This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa File: 85151a34-1ac3-4b9b-801b-33bd153ac88d.roa (raw, json) Hash identifier: iP8c8t/otv3SILRNSGVwgnS3jCfTNi+WMN73q6Gr1ys= Subject key identifier: F6:B7:83:38:99:06:CE:B0:28:15:2D:B5:2F:DD:1F:9E:9A:FA:F4:71 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6196ABB6811E51850934ED032A4D7567F085D83D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa Signing time: Wed 10 Dec 2025 05:40:07 +0000 ROA not before: Wed 10 Dec 2025 05:40:07 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d050:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:96:ab:b6:81:1e:51:85:09:34:ed:03:2a:4d:75:67:f0:85:d8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:40:07 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=0e78a7f9fdd9afe4a7c6147281bf19766a954b1120dd0968616d10789490cc43, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:2f:91:17:96:6b:61:e7:44:8f:2a:4c:64: 3f:88:c8:64:72:79:7d:56:7d:a3:f7:7c:23:9a:3f: da:03:ca:b5:2a:65:85:60:b6:36:9a:10:5f:1a:cf: d6:77:c8:85:7b:a5:6d:eb:a1:be:78:96:ea:7a:9a: 7c:ab:39:44:af:73:5d:e0:c8:08:06:02:19:ab:b1: 89:14:e0:af:be:59:90:9c:07:d4:fd:b4:52:82:b5: 3d:c8:2f:03:be:d1:74:2d:94:fa:bb:a7:61:dd:98: 91:21:3e:2c:41:3a:ca:3f:db:9a:d3:6e:0e:4e:19: 2d:1c:a4:7d:3e:9e:d8:85:11:d1:f2:1d:5f:16:f5: f7:b5:7f:4a:a5:66:30:34:06:ac:2e:27:65:b2:7d: a3:9a:0b:a4:28:41:63:ee:5c:4f:f9:85:e3:80:5b: 13:50:a1:77:10:21:27:0f:4c:89:17:40:53:fa:11: 8b:96:f4:38:62:fc:a4:b0:06:42:8c:43:78:56:f6: ee:5a:4c:f7:06:3e:4c:e0:be:5c:07:8d:da:0e:fb: 50:c4:68:57:52:3a:2c:a4:e0:1c:bb:61:50:64:ef: 53:a0:38:fa:a6:df:17:6b:9c:fd:65:64:b1:48:7c: 94:f1:56:25:5f:aa:ac:d4:c3:c7:ae:5d:56:2a:d9: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B7:83:38:99:06:CE:B0:28:15:2D:B5:2F:DD:1F:9E:9A:FA:F4:71 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d050:1000::/40 Signature Algorithm: sha256WithRSAEncryption af:8c:4a:de:0f:8d:26:42:24:4c:4f:6c:e1:de:59:9a:ab:dc: 85:80:c2:e3:23:61:9d:e1:d3:21:46:84:0b:53:42:d4:82:2d: 21:72:40:5a:04:2a:7a:3a:74:de:bd:25:d8:a7:00:40:98:7b: ca:f8:93:17:79:52:f8:cb:3c:a5:5d:f5:6f:7d:02:1d:f2:ff: cc:85:eb:47:49:dc:60:7a:91:ca:ed:01:c5:06:53:8a:c7:0e: 72:56:86:7a:b6:9b:79:1d:01:ae:14:8a:1e:6e:ac:d4:1b:0f: 3f:9f:83:99:ba:77:06:af:ae:1a:01:fa:5b:5b:b2:83:e9:81: ee:c1:c9:07:f8:cb:2b:53:4b:84:d8:e3:01:f5:ec:e8:c5:1e: 63:48:13:f0:d8:e7:34:f2:53:89:7e:72:59:34:7e:70:ec:f0: 77:b3:a4:ad:b0:ba:6d:91:f0:9a:29:3c:b3:d5:15:2f:31:cd: b5:8a:a6:0b:01:cc:be:09:c3:83:10:a1:6d:e2:fa:d1:2c:79: 97:66:a7:2e:07:c8:43:6c:84:ad:e2:cd:12:e9:31:16:ee:e4: e7:af:a1:c2:9b:43:4d:24:13:e5:84:08:25:e3:70:d7:f1:f7: c7:38:95:17:0b:ac:e6:2b:30:79:c8:88:a1:dd:58:90:3c:f9: 98:43:3f:c1 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUYZartoEeUYUJNO0DKk11Z/CF2D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQwMDdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDBlNzhhN2Y5ZmRkOWFmZTRhN2M2MTQ3MjgxYmYxOTc2NmE5NTRiMTEyMGRk MDk2ODYxNmQxMDc4OTQ5MGNjNDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlfL5EXlmth50SPKkxkP4jIZHJ5fVZ9o/d8I5o/2gPKtSplhWC2NpoQXxrP 1nfIhXulbeuhvniW6nqafKs5RK9zXeDICAYCGauxiRTgr75ZkJwH1P20UoK1Pcgv A77RdC2U+runYd2YkSE+LEE6yj/bmtNuDk4ZLRykfT6e2IUR0fIdXxb197V/SqVm MDQGrC4nZbJ9o5oLpChBY+5cT/mF44BbE1ChdxAhJw9MiRdAU/oRi5b0OGL8pLAG QoxDeFb27lpM9wY+TOC+XAeN2g77UMRoV1I6LKTgHLthUGTvU6A4+qbfF2uc/WVk sUh8lPFWJV+qrNTDx65dVirZ3G0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT2t4M4 mQbOsCgVLbUv3R+emvr0cTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODUxNTFhMzQtMWFjMy00YjliLTgwMWItMzNiZDE1M2FjODhkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FAQ MA0GCSqGSIb3DQEBCwUAA4IBAQCvjEreD40mQiRMT2zh3lmaq9yFgMLjI2Gd4dMh RoQLU0LUgi0hckBaBCp6OnTevSXYpwBAmHvK+JMXeVL4yzylXfVvfQId8v/MhetH SdxgepHK7QHFBlOKxw5yVoZ6tpt5HQGuFIoebqzUGw8/n4OZuncGr64aAfpbW7KD 6YHuwckH+MsrU0uE2OMB9ezoxR5jSBPw2Oc08lOJfnJZNH5w7PB3s6StsLptkfCa KTyz1RUvMc21iqYLAcy+CcODEKFt4vrRLHmXZqcuB8hDbISt4s0S6TEW7uTnr6HC m0NNJBPlhAgl43DX8ffHOJUXC6zmKzB5yIih3ViQPPmYQz/B -----END CERTIFICATE-----Generated at Tue Dec 16 00:28:04 2025 by rpki-client