This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa File: c8af18fc-ae06-42ae-9533-a5516ea722d4.roa (raw, json) Hash identifier: WQ9zpgWf5+tKzW7SrGTir/V8V9O+jeaDAcJ5KgvtzPs= Subject key identifier: 05:66:15:DC:A7:EF:BF:61:3D:8F:7A:3F:09:46:53:90:75:BF:CA:4D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7E8304C6B5E4B63F1BA31E26B0A99C02F18D1E4A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa Signing time: Sat 15 Nov 2025 06:10:22 +0000 ROA not before: Sat 15 Nov 2025 06:10:22 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:83:04:c6:b5:e4:b6:3f:1b:a3:1e:26:b0:a9:9c:02:f1:8d:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:10:22 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=4d506f25d627f6e20a1e3da3c84991561d0789ed17d8529b41aefbedeb0b8fe2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:09:ba:bb:05:64:35:86:3f:cd:18:ce:ff: f7:65:67:bc:84:40:0e:cf:e1:8c:f6:bc:00:85:c7: 2c:86:74:06:88:e5:c9:56:bf:63:28:4a:75:8e:f0: 98:4e:c5:f2:2b:83:59:49:55:6c:9a:de:27:1f:fa: 4d:f2:ab:3a:8e:cc:75:14:9e:53:a7:99:8d:87:2f: b8:c9:38:cc:0b:5f:6c:42:85:ab:db:ca:b6:3f:05: 99:c7:6f:d2:10:c7:09:48:56:ac:9a:34:e2:67:99: 7c:d7:09:ad:74:97:8a:37:ba:f6:4e:85:c8:4e:8d: 24:e3:ca:25:29:2a:00:9a:3d:92:69:b6:dd:b5:8e: 80:b2:9d:d5:db:10:60:0d:3d:3d:1b:22:3f:f0:7c: 84:ac:30:f7:ea:97:09:f2:e4:d3:44:6b:66:33:8e: f5:54:87:66:98:2e:d3:25:e9:2f:03:fe:61:7c:28: ea:df:e2:ed:c0:3f:19:a8:2a:7c:54:2d:06:45:c9: 1b:98:6e:f8:4b:bc:57:14:09:06:54:55:b7:31:b1: 25:55:35:3b:97:16:51:48:7b:96:8d:d4:9e:b9:f7: c9:20:f1:b8:b8:7a:ac:e4:b7:00:2d:db:db:cd:63: b7:79:ae:da:df:aa:61:c4:81:34:2e:b5:e1:c9:44: de:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:66:15:DC:A7:EF:BF:61:3D:8F:7A:3F:09:46:53:90:75:BF:CA:4D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af18fc-ae06-42ae-9533-a5516ea722d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:9080::/48 Signature Algorithm: sha256WithRSAEncryption c2:cf:94:17:af:7c:98:f7:f4:44:d7:ed:10:0b:e9:60:78:91: fa:86:04:ca:c8:4a:56:5c:eb:c9:0c:a2:5a:8a:83:68:06:bd: 31:f8:04:fa:0d:af:34:d6:08:22:97:fa:3a:4e:9a:e2:34:08: 53:d9:88:28:7e:b3:ca:17:24:d2:fa:ae:3d:11:db:91:74:7a: 06:b5:7b:b5:b7:b1:52:c8:18:2c:9d:e5:1a:e8:b8:e1:03:c7: 6d:ca:93:7f:e7:2b:24:ea:c3:16:e0:39:f8:ea:50:23:5d:fa: 6d:06:d2:fc:65:21:8b:de:ec:1b:b9:27:30:40:0f:7b:77:be: 63:33:cf:80:2b:e5:a7:1a:49:35:6a:5e:b4:27:82:35:5e:f9: 8c:60:c3:3c:ea:21:57:cd:6e:dc:61:03:1e:f1:9f:46:95:63: 7a:1a:d9:4f:ad:f8:87:2c:a2:e6:e3:62:e1:85:b1:90:72:02: 6c:f8:26:5e:d2:e0:91:f8:e9:ed:7c:2b:45:96:ad:de:de:8c: a2:d0:ff:2c:6a:e8:b3:dd:18:5c:4a:ef:c3:87:ec:15:51:b6: db:24:b3:33:b8:a2:c0:3d:ee:ac:8d:00:eb:a4:61:4f:f6:98: 23:d5:56:92:99:6d:73:3d:99:18:a1:a9:cd:48:91:74:20:a0: 5c:05:ed:74 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUfoMExrXktj8box4msKmcAvGNHkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjEwMjJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDRkNTA2ZjI1ZDYyN2Y2ZTIwYTFlM2RhM2M4NDk5MTU2MWQwNzg5ZWQxN2Q4 NTI5YjQxYWVmYmVkZWIwYjhmZTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjLCbq7BWQ1hj/NGM7/92VnvIRADs/hjPa8AIXHLIZ0BojlyVa/YyhKdY7w mE7F8iuDWUlVbJreJx/6TfKrOo7MdRSeU6eZjYcvuMk4zAtfbEKFq9vKtj8Fmcdv 0hDHCUhWrJo04meZfNcJrXSXije69k6FyE6NJOPKJSkqAJo9kmm23bWOgLKd1dsQ YA09PRsiP/B8hKww9+qXCfLk00RrZjOO9VSHZpgu0yXpLwP+YXwo6t/i7cA/Gagq fFQtBkXJG5hu+Eu8VxQJBlRVtzGxJVU1O5cWUUh7lo3Unrn3ySDxuLh6rOS3AC3b 281jt3mu2t+qYcSBNC614clE3jsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQFZhXc p++/YT2Pej8JRlOQdb/KTTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzhhZjE4ZmMtYWUwNi00MmFlLTk1MzMtYTU1MTZlYTcyMmQ0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACQ gDANBgkqhkiG9w0BAQsFAAOCAQEAws+UF698mPf0RNftEAvpYHiR+oYEyshKVlzr yQyiWoqDaAa9MfgE+g2vNNYIIpf6Ok6a4jQIU9mIKH6zyhck0vquPRHbkXR6BrV7 tbexUsgYLJ3lGui44QPHbcqTf+crJOrDFuA5+OpQI136bQbS/GUhi97sG7knMEAP e3e+YzPPgCvlpxpJNWpetCeCNV75jGDDPOohV81u3GEDHvGfRpVjehrZT634hyyi 5uNi4YWxkHICbPgmXtLgkfjp7XwrRZat3t6MotD/LGros90YXErvw4fsFVG22ySz M7iiwD3urI0A66RhT/aYI9VWkpltcz2ZGKGpzUiRdCCgXAXtdA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:50 2025 by rpki-client