This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa File: 5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa (raw, json) Hash identifier: d1EoxhQ4ogagBKReTysjOSz9tjsfS1+t8BYzJ5oYs1c= Subject key identifier: EA:5F:90:42:E5:A7:6A:CF:A2:3E:60:E8:E0:7B:CA:2E:3F:64:73:26 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 05A3D30A8C30164D866D2D54B1677AA8C9FF52FC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa Signing time: Tue 18 Nov 2025 00:30:13 +0000 ROA not before: Tue 18 Nov 2025 00:30:13 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d06d:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a3:d3:0a:8c:30:16:4d:86:6d:2d:54:b1:67:7a:a8:c9:ff:52:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 18 00:30:13 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=2c8737223e1f943a7a8ac0b1129680798d32ac71dcfce05ead7a07afe4d0e7ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:9f:a2:d7:33:f5:69:70:eb:ae:a9:80:bb: e0:9f:78:fe:3d:f6:47:f0:15:86:c4:da:4b:e4:09: cf:ad:b6:eb:9e:76:4e:c1:a5:e8:68:9a:0e:a3:a4: 7f:39:ae:31:9c:f1:02:92:8c:66:01:fd:e7:3d:af: d1:e0:93:9c:89:05:f3:ea:8c:6d:26:c1:a1:83:37: 72:a0:9f:59:49:d4:9b:69:72:39:db:e4:d5:94:97: 18:c3:ed:ee:37:af:d3:00:75:bf:69:1e:26:d0:3b: 01:81:84:27:a1:f8:87:0a:06:f8:09:83:51:1b:3a: 28:26:a2:28:e1:c4:69:61:d5:da:45:e0:05:80:ad: 36:0c:6c:1b:ca:c2:67:e9:23:85:de:96:f4:c8:fe: ec:5a:39:35:24:df:be:a2:ec:25:c8:27:10:ae:d9: 2d:3d:d2:c0:9b:ae:73:22:7f:61:02:2b:22:1d:ef: 7d:d7:a5:4c:87:01:ed:3b:3c:78:93:cc:f1:8c:29: 91:04:32:b1:a3:c1:75:8d:d8:ae:70:84:56:52:fa: 0f:a2:53:5d:57:96:62:8e:67:61:3d:4f:4a:c4:0f: 6f:f2:1d:55:17:51:4e:6d:74:3b:cd:fa:3c:e1:c2: f0:5d:a5:cc:68:89:82:96:68:f4:6c:eb:a9:11:a7: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5F:90:42:E5:A7:6A:CF:A2:3E:60:E8:E0:7B:CA:2E:3F:64:73:26 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06d:8080::/48 Signature Algorithm: sha256WithRSAEncryption b8:81:35:68:f1:b2:e4:7a:08:03:28:e7:63:64:fd:22:3a:27: 56:5c:2a:9d:c6:45:b6:22:4d:e1:df:1f:b4:a4:7f:f7:2c:0a: ea:af:73:76:90:68:9a:b5:e7:16:23:4b:95:f4:78:f1:56:bc: ce:31:ca:66:a1:e8:a2:68:85:1b:00:42:d6:ea:43:13:ca:0b: 42:3b:18:74:ab:69:b8:34:0e:19:6e:0c:9e:54:95:9a:01:98: 48:d1:a8:ad:f2:c5:f1:3f:b5:ce:13:f7:18:b1:d5:0e:f0:da: 5c:06:34:37:68:4f:73:51:de:03:57:00:84:aa:88:17:78:a7: 21:ce:ce:8f:d3:85:94:0e:e3:d0:61:c1:10:7a:f5:a9:21:3a: 52:2b:cc:49:9a:d2:c8:1b:fe:6c:0d:8a:a7:c3:5b:f2:7e:9b: b3:9e:84:ea:dc:3f:47:9c:86:54:ef:58:93:71:56:ec:fe:70: 52:37:5c:1f:8f:1e:bc:eb:82:68:c2:01:70:d1:7c:dc:30:19: f7:60:44:77:2f:f5:79:48:56:09:46:00:aa:67:88:a0:e8:a0: 3c:df:73:e9:db:4c:35:23:4c:83:10:44:3a:2c:00:fa:79:a1: d5:47:59:df:ef:a1:4d:cb:3c:f0:48:5a:15:e4:ba:1d:5a:28: cb:f8:b5:be -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUBaPTCowwFk2GbS1UsWd6qMn/UvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTgwMDMwMTNaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDJjODczNzIyM2UxZjk0M2E3YThhYzBiMTEyOTY4MDc5OGQzMmFjNzFkY2Zj ZTA1ZWFkN2EwN2FmZTRkMGU3ZWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9Sn6LXM/VpcOuuqYC74J94/j32R/AVhsTaS+QJz6226552TsGl6GiaDqOk fzmuMZzxApKMZgH95z2v0eCTnIkF8+qMbSbBoYM3cqCfWUnUm2lyOdvk1ZSXGMPt 7jev0wB1v2keJtA7AYGEJ6H4hwoG+AmDURs6KCaiKOHEaWHV2kXgBYCtNgxsG8rC Z+kjhd6W9Mj+7Fo5NSTfvqLsJcgnEK7ZLT3SwJuucyJ/YQIrIh3vfdelTIcB7Ts8 eJPM8YwpkQQysaPBdY3YrnCEVlL6D6JTXVeWYo5nYT1PSsQPb/IdVRdRTm10O836 POHC8F2lzGiJgpZo9GzrqRGnmpUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTqX5BC 5adqz6I+YOjge8ouP2RzJjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWNjYTdjNzMtN2E4Mi00M2ZjLTgxYWEtNjU3YWUwYjBiYzMwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G2A gDANBgkqhkiG9w0BAQsFAAOCAQEAuIE1aPGy5HoIAyjnY2T9IjonVlwqncZFtiJN 4d8ftKR/9ywK6q9zdpBomrXnFiNLlfR48Va8zjHKZqHoomiFGwBC1upDE8oLQjsY dKtpuDQOGW4MnlSVmgGYSNGorfLF8T+1zhP3GLHVDvDaXAY0N2hPc1HeA1cAhKqI F3inIc7Oj9OFlA7j0GHBEHr1qSE6UivMSZrSyBv+bA2Kp8Nb8n6bs56E6tw/R5yG VO9Yk3FW7P5wUjdcH48evOuCaMIBcNF83DAZ92BEdy/1eUhWCUYAqmeIoOigPN9z 6dtMNSNMgxBEOiwA+nmh1UdZ3++hTcs88EhaFeS6HVooy/i1vg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:38 2025 by rpki-client