This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa File: 4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa (raw, json) Hash identifier: ZgGpaE/Im8MRE0WFTQyIzzaU7eOzA/7ZyBN7PGj/H0Y= Subject key identifier: A9:8C:1B:0D:A0:B6:95:E6:0B:85:F0:BB:21:6B:9E:B1:4E:A9:86:9D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4246DC51CAFA871E22C5D5623BE1F5DD93917D83 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa Signing time: Sat 15 Nov 2025 06:30:17 +0000 ROA not before: Sat 15 Nov 2025 06:30:17 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d014:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:46:dc:51:ca:fa:87:1e:22:c5:d5:62:3b:e1:f5:dd:93:91:7d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:17 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=f1e10c8cd5c92ac8ba4b5cadf5030567d94364acab55d3860b90c0b99d5dfe28, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:16:f7:c8:f6:85:fb:29:bb:e0:6b:45:68: 51:b8:f6:70:e1:12:74:ec:79:4f:55:57:4e:8b:89: cd:c7:f5:3a:ba:f6:32:46:53:4e:b8:47:44:52:17: 62:a4:cb:88:a1:9e:00:12:e1:95:e3:3f:ac:2e:c3: d9:67:bc:b3:a8:f4:91:ae:00:7b:01:2b:c7:5d:5f: ad:4e:da:bf:36:90:57:e4:e3:fe:3f:39:16:d9:f6: a8:0f:c4:7f:37:e5:75:84:8d:60:c6:46:95:86:62: 86:5e:2c:99:ee:8e:b5:f5:a6:dd:fd:47:75:5e:de: da:7e:57:56:13:55:3f:0e:75:d0:64:d7:2f:10:77: 84:00:c2:35:67:b7:43:21:97:92:55:ab:c5:91:9b: 22:3d:a1:01:7b:be:5b:af:0a:7e:a5:04:0c:07:8c: b4:d7:dd:be:03:5a:b3:3b:0e:34:70:1b:3a:6d:6d: f3:e8:c8:d8:51:35:3a:0b:02:6e:63:3e:fc:b5:14: a4:d9:6a:1a:dd:73:ab:4d:58:e3:0f:7c:10:a7:16: 9f:a0:89:43:1c:39:4b:63:7d:7d:b4:33:56:75:88: 10:2e:da:ba:38:e0:84:15:ea:72:5a:02:fa:2e:67: 2d:45:1e:fc:dc:80:c9:79:1e:ed:d2:24:eb:84:fc: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8C:1B:0D:A0:B6:95:E6:0B:85:F0:BB:21:6B:9E:B1:4E:A9:86:9D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d014:400::/38 Signature Algorithm: sha256WithRSAEncryption 4a:3e:04:67:a5:91:46:41:42:14:bf:ce:17:85:dc:4a:4d:73: c2:78:10:46:49:20:db:88:3f:bf:e6:f2:c4:6e:ba:32:51:44: c8:f9:41:c6:47:ad:3d:e6:96:e1:cb:d8:ab:45:0a:03:36:50: c7:0c:c2:ef:ca:e9:29:86:da:00:d0:cb:b7:9e:19:2f:9d:0a: e0:5d:45:03:0d:24:2a:78:a3:c8:7f:39:4d:89:7d:85:a8:83: 20:79:51:73:50:ee:cf:62:19:7c:33:ee:26:94:e7:3e:0d:3c: 58:33:09:77:95:df:16:15:83:30:ac:c4:82:9d:6b:f8:38:7c: 5c:a7:85:4b:0c:e9:27:6a:08:a3:38:b4:71:56:6a:a5:51:78: df:83:b2:63:b6:56:42:00:c7:82:44:b4:6c:60:d7:d7:0f:46: f8:b4:b0:b7:3c:96:8c:0d:e9:b9:e3:59:17:6b:cb:0d:a3:3c: bf:b2:47:c7:96:8d:fd:ea:7d:ba:93:eb:dc:9a:b3:e5:aa:5e: ab:e6:33:41:0b:0f:4a:79:06:f3:24:f8:64:51:f1:b4:2c:da: de:8c:ee:5d:72:df:86:01:02:28:26:aa:cc:cc:cd:d1:92:b8: 86:fd:de:83:37:51:5f:4a:53:1f:9c:73:92:9d:01:19:54:f3: 02:41:22:56 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQkbcUcr6hx4ixdViO+H13ZORfYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwMTdaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGYxZTEwYzhjZDVjOTJhYzhiYTRiNWNhZGY1MDMwNTY3ZDk0MzY0YWNhYjU1 ZDM4NjBiOTBjMGI5OWQ1ZGZlMjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIm7FvfI9oX7Kbvga0VoUbj2cOESdOx5T1VXTouJzcf1Orr2MkZTTrhHRFIX YqTLiKGeABLhleM/rC7D2We8s6j0ka4AewErx11frU7avzaQV+Tj/j85Ftn2qA/E fzfldYSNYMZGlYZihl4sme6OtfWm3f1HdV7e2n5XVhNVPw510GTXLxB3hADCNWe3 QyGXklWrxZGbIj2hAXu+W68KfqUEDAeMtNfdvgNaszsONHAbOm1t8+jI2FE1OgsC bmM+/LUUpNlqGt1zq01Y4w98EKcWn6CJQxw5S2N9fbQzVnWIEC7aujjghBXqcloC +i5nLUUe/NyAyXke7dIk64T8chMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSpjBsN oLaV5guF8Lsha56xTqmGnTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGEwNzc2OTktNDhjYi00MmExLTlmMWItMWU3YzlhM2FlODA4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BQE MA0GCSqGSIb3DQEBCwUAA4IBAQBKPgRnpZFGQUIUv84XhdxKTXPCeBBGSSDbiD+/ 5vLEbroyUUTI+UHGR6095pbhy9irRQoDNlDHDMLvyukphtoA0Mu3nhkvnQrgXUUD DSQqeKPIfzlNiX2FqIMgeVFzUO7PYhl8M+4mlOc+DTxYMwl3ld8WFYMwrMSCnWv4 OHxcp4VLDOknagijOLRxVmqlUXjfg7JjtlZCAMeCRLRsYNfXD0b4tLC3PJaMDem5 41kXa8sNozy/skfHlo396n26k+vcmrPlql6r5jNBCw9KeQbzJPhkUfG0LNrejO5d ct+GAQIoJqrMzM3RkriG/d6DN1FfSlMfnHOSnQEZVPMCQSJW -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:32 2025 by rpki-client