This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa File: 819bfec2-19de-4cdb-ba40-657fff6a743e.roa (raw, json) Hash identifier: 9NZehlcC3B/4iTdWifayV5o/aVvIaR0IYXqJ6tLgT0E= Subject key identifier: 73:B4:91:F8:3C:7C:DF:2A:83:45:40:28:13:10:4A:B2:E1:FD:FB:C4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6E0B6F0040C02180C526B3E9F743EB8FE627397F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa Signing time: Sat 15 Nov 2025 05:30:32 +0000 ROA not before: Sat 15 Nov 2025 05:30:32 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0b:6f:00:40:c0:21:80:c5:26:b3:e9:f7:43:eb:8f:e6:27:39:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:30:32 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=e1327092cfbeea9ea45f8c5d0ae76551b5c8ab10cf483623d8e185f188b4ea53, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:90:dd:f4:b9:4f:cd:35:de:8c:23:4b:65: 22:c9:87:60:75:9a:0f:ca:5f:93:0e:72:28:4a:9b: e7:5d:e5:a7:cf:6a:56:26:33:73:2e:2f:2a:99:61: 22:07:d1:4e:2d:e0:48:55:b0:0f:66:ba:c3:ab:0b: cf:47:0b:34:19:9c:8a:6b:3f:77:e3:ce:b6:2f:5d: a4:8d:80:a4:62:81:ca:45:ef:3d:86:b8:99:6b:64: ca:76:41:09:3c:99:ed:55:39:95:4c:e8:7c:5b:9f: 89:ce:11:8e:a9:92:9d:39:b1:fd:44:b2:6c:75:98: b1:12:35:2f:b9:93:c1:18:16:cd:05:c3:d0:c6:42: 0c:96:0a:f1:a1:18:3d:25:e2:e2:6b:9d:96:fb:4e: 18:2b:eb:83:c8:cc:28:9a:f3:69:e1:5d:09:c2:6b: 54:13:f4:1f:20:04:9b:ec:a8:e0:46:5c:ec:91:7b: dc:21:a3:92:29:36:32:f8:2b:4d:06:8a:19:44:63: 0e:0b:ad:7d:23:df:a3:6c:ba:e2:30:8c:8f:e9:e9: 00:45:b8:47:9e:2a:03:e0:c9:84:02:46:fc:5a:05: 1b:a3:3b:eb:dd:5d:d1:ef:1d:c4:7c:e0:dc:04:fc: 1d:5f:ab:ec:21:2c:06:e7:a3:5b:03:7b:a7:30:23: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B4:91:F8:3C:7C:DF:2A:83:45:40:28:13:10:4A:B2:E1:FD:FB:C4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:9000::/40 Signature Algorithm: sha256WithRSAEncryption 50:e9:76:50:70:3a:7c:43:61:87:5a:56:ad:5f:0a:11:3e:a6: b8:0f:71:40:58:16:8e:d8:6f:c5:af:39:5a:45:7a:58:5a:7e: d3:c7:3a:dc:3b:0f:5b:ca:62:6a:a1:28:86:30:4a:7f:a7:cc: 98:b9:4a:ce:e9:49:8f:6d:98:bb:1c:e2:6d:ed:53:50:17:12: cd:fe:62:eb:21:34:de:80:b6:ff:01:2a:9c:09:65:60:1d:6c: a9:f7:48:b7:aa:45:e1:ba:8b:7e:fc:30:c8:45:24:d5:12:df: 34:e5:a6:39:9c:2a:01:25:ec:b5:81:35:9e:05:9e:c4:0e:15: 85:0e:c6:7e:b4:56:a7:b6:9b:c9:00:61:97:ec:47:85:55:86: 52:bb:b1:0c:a5:2b:9d:c1:da:d9:b2:fe:e0:b4:ba:c4:44:24: 64:3a:cf:b7:0a:15:50:14:4c:c1:80:8d:88:d9:54:b9:6a:85: 64:8f:a7:63:95:9f:d4:ab:02:ef:b5:52:50:3a:23:0c:f4:35: 26:b5:9d:34:21:dd:d0:0c:86:0e:00:76:74:93:12:66:79:d8: 2a:c8:60:48:35:05:eb:a6:37:85:ab:7e:ab:ce:f6:69:61:35: 4a:80:d1:23:73:68:2d:c1:25:ca:79:30:13:9b:e4:20:3c:e4: 47:43:63:44 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbgtvAEDAIYDFJrPp90Prj+YnOX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMwMzJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGUxMzI3MDkyY2ZiZWVhOWVhNDVmOGM1ZDBhZTc2NTUxYjVjOGFiMTBjZjQ4 MzYyM2Q4ZTE4NWYxODhiNGVhNTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8CkN30uU/NNd6MI0tlIsmHYHWaD8pfkw5yKEqb513lp89qViYzcy4vKplh IgfRTi3gSFWwD2a6w6sLz0cLNBmcims/d+POti9dpI2ApGKBykXvPYa4mWtkynZB CTyZ7VU5lUzofFufic4RjqmSnTmx/USybHWYsRI1L7mTwRgWzQXD0MZCDJYK8aEY PSXi4mudlvtOGCvrg8jMKJrzaeFdCcJrVBP0HyAEm+yo4EZc7JF73CGjkik2Mvgr TQaKGURjDgutfSPfo2y64jCMj+npAEW4R54qA+DJhAJG/FoFG6M7691d0e8dxHzg 3AT8HV+r7CEsBuejWwN7pzAjI00CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRztJH4 PHzfKoNFQCgTEEqy4f37xDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODE5YmZlYzItMTlkZS00Y2RiLWJhNDAtNjU3ZmZmNmE3NDNlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H+Q MA0GCSqGSIb3DQEBCwUAA4IBAQBQ6XZQcDp8Q2GHWlatXwoRPqa4D3FAWBaO2G/F rzlaRXpYWn7TxzrcOw9bymJqoSiGMEp/p8yYuUrO6UmPbZi7HOJt7VNQFxLN/mLr ITTegLb/ASqcCWVgHWyp90i3qkXhuot+/DDIRSTVEt805aY5nCoBJey1gTWeBZ7E DhWFDsZ+tFantpvJAGGX7EeFVYZSu7EMpSudwdrZsv7gtLrERCRkOs+3ChVQFEzB gI2I2VS5aoVkj6djlZ/UqwLvtVJQOiMM9DUmtZ00Id3QDIYOAHZ0kxJmedgqyGBI NQXrpjeFq36rzvZpYTVKgNEjc2gtwSXKeTATm+QgPORHQ2NE -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:18 2025 by rpki-client