This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa File: 8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa (raw, json) Hash identifier: y7aamvwy/DQNiSZozDAp3vGbyNu/UN8OY1XFiyD04Yg= Subject key identifier: A9:9C:5C:2A:4E:C4:C1:1D:C9:B6:79:62:09:2A:42:A2:61:D1:61:E0 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 513D53285228B2D94C02DD3938B2F95431632BEE Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa Signing time: Wed 10 Dec 2025 06:10:11 +0000 ROA not before: Wed 10 Dec 2025 06:10:11 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3d:53:28:52:28:b2:d9:4c:02:dd:39:38:b2:f9:54:31:63:2b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:10:11 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=6408b2355d2854652c41c62575737a980a512a0b4833011ca4f1264318dd7a34, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:2f:b5:ae:fe:9c:62:e4:93:72:72:f0:d9: ce:cd:79:c3:69:89:fb:16:3c:45:8e:2b:f6:74:b7: 3d:ee:9d:00:61:7f:28:ff:61:6d:a6:41:32:bf:b3: 7a:8e:4a:4e:12:c4:75:97:e3:8f:b2:a3:63:36:5b: 7f:a9:30:83:ca:d9:b0:49:e4:fc:58:31:ef:40:8d: d0:c1:37:57:61:8e:b3:0b:7e:a8:20:6d:83:c5:1d: f7:9c:68:2c:3e:99:bd:ee:5a:1f:a0:8d:85:90:9b: 6d:3f:b1:06:5a:f4:f4:f4:a5:bc:62:0d:af:d6:bd: f7:1c:8e:fb:18:44:92:b7:85:18:f5:ec:d8:c7:f3: 66:e3:f5:27:c1:10:e3:27:14:d4:60:b4:9f:63:f2: b5:b9:75:21:79:02:c8:47:d7:e7:13:66:37:19:72: 95:59:e0:a1:79:1b:8a:74:ac:69:42:9a:d2:ea:96: 7e:c0:14:ce:f1:77:1d:25:14:c3:8d:4b:ca:aa:5c: 42:87:da:ce:b0:d9:d9:29:2d:79:39:24:cb:e6:1f: ba:60:01:26:76:26:d2:d3:f0:9b:6f:09:aa:ce:20: 47:10:4b:41:8d:42:ed:1a:d5:c0:8c:b3:29:ad:bd: 8c:1e:c9:de:5d:0c:05:72:7c:a7:a4:e7:3f:98:0f: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9C:5C:2A:4E:C4:C1:1D:C9:B6:79:62:09:2A:42:A2:61:D1:61:E0 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:30:31:06:57:14:ac:2f:3d:ae:6f:bf:19:1e:0a:3c:7b:c2: 69:ee:fb:46:ce:34:a3:b8:62:6e:10:66:bb:64:18:61:81:7f: 55:21:9d:f0:20:cb:57:42:37:37:d2:3b:ab:97:67:1a:3b:9c: 5a:e8:fb:25:1c:26:17:8d:85:5c:ce:9e:ac:aa:61:27:0b:66: 0c:9d:a2:66:f2:ca:cd:d6:d8:4e:c4:fa:46:c8:f3:dc:a9:b5: e8:29:15:e0:75:18:f6:4c:df:91:46:5e:f4:3f:13:4f:f5:57: 44:99:55:ad:95:eb:11:b9:ca:b8:71:b9:42:26:c3:89:01:55: b1:54:b4:7e:7d:16:54:88:88:c3:2a:97:48:1d:54:34:7e:16: f8:e5:f1:36:e8:5a:6f:b8:7b:a7:d2:03:5a:41:10:92:bd:75: da:1a:64:a4:3d:d9:ae:1a:73:fc:98:c2:12:07:6c:ee:8a:6c: f3:3c:0e:8d:0b:79:95:13:d0:b1:d9:e6:72:00:8e:3b:a3:18: fd:81:73:00:c9:96:a4:c7:77:93:77:13:a5:36:4f:cb:bd:1d: e8:e1:5a:b2:1b:05:4a:56:c9:38:e6:d2:e2:58:22:0e:d9:64: dc:39:cc:11:56:3e:8a:3e:e3:a4:06:b3:96:66:dd:d8:2e:29: 51:9f:cf:71 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUUT1TKFIostlMAt05OLL5VDFjK+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjEwMTFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDY0MDhiMjM1NWQyODU0NjUyYzQxYzYyNTc1NzM3YTk4MGE1MTJhMGI0ODMz MDExY2E0ZjEyNjQzMThkZDdhMzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMS/L7Wu/pxi5JNycvDZzs15w2mJ+xY8RY4r9nS3Pe6dAGF/KP9hbaZBMr+z eo5KThLEdZfjj7KjYzZbf6kwg8rZsEnk/Fgx70CN0ME3V2GOswt+qCBtg8Ud95xo LD6Zve5aH6CNhZCbbT+xBlr09PSlvGINr9a99xyO+xhEkreFGPXs2MfzZuP1J8EQ 4ycU1GC0n2Pytbl1IXkCyEfX5xNmNxlylVngoXkbinSsaUKa0uqWfsAUzvF3HSUU w41LyqpcQofazrDZ2SkteTkky+YfumABJnYm0tPwm28Jqs4gRxBLQY1C7RrVwIyz Ka29jB7J3l0MBXJ8p6TnP5gPLy0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSpnFwq TsTBHcm2eWIJKkKiYdFh4DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OGIwY2NiYzEtMzYzOC00ZjdmLThhMjQtM2Y1ZTE4MWM4YjhjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA wDANBgkqhkiG9w0BAQsFAAOCAQEAHDAxBlcUrC89rm+/GR4KPHvCae77Rs40o7hi bhBmu2QYYYF/VSGd8CDLV0I3N9I7q5dnGjucWuj7JRwmF42FXM6erKphJwtmDJ2i ZvLKzdbYTsT6Rsjz3Km16CkV4HUY9kzfkUZe9D8TT/VXRJlVrZXrEbnKuHG5QibD iQFVsVS0fn0WVIiIwyqXSB1UNH4W+OXxNuhab7h7p9IDWkEQkr112hpkpD3Zrhpz /JjCEgds7ops8zwOjQt5lRPQsdnmcgCOO6MY/YFzAMmWpMd3k3cTpTZPy70d6OFa shsFSlbJOObS4lgiDtlk3DnMEVY+ij7jpAazlmbd2C4pUZ/PcQ== -----END CERTIFICATE-----Generated at Mon Dec 15 15:30:36 2025 by rpki-client