This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa File: 3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa (raw, json) Hash identifier: IM6G7MOdkcwajg+QwB7Xi1hTQjW8FBK0z65B1T5fcWE= Subject key identifier: 83:29:51:97:D9:ED:F8:32:14:85:37:D0:FC:0F:D3:97:75:9F:23:0A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5A4C54B69452FC980605F03DBD460EF09EF88D93 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa Signing time: Sun 23 Nov 2025 01:30:48 +0000 ROA not before: Sun 23 Nov 2025 01:30:48 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4c:54:b6:94:52:fc:98:06:05:f0:3d:bd:46:0e:f0:9e:f8:8d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:48 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=8707f81d812d811e8f62b3df89101654aa882aaa512b83c07fb669c0b7aa94dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:21:1f:83:68:ae:b9:1d:a7:3c:20:78:12:b3: a5:6e:ac:9d:b8:16:0f:e7:94:b7:0d:31:62:b5:d8: b5:e5:e0:85:5b:0f:29:53:0b:c8:23:27:f2:be:62: b6:3d:8b:e6:fc:aa:52:83:2f:df:59:30:3b:0e:65: fd:00:23:f1:87:31:dd:06:9d:29:c3:cf:82:08:0f: 21:a7:ed:50:b4:4e:1c:82:4b:bc:b5:01:43:49:af: 20:95:b2:9a:6e:1b:f7:01:15:0c:24:c9:fe:41:eb: 2f:bb:4a:e4:83:fb:ba:d6:33:7b:20:a1:b7:38:b4: 08:fe:c9:91:17:22:b9:50:e3:db:66:66:f1:09:10: fd:20:0b:7c:e6:1d:d7:79:68:37:83:98:af:61:83: c7:16:11:cd:2b:bb:fc:c3:d0:b9:b5:0a:6c:6d:45: 22:f0:65:10:57:74:5e:76:b0:61:34:07:6f:20:69: 61:91:c3:fe:0e:98:72:a1:26:ee:17:6e:9f:f8:56: cc:c2:0b:7c:0f:90:06:ba:b7:b5:ea:ec:07:8b:cf: d7:9c:de:cd:8b:e7:ae:58:61:95:52:75:e9:7e:bb: 24:42:5c:86:a0:80:fc:87:4f:57:69:ee:76:2d:b2: ce:55:13:60:31:49:c5:ed:59:4b:ea:b6:c2:2b:c7: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:29:51:97:D9:ED:F8:32:14:85:37:D0:FC:0F:D3:97:75:9F:23:0A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:4080::/48 Signature Algorithm: sha256WithRSAEncryption 2b:f6:db:65:23:67:7f:78:1a:b5:1b:bd:a1:be:c5:ab:77:40: 1a:f6:5d:61:36:33:69:91:4d:5f:aa:7e:8d:25:51:53:ad:c4: 1d:b6:bf:9f:74:0b:b2:8c:74:8b:15:41:9f:e2:f7:14:f1:49: d5:be:51:09:d0:1e:28:6e:97:c8:0f:5f:37:e7:cb:96:52:cd: 71:4b:06:f0:2a:8b:f7:66:74:92:00:c8:3c:4c:95:42:4d:4b: cc:ef:7e:91:cf:05:29:36:f1:77:33:c1:6f:1c:dc:5f:af:2e: 09:12:44:bb:f3:7c:bb:89:b6:74:15:f4:0c:68:f0:78:2d:00: 2d:1f:16:9d:cc:a2:e9:31:c0:a5:c7:e3:8c:13:18:80:65:03: 25:ea:db:d5:6d:de:95:99:0f:8a:f3:78:9d:49:41:12:75:14: 4c:5e:10:4b:16:25:ee:2a:76:bd:8b:30:4a:f9:90:a2:12:43: 45:8d:a0:3f:e8:2d:53:a6:55:bf:14:1a:4f:b6:7c:8e:b1:f5: ff:b9:ae:7e:34:44:5f:02:22:b7:f2:28:23:f5:eb:80:6d:b5: 1c:f7:f3:f6:75:b1:88:83:f4:c7:5f:1e:bc:a2:76:00:e1:38: 0b:4c:dc:57:b9:95:33:35:43:8d:a5:1b:b2:84:2b:93:25:f0: b5:2a:09:5c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUWkxUtpRS/JgGBfA9vUYO8J74jZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwNDhaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDg3MDdmODFkODEyZDgxMWU4ZjYyYjNkZjg5MTAxNjU0YWE4ODJhYWE1MTJi ODNjMDdmYjY2OWMwYjdhYTk0ZGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMhH4NorrkdpzwgeBKzpW6snbgWD+eUtw0xYrXYteXghVsPKVMLyCMn8r5i tj2L5vyqUoMv31kwOw5l/QAj8Ycx3QadKcPPgggPIaftULROHIJLvLUBQ0mvIJWy mm4b9wEVDCTJ/kHrL7tK5IP7utYzeyChtzi0CP7JkRciuVDj22Zm8QkQ/SALfOYd 13loN4OYr2GDxxYRzSu7/MPQubUKbG1FIvBlEFd0XnawYTQHbyBpYZHD/g6YcqEm 7hdun/hWzMILfA+QBrq3tersB4vP15zezYvnrlhhlVJ16X67JEJchqCA/IdPV2nu di2yzlUTYDFJxe1ZS+q2wivHtw0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSDKVGX 2e34MhSFN9D8D9OXdZ8jCjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv M2MwOTA3MzMtYmEzOC00ZTliLThjMzAtMThhMDkxNmNhNWE1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA gDANBgkqhkiG9w0BAQsFAAOCAQEAK/bbZSNnf3gatRu9ob7Fq3dAGvZdYTYzaZFN X6p+jSVRU63EHba/n3QLsox0ixVBn+L3FPFJ1b5RCdAeKG6XyA9fN+fLllLNcUsG 8CqL92Z0kgDIPEyVQk1LzO9+kc8FKTbxdzPBbxzcX68uCRJEu/N8u4m2dBX0DGjw eC0ALR8Wncyi6THApcfjjBMYgGUDJerb1W3elZkPivN4nUlBEnUUTF4QSxYl7ip2 vYswSvmQohJDRY2gP+gtU6ZVvxQaT7Z8jrH1/7mufjREXwIit/IoI/XrgG21HPfz 9nWxiIP0x18evKJ2AOE4C0zcV7mVMzVDjaUbsoQrkyXwtSoJXA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:31 2025 by rpki-client