This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa File: 5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa (raw, json) Hash identifier: y3TNFXQdAgRD64UkxGS7mDMI/Exq6Kgl0DJecULHejk= Subject key identifier: 72:D8:C7:31:EC:6D:BC:EB:27:38:80:58:3E:27:62:F3:7D:87:01:D0 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6BD4350EFAD270E71767C8FBF9DF3A5C0DDB38BA Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa Signing time: Sun 23 Nov 2025 01:30:11 +0000 ROA not before: Sun 23 Nov 2025 01:30:11 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d4:35:0e:fa:d2:70:e7:17:67:c8:fb:f9:df:3a:5c:0d:db:38:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:11 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=ce5f550bb4580c461a0d81db7a353680f2b27c83f3b18804b74f3902f4e91407, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:74:54:d8:93:b8:ea:1b:21:94:55:a1:81: f1:4d:74:4e:15:6c:d2:0a:d5:e1:52:eb:a4:be:b0: 2e:d0:7c:0b:fd:67:4e:5f:5a:2a:be:f9:6e:ca:29: 26:e2:d5:16:05:c0:7c:ce:9a:80:73:12:db:5e:d9: 32:dc:90:5b:56:ff:a3:ef:5c:13:4a:40:3a:0b:e6: ce:6e:a9:80:27:3d:a6:0a:e1:fe:d5:fd:48:b6:ac: e7:89:ea:28:9d:cc:06:d7:12:02:80:63:10:86:56: ef:bb:83:67:03:ea:84:4c:50:e1:e1:63:6d:e1:43: f5:8c:4e:7b:6a:c4:c1:d1:08:8d:ef:01:06:64:2b: 6b:27:67:39:1a:a6:99:be:a6:fb:85:c0:32:cd:b6: 05:79:56:44:7b:e6:f9:9c:44:6a:18:d7:f7:a7:ef: 86:53:57:27:5e:e1:ae:30:6a:18:c8:f3:3c:35:df: 34:ae:c4:92:98:95:99:f3:b8:1a:00:39:6e:92:4d: 55:51:93:db:fc:5d:0f:84:93:6d:4f:be:e9:ad:42: 4f:4c:26:af:68:4e:18:19:28:89:7f:1f:b5:d9:c5: f0:f7:a7:53:85:d1:e4:43:6d:a6:be:2b:59:8e:91: a1:65:0b:5f:fa:df:ea:76:df:83:98:cd:1d:c4:e0: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D8:C7:31:EC:6D:BC:EB:27:38:80:58:3E:27:62:F3:7D:87:01:D0 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 3a:26:68:20:9a:02:8b:23:31:1e:99:0a:47:69:fb:aa:a5:03: 80:21:44:c6:1e:1d:a4:00:94:17:1e:11:9b:72:2b:7c:2a:3b: 1c:3d:f6:2d:3b:82:bf:7c:0e:d5:5c:97:07:72:f4:53:b1:fe: b6:c7:c8:7e:98:e1:0f:3e:4c:39:f4:77:9d:3b:76:44:52:77: 6d:ae:43:a4:81:45:c2:49:9c:57:87:df:c8:87:ba:5d:3b:5e: 59:8e:f3:94:4b:0f:f2:30:44:36:69:f1:ce:25:2b:b8:ec:f5: 7c:e8:ed:e4:c2:50:da:15:f4:5d:59:06:d1:33:a6:27:93:10: 22:b2:bc:f7:8e:d1:c0:f8:f1:77:ed:c9:31:85:90:91:0a:45: b6:06:f9:9d:02:2b:f5:70:1f:0b:f2:4a:23:33:e4:8d:9a:b6: 6f:4c:15:4d:6f:bc:9c:9c:1f:58:c3:0e:aa:3b:db:6f:d0:67: ba:27:3b:3d:1e:e5:5d:22:03:1c:3e:5c:28:73:eb:fe:5d:dc: 79:c2:f0:46:01:83:a6:1e:eb:59:31:df:89:ac:4b:f1:49:3d: 3a:26:ec:ce:56:49:b2:73:d4:be:3f:7b:39:f9:52:c4:86:b6: 84:cc:d8:0e:b7:ef:e5:9c:d8:9a:d6:df:2e:28:dd:ab:b6:28: 1e:24:94:5e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUa9Q1DvrScOcXZ8j7+d86XA3bOLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMTFaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGNlNWY1NTBiYjQ1ODBjNDYxYTBkODFkYjdhMzUzNjgwZjJiMjdjODNmM2Ix ODgwNGI3NGYzOTAyZjRlOTE0MDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+SdFTYk7jqGyGUVaGB8U10ThVs0grV4VLrpL6wLtB8C/1nTl9aKr75bsop JuLVFgXAfM6agHMS217ZMtyQW1b/o+9cE0pAOgvmzm6pgCc9pgrh/tX9SLas54nq KJ3MBtcSAoBjEIZW77uDZwPqhExQ4eFjbeFD9YxOe2rEwdEIje8BBmQraydnORqm mb6m+4XAMs22BXlWRHvm+ZxEahjX96fvhlNXJ17hrjBqGMjzPDXfNK7EkpiVmfO4 GgA5bpJNVVGT2/xdD4STbU++6a1CT0wmr2hOGBkoiX8ftdnF8PenU4XR5ENtpr4r WY6RoWULX/rf6nbfg5jNHcTgoSsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRy2Mcx 7G286yc4gFg+J2LzfYcB0DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWQ3OWYzNmMtZDM2Ni00YWU1LThhYjAtMTc5NjZmYjhjZjhiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA wDANBgkqhkiG9w0BAQsFAAOCAQEAOiZoIJoCiyMxHpkKR2n7qqUDgCFExh4dpACU Fx4Rm3IrfCo7HD32LTuCv3wO1VyXB3L0U7H+tsfIfpjhDz5MOfR3nTt2RFJ3ba5D pIFFwkmcV4ffyIe6XTteWY7zlEsP8jBENmnxziUruOz1fOjt5MJQ2hX0XVkG0TOm J5MQIrK8947RwPjxd+3JMYWQkQpFtgb5nQIr9XAfC/JKIzPkjZq2b0wVTW+8nJwf WMMOqjvbb9Bnuic7PR7lXSIDHD5cKHPr/l3cecLwRgGDph7rWTHfiaxL8Uk9Oibs zlZJsnPUvj97OflSxIa2hMzYDrfv5ZzYmtbfLijdq7YoHiSUXg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:27 2025 by rpki-client