This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac808304-7110-40ab-b55b-b3af42a90484.roa File: ac808304-7110-40ab-b55b-b3af42a90484.roa (raw, json) Hash identifier: 1ImZrM7N55UBQfoLWYaefFDTapD0ZZttxv78d5bNwwQ= Subject key identifier: C8:65:2E:4A:C9:4B:D0:1D:E7:83:78:75:6C:36:14:7B:1B:3B:41:0F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 14FA041836A7522FC76935CBDF9E35CBC70AE9F6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac808304-7110-40ab-b55b-b3af42a90484.roa Signing time: Sun 23 Nov 2025 01:31:03 +0000 ROA not before: Sun 23 Nov 2025 01:31:03 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fa:04:18:36:a7:52:2f:c7:69:35:cb:df:9e:35:cb:c7:0a:e9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:31:03 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=3ff1da1725c8a7b9da5134ce867fbe1654ba065ab185c9251bc66653cb879fcd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:f7:8e:5a:fa:c9:f2:5d:a9:5b:45:0a:cc: cb:23:96:14:f7:53:8c:77:32:eb:45:ca:9d:d6:58: 97:aa:e6:7e:a7:a5:06:a5:a6:ba:ac:ee:cd:33:73: 3f:89:25:2f:8c:05:8a:09:47:bc:ee:10:03:2d:cc: bb:2b:04:8e:ae:26:d3:6e:b8:34:17:23:06:95:08: 19:c7:80:a6:7a:ce:41:1f:5f:30:89:83:4d:7f:fd: f2:3b:25:16:8b:32:ee:ec:7f:be:96:f0:e0:62:c0: 43:35:07:30:79:73:cb:25:13:3a:2c:2d:b6:17:c4: d5:b8:9d:69:aa:b9:7b:4b:44:ca:0a:6b:8f:8b:51: 10:d1:33:fc:c4:21:75:d1:e4:3e:4f:49:90:5e:3e: 2e:bc:cb:50:1c:99:a3:54:10:1b:f2:cb:f7:9f:a4: c7:95:5f:ad:bb:d7:63:67:13:e6:36:88:79:12:aa: 70:91:ee:93:23:6a:5e:b5:d2:6c:6e:46:7f:ae:35: 4d:c9:34:89:2c:94:00:66:b7:5e:31:1b:28:ab:cf: db:26:6b:db:29:5c:a7:e4:6b:ec:a6:95:1c:84:a5: 8d:d5:5e:07:bf:fc:67:d9:4e:c9:9a:e2:1a:10:55: d7:34:3d:70:c1:e7:5c:ac:56:7d:07:ae:29:d1:0a: 0a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:65:2E:4A:C9:4B:D0:1D:E7:83:78:75:6C:36:14:7B:1B:3B:41:0F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac808304-7110-40ab-b55b-b3af42a90484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 0e:91:35:9d:b1:ca:60:19:28:6f:f5:95:0d:03:d1:d3:37:34: a7:b8:9a:a5:7a:c6:ad:f1:ef:bf:6b:40:50:53:cf:ca:d1:a7: 7c:89:53:cf:c0:b0:4e:11:2a:47:6d:72:fe:92:98:36:39:5d: ed:e1:1f:c0:28:db:ce:12:48:41:07:9c:73:7a:90:79:90:5f: 51:12:3c:3a:08:89:23:07:53:d8:db:59:05:69:71:99:49:02: 92:a9:03:d4:c8:f2:31:3c:90:23:59:50:90:9d:72:cc:8d:e6: 86:72:99:53:f6:f3:9e:0b:ea:b0:57:1c:8c:5b:8e:57:f6:95: 97:78:a3:5d:a0:d8:f4:b4:72:b1:31:1a:59:42:4a:d0:bb:b6: 8d:df:19:7a:2b:0a:12:a0:82:06:73:71:20:c1:29:5d:bf:1a: 92:d1:53:b3:09:eb:18:5c:55:30:6c:59:d2:19:37:33:5c:6e: 2b:68:49:81:62:7c:7c:84:d3:ae:c7:95:f1:02:a4:8a:fd:bb: dc:dc:94:68:0f:b5:40:ed:3e:14:80:d1:bd:c5:e5:9e:69:3e: d9:65:93:0d:c6:79:12:1b:28:e6:1e:ec:85:f8:68:31:e3:c4: 50:14:fc:c9:e9:3e:17:50:3a:bf:1d:cd:a4:9a:0b:ef:80:b5: b7:84:7e:70 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUFPoEGDanUi/HaTXL3541y8cK6fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMxMDNaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDNmZjFkYTE3MjVjOGE3YjlkYTUxMzRjZTg2N2ZiZTE2NTRiYTA2NWFiMTg1 YzkyNTFiYzY2NjUzY2I4NzlmY2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJOS945a+snyXalbRQrMyyOWFPdTjHcy60XKndZYl6rmfqelBqWmuqzuzTNz P4klL4wFiglHvO4QAy3MuysEjq4m0264NBcjBpUIGceApnrOQR9fMImDTX/98jsl Fosy7ux/vpbw4GLAQzUHMHlzyyUTOiwtthfE1bidaaq5e0tEygprj4tRENEz/MQh ddHkPk9JkF4+LrzLUByZo1QQG/LL95+kx5VfrbvXY2cT5jaIeRKqcJHukyNqXrXS bG5Gf641Tck0iSyUAGa3XjEbKKvP2yZr2ylcp+Rr7KaVHISljdVeB7/8Z9lOyZri GhBV1zQ9cMHnXKxWfQeuKdEKCtsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTIZS5K yUvQHeeDeHVsNhR7GztBDzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YWM4MDgzMDQtNzExMC00MGFiLWI1NWItYjNhZjQyYTkwNDg0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GoI wDANBgkqhkiG9w0BAQsFAAOCAQEADpE1nbHKYBkob/WVDQPR0zc0p7iapXrGrfHv v2tAUFPPytGnfIlTz8CwThEqR21y/pKYNjld7eEfwCjbzhJIQQecc3qQeZBfURI8 OgiJIwdT2NtZBWlxmUkCkqkD1MjyMTyQI1lQkJ1yzI3mhnKZU/bzngvqsFccjFuO V/aVl3ijXaDY9LRysTEaWUJK0Lu2jd8ZeisKEqCCBnNxIMEpXb8aktFTswnrGFxV MGxZ0hk3M1xuK2hJgWJ8fITTrseV8QKkiv273NyUaA+1QO0+FIDRvcXlnmk+2WWT DcZ5Ehso5h7shfhoMePEUBT8yek+F1A6vx3NpJoL74C1t4R+cA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:23 2025 by rpki-client