This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa File: 9843a73f-18f2-433e-b871-f493b0645337.roa (raw, json) Hash identifier: D/2FPhQVD8EOwst7B4PYlnSrBptZL8k+OhOs821dZec= Subject key identifier: 70:AC:75:09:47:5C:A4:67:36:75:EF:96:17:19:78:9F:FA:5A:D7:8C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 755BBC23894AC61B7FA29C852801F222AC449D3A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa Signing time: Thu 13 Nov 2025 02:00:13 +0000 ROA not before: Thu 13 Nov 2025 02:00:13 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d03a:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5b:bc:23:89:4a:c6:1b:7f:a2:9c:85:28:01:f2:22:ac:44:9d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:13 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=a6a490e22ef5c631bdaafc1cbbd785792b3d21ba9f0e95ad22e925e569e9d8e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:61:fd:d4:a1:0a:7c:92:ba:74:eb:ca:c8: 42:d0:32:2d:19:0d:c2:e6:4a:2a:12:70:d0:36:f1: f8:41:7f:0b:ec:b3:b0:14:9a:ea:f8:89:0c:c3:b9: 20:ed:f9:5b:b1:4c:42:e0:91:23:da:d6:5b:41:b1: 79:56:8b:60:11:b8:33:60:94:49:be:7f:35:a2:06: 2d:a7:fe:61:7a:9a:94:04:15:e7:3e:89:bf:d8:61: 89:e0:e5:0d:a0:45:e0:82:04:bf:8f:43:61:4a:a9: b5:40:82:08:41:34:58:03:49:45:3f:71:96:f8:cb: 13:18:5e:36:5d:c0:d3:5b:87:17:82:d2:c4:d0:2c: 49:6b:75:e8:5e:c1:5c:42:fd:9a:0a:4e:84:7b:90: c7:21:07:02:f4:6b:3b:ff:22:e9:4f:13:ef:9c:25: b0:91:6e:4d:9a:50:4a:3c:ff:05:c3:6e:25:84:0e: 54:09:e1:0c:42:e5:ae:47:aa:48:a2:64:7e:9a:17: 4a:6e:b2:40:61:59:70:d6:88:1f:ec:94:a7:5d:a8: 27:5a:a7:91:fd:d6:13:2a:42:53:4d:15:92:14:15: e7:d8:85:ab:bc:81:68:89:6c:f4:65:c7:28:8b:22: 30:87:a1:0c:90:80:e3:e4:2d:01:42:e7:11:8d:3c: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:75:09:47:5C:A4:67:36:75:EF:96:17:19:78:9F:FA:5A:D7:8C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9843a73f-18f2-433e-b871-f493b0645337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d03a:800::/40 Signature Algorithm: sha256WithRSAEncryption 97:24:2a:e3:68:fa:05:3a:d1:1a:56:82:b8:ab:d0:96:53:af: 55:1e:27:ee:ac:7d:49:5d:c2:3d:fa:62:b7:59:fb:d1:85:1f: b6:c8:3d:63:f4:9f:83:a9:47:5e:84:38:98:09:eb:46:ac:dc: 4b:93:e1:b5:bb:d3:cb:51:06:9b:c4:2e:c3:c7:0b:60:e5:5c: 8c:17:96:9f:af:55:0b:44:6e:cd:57:6b:e7:79:e0:19:e2:64: 42:d4:d9:79:95:d5:e2:03:d5:7e:be:6a:27:12:35:94:76:8b: 98:1b:17:00:d8:5a:70:68:e9:5a:5f:2e:88:82:ee:ce:a5:4f: ba:90:12:35:66:74:e2:aa:f5:40:8e:c1:72:46:9f:38:ae:ac: 06:64:65:34:26:17:4f:b8:17:b5:1b:08:ca:e0:d6:51:37:67: fa:19:84:57:50:e3:de:46:81:45:b3:1d:dc:24:17:c6:20:47: bd:a1:80:c8:6a:43:f5:2b:c4:10:f5:69:65:c2:c7:8a:55:ac: f4:0e:19:73:a6:4d:09:4a:1e:a4:cd:60:88:0d:1a:d0:2d:c3: 64:b1:77:31:47:7b:fe:02:67:df:24:f7:c7:16:42:b9:08:8c: d4:34:15:5e:1f:a7:dd:ce:81:49:4b:60:8f:c9:17:17:ef:ad: 7a:50:c5:77 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUdVu8I4lKxht/opyFKAHyIqxEnTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwMTNaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQGE2YTQ5MGUyMmVmNWM2MzFiZGFhZmMxY2JiZDc4NTc5MmIzZDIxYmE5ZjBl OTVhZDIyZTkyNWU1NjllOWQ4ZTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJCYYf3UoQp8krp068rIQtAyLRkNwuZKKhJw0Dbx+EF/C+yzsBSa6viJDMO5 IO35W7FMQuCRI9rWW0GxeVaLYBG4M2CUSb5/NaIGLaf+YXqalAQV5z6Jv9hhieDl DaBF4IIEv49DYUqptUCCCEE0WANJRT9xlvjLExheNl3A01uHF4LSxNAsSWt16F7B XEL9mgpOhHuQxyEHAvRrO/8i6U8T75wlsJFuTZpQSjz/BcNuJYQOVAnhDELlrkeq SKJkfpoXSm6yQGFZcNaIH+yUp12oJ1qnkf3WEypCU00VkhQV59iFq7yBaIls9GXH KIsiMIehDJCA4+QtAULnEY08JS8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRwrHUJ R1ykZzZ175YXGXif+lrXjDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTg0M2E3M2YtMThmMi00MzNlLWI4NzEtZjQ5M2IwNjQ1MzM3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DoI MA0GCSqGSIb3DQEBCwUAA4IBAQCXJCrjaPoFOtEaVoK4q9CWU69VHifurH1JXcI9 +mK3WfvRhR+2yD1j9J+DqUdehDiYCetGrNxLk+G1u9PLUQabxC7Dxwtg5VyMF5af r1ULRG7NV2vneeAZ4mRC1Nl5ldXiA9V+vmonEjWUdouYGxcA2FpwaOlaXy6Igu7O pU+6kBI1ZnTiqvVAjsFyRp84rqwGZGU0JhdPuBe1GwjK4NZRN2f6GYRXUOPeRoFF sx3cJBfGIEe9oYDIakP1K8QQ9WllwseKVaz0Dhlzpk0JSh6kzWCIDRrQLcNksXcx R3v+AmffJPfHFkK5CIzUNBVeH6fdzoFJS2CPyRcX7616UMV3 -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:03 2025 by rpki-client