This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa File: 8b940c44-168e-4976-b17d-778e9341611b.roa (raw, json) Hash identifier: JsWJkE6t1fFUSrHDYq0TfRD9y6nkd0AgVfva9mbJ54s= Subject key identifier: 00:17:65:D9:3D:21:37:81:E7:E0:6A:07:40:57:00:F5:4D:22:FA:7C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0842941D1132D106C93A81F8D707E62898AB4A7E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa Signing time: Sat 15 Nov 2025 06:31:05 +0000 ROA not before: Sat 15 Nov 2025 06:31:05 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:42:94:1d:11:32:d1:06:c9:3a:81:f8:d7:07:e6:28:98:ab:4a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:31:05 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=42bef9bd2caf62a41c630bdd1d70a3cf7488310bfbc1f0d760356129c30a6fd6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:e5:0f:a7:52:39:09:1d:46:11:fc:3c:00: 63:2c:e5:79:c0:63:6d:7b:92:1a:96:66:fb:f3:11: 36:33:6f:d1:48:79:97:b2:e2:8c:95:a0:d7:d1:8c: e0:25:07:d4:ce:4e:11:e8:1b:fa:e6:9b:47:be:45: bb:34:d1:27:2a:51:c3:57:81:0a:9a:13:99:e0:5d: 62:63:a2:fe:19:d8:1d:eb:3a:b4:ce:cd:b8:39:cf: 5d:59:6d:1c:19:03:5d:25:34:b0:c1:0b:fa:5f:1d: 2d:e1:25:7e:3b:a0:d2:e1:6b:0a:e2:a2:44:cb:3f: 21:88:a0:66:02:ed:0a:c7:29:e0:71:6f:de:2e:a3: 99:65:43:3d:69:75:ca:9f:eb:f8:28:b7:e6:ef:8d: ef:6f:f0:48:1e:a1:13:a0:aa:3f:ac:8d:a8:1f:4a: 46:1f:48:33:bb:b4:37:eb:03:77:e4:97:7c:d2:00: f8:b1:6b:d9:d8:34:9e:b6:7c:6c:98:36:e8:3a:12: ff:52:28:1c:f3:d2:5c:9d:0f:3a:51:1e:c4:e7:95: 69:71:ed:82:c4:bb:8a:d9:19:36:96:34:7a:6a:da: 5d:17:8c:94:8d:fe:76:85:c6:34:73:15:34:be:bc: 53:92:a7:95:ff:91:f6:b4:bf:9f:d1:1b:0c:f6:98: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:17:65:D9:3D:21:37:81:E7:E0:6A:07:40:57:00:F5:4D:22:FA:7C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:1080::/48 Signature Algorithm: sha256WithRSAEncryption 79:da:de:b9:49:b1:20:e3:cf:45:f4:06:b1:31:e3:78:36:e2: 13:8f:e5:d1:96:6f:d4:5c:77:51:00:03:97:82:07:f9:cb:a7: 66:de:ce:74:61:85:98:16:99:48:b2:3c:9a:1f:af:00:ac:08: 99:57:b4:08:1d:f4:ab:30:5a:01:37:4e:55:1e:26:b9:47:fd: b8:ad:38:33:7c:fd:08:e9:fd:89:75:8e:f0:7d:1e:36:45:a1: 1e:f4:0f:ef:ba:03:9d:5c:57:fe:ea:ab:cd:33:41:ff:be:5b: 74:a6:c8:db:50:01:06:8e:e0:4b:6c:23:27:7a:b5:39:48:f5: 3b:f3:80:09:6c:15:0a:b1:32:ba:56:ba:2e:89:43:d9:fa:75: d2:37:20:95:52:ef:39:61:c6:23:35:50:c2:2e:d6:ec:6d:75: f0:55:0f:ff:40:76:b8:01:2f:73:ab:11:c4:51:0c:97:23:31: 20:c8:22:1b:07:7b:ac:f4:e6:db:03:87:2d:db:cc:f7:aa:3b: 7a:8a:fc:3b:45:56:03:ea:3e:09:40:f7:79:89:ca:a6:b9:d1: 5d:62:78:9e:db:6f:aa:95:3d:be:89:e3:f2:81:a8:43:3a:00: af:31:14:19:49:08:f9:7a:35:d3:57:e9:39:1c:df:d2:98:6e: ca:b6:06:e4 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUCEKUHREy0QbJOoH41wfmKJirSn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMxMDVaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDQyYmVmOWJkMmNhZjYyYTQxYzYzMGJkZDFkNzBhM2NmNzQ4ODMxMGJmYmMx ZjBkNzYwMzU2MTI5YzMwYTZmZDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0T5Q+nUjkJHUYR/DwAYyzlecBjbXuSGpZm+/MRNjNv0Uh5l7LijJWg19GM 4CUH1M5OEegb+uabR75FuzTRJypRw1eBCpoTmeBdYmOi/hnYHes6tM7NuDnPXVlt HBkDXSU0sMEL+l8dLeElfjug0uFrCuKiRMs/IYigZgLtCscp4HFv3i6jmWVDPWl1 yp/r+Ci35u+N72/wSB6hE6CqP6yNqB9KRh9IM7u0N+sDd+SXfNIA+LFr2dg0nrZ8 bJg26DoS/1IoHPPSXJ0POlEexOeVaXHtgsS7itkZNpY0emraXReMlI3+doXGNHMV NL68U5Knlf+R9rS/n9EbDPaYT4UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQAF2XZ PSE3gefgagdAVwD1TSL6fDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OGI5NDBjNDQtMTY4ZS00OTc2LWIxN2QtNzc4ZTkzNDE2MTFiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAQ gDANBgkqhkiG9w0BAQsFAAOCAQEAedreuUmxIOPPRfQGsTHjeDbiE4/l0ZZv1Fx3 UQADl4IH+cunZt7OdGGFmBaZSLI8mh+vAKwImVe0CB30qzBaATdOVR4muUf9uK04 M3z9COn9iXWO8H0eNkWhHvQP77oDnVxX/uqrzTNB/75bdKbI21ABBo7gS2wjJ3q1 OUj1O/OACWwVCrEyula6LolD2fp10jcglVLvOWHGIzVQwi7W7G118FUP/0B2uAEv c6sRxFEMlyMxIMgiGwd7rPTm2wOHLdvM96o7eor8O0VWA+o+CUD3eYnKprnRXWJ4 nttvqpU9vonj8oGoQzoArzEUGUkI+Xo101fpORzf0phuyrYG5A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:57 2025 by rpki-client