This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c167813a-1fe2-4420-897c-8f1cda39d0d3.roa File: c167813a-1fe2-4420-897c-8f1cda39d0d3.roa (raw, json) Hash identifier: /tfG+UHvkBY64tvhTTZlc4dKIH4FDqzF8t108jIusRE= Subject key identifier: 0F:1F:C0:10:D8:38:A3:56:78:74:4E:C4:27:B2:6F:F7:EF:D2:88:A4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 77137347EFDBE17F4A36E0CA4E1DECB7219A8031 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c167813a-1fe2-4420-897c-8f1cda39d0d3.roa Signing time: Sun 23 Nov 2025 01:30:35 +0000 ROA not before: Sun 23 Nov 2025 01:30:35 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:13:73:47:ef:db:e1:7f:4a:36:e0:ca:4e:1d:ec:b7:21:9a:80:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:30:35 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=f08d75450b01e301d677422faa85dde7257ef7fc19558a8c3f07e82bd25b64d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:af:86:9d:71:0e:cc:41:1d:cc:23:b2:8c: 3c:de:f8:ab:23:f3:08:56:9a:e9:f4:7e:de:2d:5f: 2e:ce:d8:86:36:42:9f:4d:8c:19:ee:ce:01:91:ab: 3b:22:ba:0f:28:7c:51:d1:28:94:67:50:4f:bb:6e: f3:46:0c:ee:08:b7:58:3c:b9:43:21:75:ca:6c:0b: e3:d7:d4:58:31:75:08:b3:14:8a:06:72:da:a3:f7: 3f:e9:29:24:16:69:63:46:d7:c0:0e:de:5b:8f:1a: ef:ac:97:79:f4:d1:ef:1a:85:f6:de:33:6c:6b:35: 03:62:21:ce:6b:16:16:26:8b:e2:25:c1:2a:13:d5: 8c:a1:fc:d4:c2:3d:79:fc:eb:4e:fe:18:2b:20:17: ad:59:c6:2a:23:ab:a6:05:a2:a3:4d:ad:3b:c9:b2: 41:40:3f:84:04:4e:d7:86:a9:6c:fb:59:ea:c8:a8: c1:e1:10:39:e2:eb:f2:41:6f:e0:a1:c5:2e:db:6b: 7f:cb:a2:a4:4e:86:7f:2c:82:77:28:65:e0:c9:77: 70:28:3e:ea:bf:3c:f9:77:46:9f:d4:ff:f8:6f:66: f6:b2:bb:d2:5a:db:26:51:c0:25:a1:7c:51:c7:32: e3:4f:2d:67:26:6d:02:97:6b:62:61:04:ad:9e:0c: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1F:C0:10:D8:38:A3:56:78:74:4E:C4:27:B2:6F:F7:EF:D2:88:A4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c167813a-1fe2-4420-897c-8f1cda39d0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:1080::/48 Signature Algorithm: sha256WithRSAEncryption 7b:18:9c:dc:76:86:c8:00:9c:0e:f1:f8:cf:52:0c:4f:df:76: 18:f0:5a:ee:43:de:5b:3a:2f:26:75:ea:bd:d4:ac:36:c6:e8: 2a:8e:67:f1:bb:d7:20:50:d7:f8:41:22:d4:f2:76:ca:ad:36: b5:ab:6e:3f:b9:11:16:e3:97:c2:79:d9:08:73:cf:d7:fb:31: d1:c6:09:1e:41:d0:db:d4:0e:fd:c2:1d:c7:b7:60:0c:ff:d0: a6:3e:10:7a:fe:7a:e5:8a:20:f3:77:db:0e:96:12:20:00:9e: 57:d1:6a:0a:bf:e0:7c:fa:fb:be:04:86:00:9d:a0:5b:07:4f: ce:39:1a:c3:8b:0c:a6:4b:ea:4c:64:c5:a4:f3:e8:a3:c9:0b: e7:95:7c:4a:f8:0e:c2:e5:f0:9f:4f:1b:fb:37:c8:1b:11:23: f0:f7:56:94:77:7e:12:4b:90:f1:76:c9:0a:ee:c7:52:38:95: 0d:e8:0b:28:e6:26:27:71:e8:7d:fc:0d:45:90:98:13:1b:19: 95:13:2a:fa:5d:d1:45:39:78:f4:34:25:b0:f7:08:b0:72:3d: 7e:44:b7:7f:85:ad:55:e8:71:5e:2d:f3:3a:c4:f4:4a:0b:7a: 13:b5:21:f3:4e:1b:a3:9e:dd:3a:c2:f3:9e:75:4c:b1:7f:7b: b9:6c:38:62 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUdxNzR+/b4X9KNuDKTh3styGagDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMwMzVaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGYwOGQ3NTQ1MGIwMWUzMDFkNjc3NDIyZmFhODVkZGU3MjU3ZWY3ZmMxOTU1 OGE4YzNmMDdlODJiZDI1YjY0ZDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGRr4adcQ7MQR3MI7KMPN74qyPzCFaa6fR+3i1fLs7YhjZCn02MGe7OAZGr OyK6Dyh8UdEolGdQT7tu80YM7gi3WDy5QyF1ymwL49fUWDF1CLMUigZy2qP3P+kp JBZpY0bXwA7eW48a76yXefTR7xqF9t4zbGs1A2IhzmsWFiaL4iXBKhPVjKH81MI9 efzrTv4YKyAXrVnGKiOrpgWio02tO8myQUA/hARO14apbPtZ6sioweEQOeLr8kFv 4KHFLttrf8uipE6GfyyCdyhl4Ml3cCg+6r88+XdGn9T/+G9m9rK70lrbJlHAJaF8 Uccy408tZyZtApdrYmEErZ4Mxz8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQPH8AQ 2DijVnh0TsQnsm/379KIpDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzE2NzgxM2EtMWZlMi00NDIwLTg5N2MtOGYxY2RhMzlkMGQzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GoQ gDANBgkqhkiG9w0BAQsFAAOCAQEAexic3HaGyACcDvH4z1IMT992GPBa7kPeWzov JnXqvdSsNsboKo5n8bvXIFDX+EEi1PJ2yq02tatuP7kRFuOXwnnZCHPP1/sx0cYJ HkHQ29QO/cIdx7dgDP/Qpj4Qev565Yog83fbDpYSIACeV9FqCr/gfPr7vgSGAJ2g WwdPzjkaw4sMpkvqTGTFpPPoo8kL55V8SvgOwuXwn08b+zfIGxEj8PdWlHd+EkuQ 8XbJCu7HUjiVDegLKOYmJ3HoffwNRZCYExsZlRMq+l3RRTl49DQlsPcIsHI9fkS3 f4WtVehxXi3zOsT0Sgt6E7Uh804bo57dOsLznnVMsX97uWw4Yg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:27:41 2025 by rpki-client