69:12:9a:1d:08:c0:d3:a0:cd:97:ec: a1:25:fc:89:15:f7:2a:22:2b:c9:72:31:27:e3:24:68:75:87: fe:bc:6a:62:39:94:49:5e:17:a0:da:31:56:d1:8d:ae:e2:f7: d0:73:e2:3e:e1:7a:5d:c7:4d:05:e3:69:b3:29:4b:da:b6:1c: 88:21:c3:11:16:9b:16:b3:21:a2:92:87:16:9c:69:95:9e:8b: 52:cc:1d:f0:e2:f6:ff:18:ad:f8:4c:71:2b:de:86:e2:cf:b9: 37:8e:21:c2:57:c4:7c:bc:6e:63:62:45:48:5e:be:14:55:ca: 45:7f:73:2f:a4:3c:57:3c:61:75:81:0c:cc:43:0c:54:c0:c0: 64:59:c0:7d:76:27:b6:11:d2:6f:ed:00:bb:18:d2:ab:4a:f7: 33:98:53:61:bd:d3:cf:01:b6:2c:7c:72:ac:21:36:a4:a7:87: fb:12:07:da -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbH4Fnhhsu5HVR27NEjOqWWHZmvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUxMjZaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDdhM2Y1NzM5ODA2MzRmYTI2ZTZhMmI2ZjQ4ZTM4NjNjOTU4YTNmYzY0NzFi NjhkMGZiNGQ0NTJmZDAxOGM3N2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuJefUVKo6gS6lvsUZcp5KiZQ/hhNNQVj1oJbZboRd2XOjLszKJ9FeZ60vX 2mO0YE7H5TFlG07ZYTlRxZV3JqNcCFLwqejWuMVONaXGrrjN2GG2EwDwgK/R1AWD nppGTeodZgb1uDibX0YRtbILnLNCkCErAGEHD6uEB/TjYnyhpFrQLuGciWkiQhrC j+KhWSLoxTSkN8APFzSUv0Hk/Hezpn8IJUe9zhQY9AdOolgGgo8tFoHmWraBcTW/ RgCNZeoGoqk0wLsin463q2QzyEx7dsz2axVuGBp1EJLS1MGQdRpNfFxhfCQ/32on QV3oYqBPpFO7+Y7JD9XgK8qdaYsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQvRlaq BY9q8B+ZOe+dnrolj/py7DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MzVmMGUxOWUtNTlmMi00NGYzLWIwYmYtZTgwZDlmZTBiNDhiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DCw MA0GCSqGSIb3DQEBCwUAA4IBAQADVb4O5UlJ7fQGOJwOwEftQ61lgh47a0DoavoC TAEYB59eSMH2PGpdG9+DMRU7YAeoD6EHG8Qnd8lSRTJngjq84Nl6Qtil/pJC6TCc +SWXaRKaHQjA06DNl+yhJfyJFfcqIivJcjEn4yRodYf+vGpiOZRJXheg2jFW0Y2u 4vfQc+I+4Xpdx00F42mzKUvathyIIcMRFpsWsyGikocWnGmVnotSzB3w4vb/GK34 THEr3obiz7k3jiHCV8R8vG5jYkVIXr4UVcpFf3MvpDxXPGF1gQzMQwxUwMBkWcB9 die2EdJv7QC7GNKrSvczmFNhvdPPAbYsfHKsITakp4f7Egfa -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:04 2025 by rpki-client