This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa File: 4ee4d823-9869-449e-9541-10a647125e4a.roa (raw, json) Hash identifier: FDnYfpk5qmazcFLwDXbEIOm00vxBE3p20d/ZEJmtxjI= Subject key identifier: AC:65:43:67:EE:1A:05:45:D3:91:7F:99:00:3F:2B:2B:09:C1:0B:25 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1DF5EBCBC1EBBCC37E602102C5A8DFE278977240 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa Signing time: Sat 15 Nov 2025 06:21:10 +0000 ROA not before: Sat 15 Nov 2025 06:21:10 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f5:eb:cb:c1:eb:bc:c3:7e:60:21:02:c5:a8:df:e2:78:97:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:21:10 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=555d0cda13fb825e14822064b32c3ea7580a2ef0e7e91adef553180fe0d945ca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:2c:9d:17:6e:fc:2b:c1:a4:e5:53:30:72: 0f:e9:a3:10:be:76:1c:85:d7:ba:84:e2:f3:62:62: a4:cf:8b:bc:4f:da:de:ed:fe:2e:34:39:55:ff:41: ff:f8:4a:28:b6:cb:f7:eb:f9:0f:e0:0d:9d:cc:db: 16:4c:4e:ab:19:df:c0:29:a6:a9:29:24:20:55:c7: 09:27:70:96:3c:18:8b:90:17:4f:52:73:28:f4:e2: ae:00:74:ec:09:10:55:36:a6:70:2b:ec:c3:1e:54: b5:d2:80:25:b2:23:1a:11:fb:c2:86:78:8f:87:94: 66:ab:be:b9:92:3f:0b:c5:c3:97:9d:65:bd:c7:72: 3c:57:ad:cd:76:c6:41:b2:27:ce:45:28:d5:3f:00: 68:cb:ac:89:ff:0f:3b:35:a3:e5:9c:d5:bd:f1:9b: b6:ca:12:58:2a:1c:16:dd:85:60:e5:87:2d:5c:1e: 8d:e4:57:95:06:2f:0f:27:7d:0c:8e:3c:cd:c3:94: d0:07:83:10:c2:e6:3d:db:ba:8b:2e:1d:45:26:53: 98:d7:43:75:f6:3a:a3:47:c5:39:f3:4d:6b:2f:57: d7:17:e2:60:f9:74:18:bb:e9:be:f9:8c:1e:45:d7: 53:94:fc:72:f0:74:32:6e:9b:85:a6:6a:38:ce:9e: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:43:67:EE:1A:05:45:D3:91:7F:99:00:3F:2B:2B:09:C1:0B:25 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:c000::/40 Signature Algorithm: sha256WithRSAEncryption 00:28:4d:de:23:d7:42:91:12:54:f6:47:c6:7e:53:2e:d9:fb: cb:00:be:10:5b:81:ef:d4:44:22:5f:31:65:5e:79:3a:0d:62: 1f:0d:0a:6d:c6:11:a9:83:d5:5d:7e:5d:fc:13:4f:a4:1e:a2: fa:96:7c:bb:63:45:70:06:76:cd:f4:83:bc:bb:52:32:89:9a: b0:2a:0a:40:2f:7b:08:23:bb:e8:8e:3a:ed:0f:4c:d2:c2:be: 47:79:24:c9:ed:2e:65:02:e4:14:c7:e4:a5:fb:e6:c5:e6:b8: 7e:73:e1:6f:aa:5b:bf:91:e6:95:a9:f2:9c:51:3a:31:bd:7b: 29:3a:03:29:67:e0:c3:02:a8:c6:fc:07:7e:3c:ac:38:18:a0: 99:17:d6:bf:57:ec:ae:5b:85:b8:11:92:33:83:6f:a7:6c:4c: 99:35:f1:b5:8e:e4:af:f6:07:15:be:22:b3:1e:d1:16:22:ae: 8c:9d:57:be:cc:ee:a3:71:a6:4f:83:d1:f3:2b:90:e0:97:a5: a8:a1:3a:5b:88:76:23:13:20:b6:24:32:14:c5:ab:42:18:c2: 2d:fa:f2:b2:32:c8:71:98:e1:56:7e:2b:ee:24:ad:db:a0:ec: 6c:5c:16:9e:7b:a3:96:b7:33:8a:5b:a1:76:48:eb:ca:78:2a: e5:b0:c8:06 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUHfXry8HrvMN+YCECxajf4niXckAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIxMTBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDU1NWQwY2RhMTNmYjgyNWUxNDgyMjA2NGIzMmMzZWE3NTgwYTJlZjBlN2U5 MWFkZWY1NTMxODBmZTBkOTQ1Y2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4VLJ0XbvwrwaTlUzByD+mjEL52HIXXuoTi82JipM+LvE/a3u3+LjQ5Vf9B //hKKLbL9+v5D+ANnczbFkxOqxnfwCmmqSkkIFXHCSdwljwYi5AXT1JzKPTirgB0 7AkQVTamcCvswx5UtdKAJbIjGhH7woZ4j4eUZqu+uZI/C8XDl51lvcdyPFetzXbG QbInzkUo1T8AaMusif8POzWj5ZzVvfGbtsoSWCocFt2FYOWHLVwejeRXlQYvDyd9 DI48zcOU0AeDEMLmPdu6iy4dRSZTmNdDdfY6o0fFOfNNay9X1xfiYPl0GLvpvvmM HkXXU5T8cvB0Mm6bhaZqOM6eNcMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSsZUNn 7hoFRdORf5kAPysrCcELJTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGVlNGQ4MjMtOTg2OS00NDllLTk1NDEtMTBhNjQ3MTI1ZTRhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H/A MA0GCSqGSIb3DQEBCwUAA4IBAQAAKE3eI9dCkRJU9kfGflMu2fvLAL4QW4Hv1EQi XzFlXnk6DWIfDQptxhGpg9Vdfl38E0+kHqL6lny7Y0VwBnbN9IO8u1IyiZqwKgpA L3sII7vojjrtD0zSwr5HeSTJ7S5lAuQUx+Sl++bF5rh+c+Fvqlu/keaVqfKcUTox vXspOgMpZ+DDAqjG/Ad+PKw4GKCZF9a/V+yuW4W4EZIzg2+nbEyZNfG1juSv9gcV viKzHtEWIq6MnVe+zO6jcaZPg9HzK5Dgl6WooTpbiHYjEyC2JDIUxatCGMIt+vKy MshxmOFWfivuJK3boOxsXBaee6OWtzOKW6F2SOvKeCrlsMgG -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:43 2025 by rpki-client