This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa File: b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa (raw, json) Hash identifier: wrsw1Tg5MksbQLM4dV/f9ztpXIFobts7FZxdr4Opal0= Subject key identifier: C1:74:F9:3C:64:E6:EB:08:B5:20:A4:73:E3:57:98:F2:8F:8C:AF:43 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 57F3C1A6CE03A52E745ED076784507369B3ADDF5 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa Signing time: Tue 25 Nov 2025 20:00:07 +0000 ROA not before: Tue 25 Nov 2025 20:00:07 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d032:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f3:c1:a6:ce:03:a5:2e:74:5e:d0:76:78:45:07:36:9b:3a:dd:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:07 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=0d2bf7e6ae53e43d3c06011b7196c433efb41be56503c0dacca555fdff73b4cb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:d4:71:06:6a:5c:33:68:4b:d7:78:cc:da: f3:20:4d:66:ea:bb:5c:e8:e0:0c:2a:80:e2:6b:dc: 17:49:5b:e2:e0:e9:d0:8c:d6:15:80:2d:01:e2:88: 31:0a:4a:44:cb:40:45:58:57:21:9c:ff:c5:9f:70: 3c:49:82:e7:bf:c6:38:10:e7:fd:75:ad:ca:29:d1: 38:d3:2d:de:fa:d8:42:c2:8b:7e:b5:70:b9:b8:96: 99:94:05:c0:42:75:60:a2:37:3a:06:fc:c0:3b:9f: 66:28:6b:af:73:18:0b:47:ed:77:f0:5e:c4:ab:e0: e3:6f:37:2c:a5:ec:e2:5c:66:bd:eb:9a:4b:87:6a: e4:1b:d9:53:05:f6:a0:b9:cb:27:3c:5c:1a:f2:fa: 19:ef:71:d9:f3:7b:00:93:57:00:77:a2:99:a8:5e: 28:d6:08:3f:d7:8b:94:2e:05:26:1a:31:8c:29:bc: 9e:9c:ec:0a:01:6b:9c:c9:92:36:f5:27:79:d8:e4: b3:b6:b6:93:67:f1:9c:5a:3e:48:de:e1:b5:1c:59: b8:06:01:c8:1e:0b:c2:de:d2:91:d6:c0:61:3b:87: ae:6c:eb:d7:56:89:b5:e0:99:fa:f5:55:dd:72:be: 98:41:9a:d0:54:be:a7:80:f8:d7:a4:5d:d6:cd:eb: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:74:F9:3C:64:E6:EB:08:B5:20:A4:73:E3:57:98:F2:8F:8C:AF:43 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d032:8000::/40 Signature Algorithm: sha256WithRSAEncryption 0f:47:d6:b5:ab:2f:df:67:7a:0c:c3:70:23:05:1a:aa:d9:f7: ea:21:24:35:85:fb:04:a8:ad:68:02:84:39:66:a5:84:6a:f2: 80:69:4c:24:96:2c:80:c8:02:12:e8:99:f3:cf:7a:e7:5a:0a: 74:07:1b:d8:0e:b1:70:20:79:49:b1:0d:3d:04:f0:b3:51:01: 8d:d9:85:76:ec:9d:45:16:0d:57:41:72:27:ce:a0:7b:48:b3: b9:97:21:cb:b8:9c:0f:5e:03:2c:35:7b:a6:9d:19:dd:8d:52: 6b:79:c2:49:27:01:eb:66:bd:35:e5:ce:5b:9b:29:67:cd:b5: 9e:77:e4:ac:54:5d:10:90:b1:7a:db:fe:87:b0:fb:13:35:7b: c3:80:c5:b4:16:51:03:66:c3:12:24:d7:a0:3e:e0:9e:10:52: d6:7e:b6:7d:91:e0:d8:18:a3:aa:b5:26:fb:41:f6:96:5a:8d: 7b:99:7d:e4:39:44:05:fb:4b:08:d1:51:7e:34:07:ef:1f:4c: 64:11:9e:34:00:f7:a8:ae:5a:ea:90:b8:52:7a:38:66:4b:66: a2:5c:a4:31:1f:02:61:31:0b:66:8c:c4:90:04:76:8d:12:04: 81:3b:77:f4:37:28:22:8b:58:9f:70:5d:31:b5:ff:b3:05:4e: 92:b4:72:13 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUV/PBps4DpS50XtB2eEUHNps63fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwMDdaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDBkMmJmN2U2YWU1M2U0M2QzYzA2MDExYjcxOTZjNDMzZWZiNDFiZTU2NTAz YzBkYWNjYTU1NWZkZmY3M2I0Y2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7H1HEGalwzaEvXeMza8yBNZuq7XOjgDCqA4mvcF0lb4uDp0IzWFYAtAeKI MQpKRMtARVhXIZz/xZ9wPEmC57/GOBDn/XWtyinRONMt3vrYQsKLfrVwubiWmZQF wEJ1YKI3Ogb8wDufZihrr3MYC0ftd/BexKvg4283LKXs4lxmveuaS4dq5BvZUwX2 oLnLJzxcGvL6Ge9x2fN7AJNXAHeimaheKNYIP9eLlC4FJhoxjCm8npzsCgFrnMmS NvUnedjks7a2k2fxnFo+SN7htRxZuAYByB4Lwt7SkdbAYTuHrmzr11aJteCZ+vVV 3XK+mEGa0FS+p4D416Rd1s3rtYECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTBdPk8 ZObrCLUgpHPjV5jyj4yvQzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YjY3YzY2MmEtNmU3My00N2M5LTk0NTUtNzRhZDljZTNjZGIzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DKA MA0GCSqGSIb3DQEBCwUAA4IBAQAPR9a1qy/fZ3oMw3AjBRqq2ffqISQ1hfsEqK1o AoQ5ZqWEavKAaUwkliyAyAIS6Jnzz3rnWgp0BxvYDrFwIHlJsQ09BPCzUQGN2YV2 7J1FFg1XQXInzqB7SLO5lyHLuJwPXgMsNXumnRndjVJrecJJJwHrZr015c5bmyln zbWed+SsVF0QkLF62/6HsPsTNXvDgMW0FlEDZsMSJNegPuCeEFLWfrZ9keDYGKOq tSb7QfaWWo17mX3kOUQF+0sI0VF+NAfvH0xkEZ40APeorlrqkLhSejhmS2aiXKQx HwJhMQtmjMSQBHaNEgSBO3f0Nygii1ifcF0xtf+zBU6StHIT -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:15 2025 by rpki-client