This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa File: 5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa (raw, json) Hash identifier: PsW0hrh/oBXPvplc8hcLi9r+DjqBvPQJFlGGlPCIKIw= Subject key identifier: 61:95:7C:28:7D:C4:A5:32:27:14:E2:70:48:32:A9:A2:95:6F:7A:A9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 66228905B054E3E918FE0C46A9475BF60414434A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa Signing time: Sat 29 Nov 2025 03:00:08 +0000 ROA not before: Sat 29 Nov 2025 03:00:08 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d059:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:22:89:05:b0:54:e3:e9:18:fe:0c:46:a9:47:5b:f6:04:14:43:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:08 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=8b17b699ea683dcfd69f60fd98b1bbda94e1ed32d91209a9e9c0efe5b9df788c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:f5:45:0b:2c:b2:ef:e8:30:92:eb:d6:4b: 1d:01:53:3e:70:a6:a3:94:9c:c5:64:53:03:68:8c: e8:98:ce:e4:cd:88:b0:9b:3f:f9:07:71:74:03:3d: 4b:33:02:7b:65:7d:58:ea:3f:ff:03:b3:c7:45:b0: fa:c6:ed:7d:5b:80:e6:92:88:cb:9c:f5:28:be:31: 67:0b:f5:9e:f9:55:84:0b:ff:57:3e:58:7b:49:c6: 9c:60:a8:7a:06:35:ee:bc:78:e1:fe:f1:f6:55:25: ae:16:13:65:49:5b:3d:c9:92:ea:38:df:06:24:c5: 65:50:f4:ab:1f:c2:63:46:2d:71:09:fc:70:32:78: 5a:23:fc:8c:9a:5c:5f:35:2d:f2:88:5a:f7:66:4e: 85:fd:46:21:45:39:f1:72:bf:2e:be:b2:16:a6:ca: 44:23:8b:1c:fc:47:75:c6:96:c6:ba:d9:7e:11:1d: 54:78:19:31:23:9b:26:48:f5:4f:15:5a:95:99:39: 20:e8:33:7d:51:ac:0c:c6:6c:59:2d:23:25:d7:ac: 2e:be:78:dd:c9:42:70:5c:aa:b8:97:57:ef:36:30: ce:64:95:d3:ad:5e:dc:f6:8f:13:87:49:bf:ea:10: fa:a5:63:7c:f1:74:f4:7e:90:d8:08:97:3d:30:ca: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:95:7C:28:7D:C4:A5:32:27:14:E2:70:48:32:A9:A2:95:6F:7A:A9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d37dc15-1224-4901-aab1-7f7f30fe61c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d059:9000::/40 Signature Algorithm: sha256WithRSAEncryption 83:cd:3a:01:02:fe:98:d0:f3:59:a2:fa:c4:c3:1b:80:c4:e8: 98:a3:b0:3d:d8:c8:e4:e9:4f:b5:0a:2d:3e:8a:59:a2:f0:10: fd:d6:3b:18:c8:c5:be:b8:d6:f0:88:42:19:6b:c2:0c:ff:73: 44:e6:85:ac:91:46:e6:ef:14:5a:14:2d:31:6e:b6:65:25:c2: 85:6d:b0:36:b1:d3:21:c9:77:b1:0d:32:f7:5a:f3:62:7e:14: fe:dd:82:11:37:12:79:e5:70:38:ef:a0:69:dc:4d:0a:a4:23: 18:ce:ad:d5:1d:0b:41:3d:f7:52:ec:31:52:4f:0d:56:0b:d0: 1a:b3:3a:ce:01:f0:1b:aa:38:94:8c:8e:bc:51:e1:26:bb:42: b1:c6:43:f6:ef:bc:96:c8:e9:9d:51:03:bf:a2:a1:52:b4:e5: a2:cb:81:af:a9:17:21:4b:c9:6c:0f:f3:9c:48:9f:69:07:42: d6:76:b1:ae:50:ba:de:0b:c9:89:34:bc:bc:a8:25:57:1e:d5: a9:de:ee:8d:ce:5d:8e:a7:c9:58:fd:62:ab:7e:a0:9a:51:0d: e7:b6:ca:f2:61:e3:cc:db:c5:85:c3:02:8f:d7:04:0a:be:d3: 48:a9:34:e8:16:43:b8:ab:08:14:bd:2c:f2:e1:6f:3c:f4:4a: 26:0a:db:27 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZiKJBbBU4+kY/gxGqUdb9gQUQ0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMDhaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDhiMTdiNjk5ZWE2ODNkY2ZkNjlmNjBmZDk4YjFiYmRhOTRlMWVkMzJkOTEy MDlhOWU5YzBlZmU1YjlkZjc4OGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI949UULLLLv6DCS69ZLHQFTPnCmo5ScxWRTA2iM6JjO5M2IsJs/+QdxdAM9 SzMCe2V9WOo//wOzx0Ww+sbtfVuA5pKIy5z1KL4xZwv1nvlVhAv/Vz5Ye0nGnGCo egY17rx44f7x9lUlrhYTZUlbPcmS6jjfBiTFZVD0qx/CY0YtcQn8cDJ4WiP8jJpc XzUt8oha92ZOhf1GIUU58XK/Lr6yFqbKRCOLHPxHdcaWxrrZfhEdVHgZMSObJkj1 TxValZk5IOgzfVGsDMZsWS0jJdesLr543clCcFyquJdX7zYwzmSV061e3PaPE4dJ v+oQ+qVjfPF09H6Q2AiXPTDKfUUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRhlXwo fcSlMicU4nBIMqmilW96qTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWQzN2RjMTUtMTIyNC00OTAxLWFhYjEtN2Y3ZjMwZmU2MWM5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FmQ MA0GCSqGSIb3DQEBCwUAA4IBAQCDzToBAv6Y0PNZovrEwxuAxOiYo7A92Mjk6U+1 Ci0+ilmi8BD91jsYyMW+uNbwiEIZa8IM/3NE5oWskUbm7xRaFC0xbrZlJcKFbbA2 sdMhyXexDTL3WvNifhT+3YIRNxJ55XA476Bp3E0KpCMYzq3VHQtBPfdS7DFSTw1W C9AaszrOAfAbqjiUjI68UeEmu0KxxkP277yWyOmdUQO/oqFStOWiy4GvqRchS8ls D/OcSJ9pB0LWdrGuULreC8mJNLy8qCVXHtWp3u6Nzl2Op8lY/WKrfqCaUQ3ntsry YePM28WFwwKP1wQKvtNIqTToFkO4qwgUvSzy4W889EomCtsn -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:44 2025 by rpki-client