This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa File: 92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa (raw, json) Hash identifier: dW1YP5cXyyiXlpSzUgESEZXnAJpu+UmGp+2CL9Ypubs= Subject key identifier: C6:DC:75:E5:A4:E6:7C:6C:C0:1F:69:F5:4A:6D:6F:AA:8E:1D:AB:A0 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4C275F50B58C8767D6EF0C9B55437737B254A7C1 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa Signing time: Sat 15 Nov 2025 05:50:34 +0000 ROA not before: Sat 15 Nov 2025 05:50:34 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:27:5f:50:b5:8c:87:67:d6:ef:0c:9b:55:43:77:37:b2:54:a7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:50:34 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=4c555d0a59a8e0cfb41a4e76c3877d57419dedefdf4ce21f26abb48aa6be9965, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:49:c0:47:d2:4c:b7:03:9f:83:5c:06:39: 57:bc:70:77:06:d6:f6:3a:cd:d6:a3:b8:2b:58:e1: 65:a3:56:ed:43:74:0a:ae:af:71:6d:15:b1:b7:b7: 91:fc:2f:45:44:6f:b5:34:a3:16:ee:af:04:89:d5: d6:18:4f:f1:df:08:b3:30:10:4b:c3:8d:f6:3c:c2: cb:af:9e:46:4f:9a:56:e7:cc:ac:b9:9c:a8:7f:67: 25:68:a1:9f:61:12:5b:2e:c7:d3:b1:71:f7:68:b3: 1d:c4:9a:cf:0c:32:03:21:44:0c:87:8b:32:60:e8: ab:d8:25:25:d0:20:63:3e:f4:82:42:36:fd:f2:27: 50:68:1d:bd:ad:a1:48:10:c0:4d:fc:32:87:71:21: 0d:bd:57:3c:42:da:d4:b1:f0:a4:62:6b:fc:95:85: 9f:04:67:6d:cc:1c:77:f8:0c:7f:0e:76:5d:a8:13: dc:87:59:39:72:90:93:b7:bf:41:26:70:01:aa:ab: ec:07:f0:6d:e3:91:48:48:93:1f:96:bc:50:b5:39: b1:1c:ed:9b:2e:0e:1d:41:7e:e5:e4:57:93:1c:17: 5d:28:5d:53:7d:0d:d7:a5:ab:ae:a6:17:6c:02:ba: d8:92:0e:a7:5d:ba:c3:d1:fa:38:79:69:00:fa:10: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DC:75:E5:A4:E6:7C:6C:C0:1F:69:F5:4A:6D:6F:AA:8E:1D:AB:A0 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:2000::/40 Signature Algorithm: sha256WithRSAEncryption 81:99:8b:6c:41:7c:b6:cd:81:7f:51:35:72:ea:75:fb:93:3f: 54:43:a8:ff:35:c4:ee:fa:14:52:ef:81:35:21:26:99:eb:c9: cc:84:89:1e:07:2c:10:c7:b7:72:7c:ad:66:56:09:b5:ee:23: a4:cb:46:84:7f:18:52:1e:a4:fb:02:86:74:de:18:47:6c:33: 28:8f:47:a6:71:1a:6f:41:a7:ca:55:ef:6f:24:49:84:2a:27: 7c:4f:98:18:4d:18:57:95:53:7e:51:cb:35:02:5b:df:b0:73: c1:c3:00:31:bc:c3:3c:9a:52:c2:1a:ad:84:a5:bf:37:92:d3: 6b:df:64:55:f2:f1:11:32:a7:28:95:9b:5c:83:52:a9:5e:7b: ae:b3:78:f1:da:86:3f:76:24:f3:af:e5:4b:8b:78:9f:eb:b3: d2:10:d7:6b:69:77:9d:3b:e5:48:72:a9:ce:9e:bd:d4:e2:87: 23:6e:6e:8d:ca:bc:3b:51:f4:51:4e:07:ce:a2:51:d3:6b:59: 9f:be:96:3f:a8:d9:ed:a2:ac:67:c6:96:44:96:6f:cd:a3:37: a4:62:4c:a9:57:83:6b:09:62:c9:af:9e:42:f6:d4:af:61:65: 3a:99:31:0f:4c:9d:ae:45:13:99:c9:dd:72:3f:35:7a:bf:c9: 79:e4:0d:e7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUTCdfULWMh2fW7wybVUN3N7JUp8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTUwMzRaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDRjNTU1ZDBhNTlhOGUwY2ZiNDFhNGU3NmMzODc3ZDU3NDE5ZGVkZWZkZjRj ZTIxZjI2YWJiNDhhYTZiZTk5NjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN78ScBH0ky3A5+DXAY5V7xwdwbW9jrN1qO4K1jhZaNW7UN0Cq6vcW0Vsbe3 kfwvRURvtTSjFu6vBInV1hhP8d8IszAQS8ON9jzCy6+eRk+aVufMrLmcqH9nJWih n2ESWy7H07Fx92izHcSazwwyAyFEDIeLMmDoq9glJdAgYz70gkI2/fInUGgdva2h SBDATfwyh3EhDb1XPELa1LHwpGJr/JWFnwRnbcwcd/gMfw52XagT3IdZOXKQk7e/ QSZwAaqr7AfwbeORSEiTH5a8ULU5sRztmy4OHUF+5eRXkxwXXShdU30N16WrrqYX bAK62JIOp126w9H6OHlpAPoQYfUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTG3HXl pOZ8bMAfafVKbW+qjh2roDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTIzNDRhNzYtZDU4Mi00YmM5LThmY2ItZDI4YTdjZDgzM2YxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DEg MA0GCSqGSIb3DQEBCwUAA4IBAQCBmYtsQXy2zYF/UTVy6nX7kz9UQ6j/NcTu+hRS 74E1ISaZ68nMhIkeBywQx7dyfK1mVgm17iOky0aEfxhSHqT7AoZ03hhHbDMoj0em cRpvQafKVe9vJEmEKid8T5gYTRhXlVN+Ucs1AlvfsHPBwwAxvMM8mlLCGq2Epb83 ktNr32RV8vERMqcolZtcg1KpXnuus3jx2oY/diTzr+VLi3if67PSENdraXedO+VI cqnOnr3U4ocjbm6Nyrw7UfRRTgfOolHTa1mfvpY/qNntoqxnxpZElm/NozekYkyp V4NrCWLJr55C9tSvYWU6mTEPTJ2uRROZyd1yPzV6v8l55A3n -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:29 2025 by rpki-client