This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa File: 9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa (raw, json) Hash identifier: Y4hKAX2dhWUZG70LBazq9vLdJCKKpo7XVCHAnnOTiUo= Subject key identifier: A0:61:25:D6:1C:30:5E:B1:F3:E1:BB:9A:20:04:16:1B:85:E0:19:BD Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0165555D2CA41AE4BC5C098573D88B4A86D9B0FF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa Signing time: Sat 06 Dec 2025 04:00:05 +0000 ROA not before: Sat 06 Dec 2025 04:00:05 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06c:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:65:55:5d:2c:a4:1a:e4:bc:5c:09:85:73:d8:8b:4a:86:d9:b0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 6 04:00:05 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=99327304ae9f40ee6fbec69b163e3d22e34a9f0b1aa365ec1dd4519463a1136f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:94:45:00:b1:d0:e2:bf:4b:d2:b9:f8:d0: d2:f7:37:34:13:b4:6c:01:6f:0f:51:4d:16:ae:25: f0:97:7c:59:f7:2f:da:a4:80:aa:83:d1:cc:bd:9c: 11:58:02:5f:ee:a3:bc:42:f7:62:b2:6b:db:e7:b0: 2d:1b:2f:92:2c:6d:a4:6e:09:f4:ae:86:ca:43:d1: ec:7e:8f:2f:6a:bc:ec:3d:35:99:6a:63:53:7e:54: b5:4b:26:42:46:14:09:71:07:d1:b2:a2:13:19:70: 4c:6c:af:1c:ad:30:c4:64:a8:a6:c2:1c:96:01:9e: f2:e4:b1:fb:18:50:8c:e4:75:30:70:bf:7f:51:7f: 19:7a:f6:2d:a9:0c:4d:40:47:ff:5c:4c:3a:e1:ee: 5c:3a:a8:aa:67:db:71:7b:a7:42:de:57:2f:e7:64: de:10:af:56:32:03:e9:30:22:75:72:1c:1d:1e:23: 90:31:5c:28:9e:e5:50:22:5c:7f:24:80:c0:e5:c0: 0d:fe:af:88:ac:b0:0a:ff:64:9a:f7:20:58:50:da: 16:57:9f:a2:a6:20:63:c8:a1:32:8a:51:d6:9b:06: 41:88:17:3c:e6:38:ff:d0:37:91:8f:83:52:b0:2f: 1f:86:f1:5b:6a:9f:0d:14:a4:1b:86:75:7b:1b:c2: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:25:D6:1C:30:5E:B1:F3:E1:BB:9A:20:04:16:1B:85:E0:19:BD X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06c:e000::/48 Signature Algorithm: sha256WithRSAEncryption 9e:dd:25:4c:d1:df:ee:48:30:b0:ab:8a:11:ba:6b:cd:d2:e3: 43:8b:dd:b2:e6:ec:ed:de:08:2d:c2:b9:dc:7a:48:41:2b:ef: 39:3b:93:fc:a7:21:5c:79:25:e0:8f:1a:66:a2:64:cb:5c:06: a7:fe:9c:e3:6e:fd:1f:a2:0c:25:cd:4d:8e:b5:69:9e:3c:30: a9:76:09:04:e3:92:c6:89:f1:71:39:b1:30:7e:f1:44:ee:ed: 6c:3b:ae:3e:bb:cd:2b:85:23:f9:da:64:58:59:6e:88:47:32: fd:53:99:e3:17:1b:67:de:9c:d9:49:40:37:17:c7:cc:3e:d6: 9b:d2:57:08:91:57:69:ce:2e:87:42:ca:c0:34:94:ba:58:16: ad:92:07:9d:cf:d0:fd:a3:17:e3:9b:73:3c:b5:c2:44:d2:c4: 4d:f0:07:d9:c2:07:11:99:a6:02:b1:8c:fb:38:77:39:10:72: 6d:f5:4c:60:7e:40:76:32:86:32:fa:a7:26:9a:32:bc:2a:30: 13:dc:ed:3a:4f:be:83:ee:a3:55:64:bd:f9:bd:c5:4e:1c:a0: 7a:e0:47:3a:52:15:56:3d:b5:98:51:7b:72:0c:25:6a:3c:b8: 90:b5:a5:b1:03:37:f6:cd:89:59:b9:85:96:77:13:b6:71:14: e0:f3:c7:2b -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAWVVXSykGuS8XAmFc9iLSobZsP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDYwNDAwMDVaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDk5MzI3MzA0YWU5ZjQwZWU2ZmJlYzY5YjE2M2UzZDIyZTM0YTlmMGIxYWEz NjVlYzFkZDQ1MTk0NjNhMTEzNmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgmlEUAsdDiv0vSufjQ0vc3NBO0bAFvD1FNFq4l8Jd8Wfcv2qSAqoPRzL2c EVgCX+6jvEL3YrJr2+ewLRsvkixtpG4J9K6GykPR7H6PL2q87D01mWpjU35UtUsm QkYUCXEH0bKiExlwTGyvHK0wxGSopsIclgGe8uSx+xhQjOR1MHC/f1F/GXr2LakM TUBH/1xMOuHuXDqoqmfbcXunQt5XL+dk3hCvVjID6TAidXIcHR4jkDFcKJ7lUCJc fySAwOXADf6viKywCv9kmvcgWFDaFlefoqYgY8ihMopR1psGQYgXPOY4/9A3kY+D UrAvH4bxW2qfDRSkG4Z1exvCgcsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSgYSXW HDBesfPhu5ogBBYbheAZvTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWU2ZDAwMzQtN2RmZi00NzAxLWFiOTMtMmE5ZDVlZDkxOGMwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gzg ADANBgkqhkiG9w0BAQsFAAOCAQEAnt0lTNHf7kgwsKuKEbprzdLjQ4vdsubs7d4I LcK53HpIQSvvOTuT/KchXHkl4I8aZqJky1wGp/6c4279H6IMJc1NjrVpnjwwqXYJ BOOSxonxcTmxMH7xRO7tbDuuPrvNK4Uj+dpkWFluiEcy/VOZ4xcbZ96c2UlANxfH zD7Wm9JXCJFXac4uh0LKwDSUulgWrZIHnc/Q/aMX45tzPLXCRNLETfAH2cIHEZmm ArGM+zh3ORBybfVMYH5AdjKGMvqnJpoyvCowE9ztOk++g+6jVWS9+b3FThygeuBH OlIVVj21mFF7cgwlajy4kLWlsQM39s2JWbmFlncTtnEU4PPHKw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:48 2025 by rpki-client