This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa File: 6a136ad8-9412-45df-a7b1-6bc848065b5a.roa (raw, json) Hash identifier: hF7OyFuW2GZKjIYFBl07b1WTDRpvimB6dpQXbRNod7s= Subject key identifier: 64:54:82:0F:5E:49:26:0B:ED:55:BF:2B:63:1E:28:F5:7C:E7:D6:15 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7A7497224C539B50445DA93CD68D02F4F778E532 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa Signing time: Sun 23 Nov 2025 01:30:13 +0000 ROA not before: Sun 23 Nov 2025 01:30:13 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:74:97:22:4c:53:9b:50:44:5d:a9:3c:d6:8d:02:f4:f7:78:e5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:13 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=38c2c60318b9de744c725c094363eadc65c91660229d8f740030aba83b379fac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:0b:3b:d5:0b:30:24:50:41:98:67:16:d7: b7:52:28:2d:b1:7d:e3:b6:f3:ee:18:c2:08:86:00: ec:53:aa:a3:4e:85:90:85:6b:bc:f3:c0:ed:fd:5c: 39:66:9d:b3:d1:09:a1:83:65:82:24:8d:fa:d2:d6: b0:b3:2a:43:87:35:2c:97:4c:c1:b0:77:f2:d6:01: e5:32:82:78:cd:f9:c3:0a:af:cb:ce:ce:e5:b1:5c: 9d:6b:a0:5e:95:4e:ab:da:f3:e1:d2:42:61:e3:56: 5e:58:58:3a:69:27:62:1c:21:f5:b3:89:9c:ef:fd: a0:3e:88:f5:34:c9:a6:b4:ac:b0:b7:b1:76:13:af: e7:75:63:7e:94:d0:f9:d5:fd:4a:ed:52:9b:c2:e2: f5:6c:2e:b3:c8:b3:43:18:e2:d3:06:05:78:ed:b6: a0:db:76:25:b4:e8:cd:37:33:d3:6a:bf:46:ba:8b: 49:f9:00:87:99:31:f3:13:6a:46:e0:5d:f0:77:79: 2a:da:2c:d0:2a:ec:30:cc:80:37:32:a2:72:13:87: ca:d0:90:ea:f8:52:ea:e4:1b:b9:bb:a4:28:2e:4e: 94:fb:6f:0f:bf:90:ca:ca:82:d7:1a:6f:9c:2f:9a: fa:89:dd:1f:43:97:d1:e7:23:94:2e:d4:db:94:fb: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:54:82:0F:5E:49:26:0B:ED:55:BF:2B:63:1E:28:F5:7C:E7:D6:15 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a136ad8-9412-45df-a7b1-6bc848065b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:80c0::/48 Signature Algorithm: sha256WithRSAEncryption af:1d:91:14:9f:0a:00:07:4b:ea:25:24:84:ed:1f:76:c2:38: 2f:24:60:0c:fe:d0:c6:26:4c:13:c8:d9:27:33:d5:f0:83:ab: ae:e4:92:60:10:df:90:ca:38:fe:24:7d:17:6e:74:f5:d0:c5: 09:21:df:c6:ad:ea:a7:2b:1d:82:f0:e9:a6:ed:3c:0c:d0:d5: 0f:34:26:b2:89:38:27:16:cf:98:99:cb:98:8b:df:cf:33:43: ab:7c:72:df:28:24:b4:ca:9c:c0:10:b4:e6:fb:9b:a2:36:fc: 96:af:52:ff:fb:19:14:7e:27:fb:38:29:45:89:ce:08:fd:23: 6b:4b:b3:f8:3a:6d:63:c5:36:7e:71:58:60:00:36:29:6d:4f: 9f:e8:6e:c2:b1:be:85:69:f7:87:f6:8d:dd:d2:ce:c9:6f:bf: d1:ac:45:66:b0:51:b5:57:50:ca:d6:54:11:49:17:31:4c:da: 74:75:c3:0e:8d:91:2c:c2:17:c6:82:ec:82:b1:d5:c6:80:56: 3f:46:24:a3:0d:11:92:ca:eb:e2:6a:28:22:a5:3d:21:5c:81: 1c:b1:05:da:17:e7:7a:8f:4a:6d:bf:1c:ed:ec:a7:f0:0f:49: 6f:58:cd:3b:7f:d2:19:bd:5b:37:b8:85:59:b0:94:d8:04:46: 81:f8:45:86 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUenSXIkxTm1BEXak81o0C9Pd45TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMTNaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDM4YzJjNjAzMThiOWRlNzQ0YzcyNWMwOTQzNjNlYWRjNjVjOTE2NjAyMjlk OGY3NDAwMzBhYmE4M2IzNzlmYWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIsCzvVCzAkUEGYZxbXt1IoLbF947bz7hjCCIYA7FOqo06FkIVrvPPA7f1c OWads9EJoYNlgiSN+tLWsLMqQ4c1LJdMwbB38tYB5TKCeM35wwqvy87O5bFcnWug XpVOq9rz4dJCYeNWXlhYOmknYhwh9bOJnO/9oD6I9TTJprSssLexdhOv53VjfpTQ +dX9Su1Sm8Li9Wwus8izQxji0wYFeO22oNt2JbTozTcz02q/RrqLSfkAh5kx8xNq RuBd8Hd5Ktos0CrsMMyANzKichOHytCQ6vhS6uQbubukKC5OlPtvD7+QysqC1xpv nC+a+ondH0OX0ecjlC7U25T71wMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRkVIIP XkkmC+1VvytjHij1fOfWFTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NmExMzZhZDgtOTQxMi00NWRmLWE3YjEtNmJjODQ4MDY1YjVhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GqA wDANBgkqhkiG9w0BAQsFAAOCAQEArx2RFJ8KAAdL6iUkhO0fdsI4LyRgDP7QxiZM E8jZJzPV8IOrruSSYBDfkMo4/iR9F2509dDFCSHfxq3qpysdgvDppu08DNDVDzQm sok4JxbPmJnLmIvfzzNDq3xy3ygktMqcwBC05vubojb8lq9S//sZFH4n+zgpRYnO CP0ja0uz+DptY8U2fnFYYAA2KW1Pn+huwrG+hWn3h/aN3dLOyW+/0axFZrBRtVdQ ytZUEUkXMUzadHXDDo2RLMIXxoLsgrHVxoBWP0Ykow0Rksrr4mooIqU9IVyBHLEF 2hfneo9Kbb8c7eyn8A9Jb1jNO3/SGb1bN7iFWbCU2ARGgfhFhg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:02 2025 by rpki-client