This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa File: 7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa (raw, json) Hash identifier: c1JYHpfJ7ti9HnlgLCN7DapmDW9u1zCkjS+nmHfsmAk= Subject key identifier: 24:24:B3:18:36:38:E4:9B:FD:60:8A:51:CC:50:66:0D:39:C8:9A:79 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 15D86DF1F4817C6B16B6D96E28A5D651CE54BFF8 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa Signing time: Sat 15 Nov 2025 06:30:38 +0000 ROA not before: Sat 15 Nov 2025 06:30:38 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d012::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d8:6d:f1:f4:81:7c:6b:16:b6:d9:6e:28:a5:d6:51:ce:54:bf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:38 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=e5370ef9e6338c70b1a1905d9f6308ee332280065633616b8f005980c1e82160, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:4c:c6:5a:11:c9:98:67:ce:af:b2:08:09: e0:d1:7d:d0:3e:72:2f:31:57:26:16:7d:58:d3:57: ea:fb:e8:11:81:7b:85:f0:27:c6:02:d4:ed:e0:dc: 6d:e1:92:d1:17:9f:f4:67:95:1e:e4:9c:0c:5a:2a: 91:c2:7d:52:e3:57:d5:ff:73:76:2a:db:f5:56:80: d8:f9:18:b1:dc:1c:30:db:1e:26:87:fb:c8:af:47: ed:4d:9c:a5:01:cb:86:ef:cd:1c:e7:3a:4b:db:6e: 3b:a9:e2:f8:b9:ee:b7:2b:e9:ec:52:8d:bf:b5:cd: 38:8f:d3:de:3a:b2:75:c5:fc:26:d2:d3:4c:85:7a: 44:1d:45:23:bd:63:a4:ab:7f:1e:f3:5f:43:57:c5: e4:c2:4c:d5:a0:2b:dc:e0:4c:1d:08:03:51:00:4a: 86:a8:26:c2:03:92:96:3e:8c:9d:45:98:c9:c3:e5: ba:4e:33:6c:a6:98:51:d6:93:31:c4:bb:e3:ff:a9: 75:a9:c2:a1:93:31:c0:2b:41:30:aa:41:13:ed:f5: 90:02:83:54:cb:45:ef:f5:b6:a0:c7:fd:e6:1f:01: c5:0e:ba:d3:6a:7f:a4:07:d0:dd:3a:06:d2:17:8d: 43:fe:fb:5c:be:a6:b9:33:93:db:d9:0f:d8:7b:c4: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:24:B3:18:36:38:E4:9B:FD:60:8A:51:CC:50:66:0D:39:C8:9A:79 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d012::/36 Signature Algorithm: sha256WithRSAEncryption 1b:78:53:61:63:7d:2c:3b:2d:b3:e6:06:fa:a9:9b:bb:15:ec: 24:e1:5f:a1:48:fb:82:6c:91:3a:b4:d5:23:85:78:59:77:77: 2a:15:5b:d6:b3:92:5e:3a:4a:7b:71:ef:bd:53:5e:3e:2a:94: cb:3d:ee:79:f2:6d:10:13:07:81:8b:31:05:7b:a3:23:ce:cb: a7:29:b9:3b:71:36:56:9e:6e:f4:b6:be:b3:cb:f7:51:5d:c7: 8a:b1:c7:ed:7d:24:d4:64:74:2a:be:2c:2a:04:0c:31:b2:99: 60:94:59:0d:1c:22:46:60:f7:5e:4e:e1:14:29:cc:9d:66:bd: cb:89:78:bd:c2:77:77:58:6b:c9:b0:0e:8d:9e:07:88:f3:c5: c9:44:c8:f9:6e:e9:8b:e7:0b:51:f7:6d:bc:1b:01:7f:7c:95: 3d:85:71:13:f4:97:87:bb:5c:34:2c:13:41:0a:25:d5:b9:79: b5:55:c2:f1:29:61:b1:df:45:a1:1b:43:e9:b1:49:a2:81:f8: c4:1e:9e:44:3f:91:34:b6:8a:3f:60:45:ca:b1:89:f3:25:17: 7e:e4:f2:01:a3:1c:4d:e2:ac:13:34:de:84:db:4b:7a:d3:9a: 55:68:30:38:cd:cb:ba:68:13:6a:ef:36:75:0f:87:9e:92:cb: d9:e4:0c:41 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUFdht8fSBfGsWttluKKXWUc5Uv/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwMzhaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGU1MzcwZWY5ZTYzMzhjNzBiMWExOTA1ZDlmNjMwOGVlMzMyMjgwMDY1NjMz NjE2YjhmMDA1OTgwYzFlODIxNjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIrFTMZaEcmYZ86vsggJ4NF90D5yLzFXJhZ9WNNX6vvoEYF7hfAnxgLU7eDc beGS0Ref9GeVHuScDFoqkcJ9UuNX1f9zdirb9VaA2PkYsdwcMNseJof7yK9H7U2c pQHLhu/NHOc6S9tuO6ni+Lnutyvp7FKNv7XNOI/T3jqydcX8JtLTTIV6RB1FI71j pKt/HvNfQ1fF5MJM1aAr3OBMHQgDUQBKhqgmwgOSlj6MnUWYycPluk4zbKaYUdaT McS74/+pdanCoZMxwCtBMKpBE+31kAKDVMtF7/W2oMf95h8BxQ6602p/pAfQ3ToG 0heNQ/77XL6muTOT29kP2HvEiD8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQkJLMY Njjkm/1gilHMUGYNOciaeTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2RmNzY2NDktZGNjMC00ZjhjLWJlNmItMTNmY2EyN2VjNGYyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BIA MA0GCSqGSIb3DQEBCwUAA4IBAQAbeFNhY30sOy2z5gb6qZu7Fewk4V+hSPuCbJE6 tNUjhXhZd3cqFVvWs5JeOkp7ce+9U14+KpTLPe558m0QEweBizEFe6MjzsunKbk7 cTZWnm70tr6zy/dRXceKscftfSTUZHQqviwqBAwxsplglFkNHCJGYPdeTuEUKcyd Zr3LiXi9wnd3WGvJsA6NngeI88XJRMj5bumL5wtR9228GwF/fJU9hXET9JeHu1w0 LBNBCiXVuXm1VcLxKWGx30WhG0PpsUmigfjEHp5EP5E0too/YEXKsYnzJRd+5PIB oxxN4qwTNN6E20t605pVaDA4zcu6aBNq7zZ1D4eeksvZ5AxB -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:33 2025 by rpki-client