This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa File: 52630693-0f5d-4126-ba07-ad0c0c999660.roa (raw, json) Hash identifier: s4F0ZtHyXcHIiUB0k8OdMNWlqkmdd4uxLVvH3C+jxWM= Subject key identifier: EC:05:70:6A:A1:1D:6A:45:47:EC:07:03:16:4B:30:3A:27:75:92:DC Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 755760DEA3494DD03C26D2F4D363616B3AB39293 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa Signing time: Sat 15 Nov 2025 06:01:12 +0000 ROA not before: Sat 15 Nov 2025 06:01:12 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d071:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:57:60:de:a3:49:4d:d0:3c:26:d2:f4:d3:63:61:6b:3a:b3:92:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:01:12 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=60360c691301db8de15af0e50431f35a510e9d4f55aac343d9133188eec2bdf4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:24:b9:54:ad:61:52:9b:ff:46:1c:24:7a: 2a:39:a5:9d:50:de:4f:54:9f:2e:48:ec:e7:9b:ef: 69:61:e1:70:69:3f:50:7c:79:a0:a1:fc:b4:8b:07: f4:3a:a9:30:e1:f4:d6:99:10:6b:bb:cb:cb:22:64: d1:28:47:2a:16:83:0a:64:2b:c4:3e:0a:1f:ad:f8: 06:0c:c9:4f:21:fb:4a:71:ea:06:89:3d:cf:43:a2: 99:57:76:2e:d2:1e:d8:18:0c:15:a8:ad:b7:5f:14: e6:ea:d3:53:c4:0f:3a:d6:22:08:23:f8:46:75:d6: 5a:fb:ed:16:64:4c:cc:9a:86:e7:ac:3f:e0:28:a7: 21:3b:ee:4a:8a:63:86:d5:8d:32:b6:e6:fa:9d:b5: fa:aa:6a:80:0a:b8:59:38:6f:33:33:96:41:af:e6: a5:82:2d:98:a5:17:04:a7:99:34:9a:dd:bc:3e:31: 82:fd:55:1e:40:0f:81:e2:82:e8:f5:25:f6:11:08: f2:64:30:d2:d0:2e:f8:97:3a:bf:b6:d3:3f:1e:a5: 0c:59:cc:f8:91:1a:ff:5b:1a:4b:d7:cd:b1:36:7f: 6a:01:88:9c:59:4c:2f:c1:40:ec:70:87:85:d6:b9: 2b:4d:35:6c:67:bd:50:44:4b:d2:bc:ed:87:31:bb: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:05:70:6A:A1:1D:6A:45:47:EC:07:03:16:4B:30:3A:27:75:92:DC X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d071:e000::/40 Signature Algorithm: sha256WithRSAEncryption 9d:8b:66:00:5f:e6:5b:fc:08:06:59:a3:6e:05:51:d8:29:bf: ca:1c:24:86:a0:59:43:32:63:73:c2:58:6e:0e:45:26:ae:5b: be:fa:b0:bb:0c:d0:fc:77:b8:f2:ed:37:52:09:bc:80:66:1f: 89:f4:96:71:c9:8e:4c:13:9c:d4:ad:11:be:c3:c8:79:d0:4a: e2:64:53:4d:48:2b:f4:f4:50:43:cd:71:40:be:92:f1:ce:89: 6a:72:c5:08:73:2b:6f:76:f6:72:64:4f:7e:57:31:66:8a:37: 7f:d0:a1:4f:1d:9b:5c:1c:e4:2b:1e:9b:fa:9d:71:8f:bf:d9: 0e:16:62:36:ad:6f:61:5b:08:cc:cb:83:da:ab:1f:3c:63:a8: 14:78:17:f2:a8:21:3a:d9:ed:75:27:57:19:45:a6:e2:8f:66: e8:ef:ee:62:94:dd:78:8c:97:07:d2:db:85:86:ea:20:dc:eb: 68:00:40:a1:06:eb:23:98:02:b8:75:5e:f2:e4:0b:66:07:8f: 70:7a:bc:b9:95:88:6d:cc:69:75:8a:6b:4a:f4:9a:75:be:3c: 1b:5c:8d:3f:ee:13:56:1e:16:ec:9f:d6:66:50:7c:65:a5:dc: 25:a3:13:61:41:6b:a2:a7:2c:26:a6:e7:cb:9a:ed:82:f1:78: f0:fa:c6:7c -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUdVdg3qNJTdA8JtL002NhazqzkpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjAxMTJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDYwMzYwYzY5MTMwMWRiOGRlMTVhZjBlNTA0MzFmMzVhNTEwZTlkNGY1NWFh YzM0M2Q5MTMzMTg4ZWVjMmJkZjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaSJLlUrWFSm/9GHCR6KjmlnVDeT1SfLkjs55vvaWHhcGk/UHx5oKH8tIsH 9DqpMOH01pkQa7vLyyJk0ShHKhaDCmQrxD4KH634BgzJTyH7SnHqBok9z0OimVd2 LtIe2BgMFaitt18U5urTU8QPOtYiCCP4RnXWWvvtFmRMzJqG56w/4CinITvuSopj htWNMrbm+p21+qpqgAq4WThvMzOWQa/mpYItmKUXBKeZNJrdvD4xgv1VHkAPgeKC 6PUl9hEI8mQw0tAu+Jc6v7bTPx6lDFnM+JEa/1saS9fNsTZ/agGInFlML8FA7HCH hda5K001bGe9UERL0rzthzG72Q0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTsBXBq oR1qRUfsBwMWSzA6J3WS3DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTI2MzA2OTMtMGY1ZC00MTI2LWJhMDctYWQwYzBjOTk5NjYwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HHg MA0GCSqGSIb3DQEBCwUAA4IBAQCdi2YAX+Zb/AgGWaNuBVHYKb/KHCSGoFlDMmNz wlhuDkUmrlu++rC7DND8d7jy7TdSCbyAZh+J9JZxyY5ME5zUrRG+w8h50EriZFNN SCv09FBDzXFAvpLxzolqcsUIcytvdvZyZE9+VzFmijd/0KFPHZtcHOQrHpv6nXGP v9kOFmI2rW9hWwjMy4Paqx88Y6gUeBfyqCE62e11J1cZRabij2bo7+5ilN14jJcH 0tuFhuog3OtoAEChBusjmAK4dV7y5AtmB49wery5lYhtzGl1imtK9Jp1vjwbXI0/ 7hNWHhbsn9ZmUHxlpdwloxNhQWuipywmpufLmu2C8Xjw+sZ8 -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:41 2025 by rpki-client