This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb352ba2-1c61-4993-802d-895dc73880c2.roa File: cb352ba2-1c61-4993-802d-895dc73880c2.roa (raw, json) Hash identifier: aGKtT8OAF3kFa4Jl93aH6SmjK/qYaYYmMDr6jNF1qgs= Subject key identifier: 20:AC:EE:7D:32:DC:74:47:55:90:2C:DB:C3:60:90:76:DE:A2:5B:6C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2C8AF851A28653E2E47A58AC256DA0ACCA396DFB Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb352ba2-1c61-4993-802d-895dc73880c2.roa Signing time: Thu 13 Nov 2025 02:00:44 +0000 ROA not before: Thu 13 Nov 2025 02:00:44 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8a:f8:51:a2:86:53:e2:e4:7a:58:ac:25:6d:a0:ac:ca:39:6d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 13 02:00:44 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=be5a68809f1df9fbfe05853b4b0ba87cf319be64a4cb08aa158d920b63bd7074, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:9d:10:e1:0a:25:e4:57:dd:d6:0d:4c:f5: 7d:a7:23:10:c3:ef:f7:46:28:eb:c8:d0:2f:f5:53: 80:25:58:fe:18:ab:16:48:93:9e:8f:04:86:b8:80: b1:56:03:f7:2d:ba:06:53:d6:39:db:49:6d:be:cc: 6c:5e:c1:a8:57:b9:75:f5:26:a4:1f:c0:3a:bf:d5: b1:ee:5f:8c:96:dc:3d:04:86:92:7f:0f:70:2f:05: 8d:0e:9b:92:13:d7:a8:db:08:6a:31:fe:2b:62:8e: a5:a0:fa:dd:a4:f5:c9:52:ea:4e:02:66:45:77:e1: a0:b4:0f:7e:68:7d:ba:11:ea:20:7f:75:10:e9:71: be:f8:3a:e8:29:85:18:1a:1f:35:9d:0e:12:5a:82: 9c:1f:47:fc:fb:90:5d:92:1e:ea:23:a6:e6:57:3f: fb:97:8c:1a:96:dd:b1:6f:e6:09:82:34:04:2d:a3: 06:53:83:29:4f:0d:6e:85:2c:05:11:95:f4:4c:f5: 4f:07:fc:5b:83:90:40:ad:7f:0a:60:9f:56:00:e8: 10:41:bd:e8:17:8a:bd:8b:0c:5c:98:4a:d9:4a:43: fa:be:a6:28:f3:f4:64:51:a8:2b:58:ad:1d:98:01: 22:3f:28:2e:ae:71:ab:f0:79:67:bb:ff:28:e6:77: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:EE:7D:32:DC:74:47:55:90:2C:DB:C3:60:90:76:DE:A2:5B:6C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb352ba2-1c61-4993-802d-895dc73880c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036:800::/40 Signature Algorithm: sha256WithRSAEncryption ab:78:3f:b3:ee:de:63:90:ef:1b:84:ec:45:be:50:d2:a2:ce: 66:87:4a:b0:05:3b:a8:f6:d3:54:d6:0a:4a:88:94:34:fe:62: 26:0f:93:22:f0:f0:bf:0f:29:15:e9:ac:56:48:db:ea:a5:e9: 39:27:58:e3:6e:9e:e0:e7:03:3e:8a:08:26:f8:80:f8:7c:8d: 39:fc:1c:b9:f4:1b:81:f4:7a:75:b1:99:c1:1a:51:ff:28:3e: 14:38:d1:44:2c:7e:cf:41:fd:54:ae:85:7f:eb:e6:a5:28:ab: 2c:3c:ea:10:ec:93:e8:21:a3:01:49:10:fa:04:6c:e3:2e:dc: 2a:4a:7e:85:5c:00:d7:93:c2:3a:5c:1d:92:fe:f8:a7:1a:6b: 44:1c:fc:a4:f4:b2:2f:97:e6:83:78:b1:38:1e:7e:9f:f1:57: 9a:63:d6:d8:79:f9:19:56:00:84:05:11:60:59:71:aa:30:13: 76:0d:18:40:16:f4:86:13:83:54:1d:8c:9b:0a:ec:51:97:8b: ef:fd:3e:98:0a:22:82:19:11:6c:85:82:0c:29:7a:4b:09:db: ff:60:dc:9b:01:3a:ad:a4:5e:40:3a:43:0a:86:00:bd:61:ca: 33:30:bc:d1:43:d2:12:3c:24:1a:07:01:c8:29:56:08:42:93: 11:55:af:8c -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIULIr4UaKGU+LkelisJW2grMo5bfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTMwMjAwNDRaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQGJlNWE2ODgwOWYxZGY5ZmJmZTA1ODUzYjRiMGJhODdjZjMxOWJlNjRhNGNi MDhhYTE1OGQ5MjBiNjNiZDcwNzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI/knRDhCiXkV93WDUz1facjEMPv90Yo68jQL/VTgCVY/hirFkiTno8EhriA sVYD9y26BlPWOdtJbb7MbF7BqFe5dfUmpB/AOr/Vse5fjJbcPQSGkn8PcC8FjQ6b khPXqNsIajH+K2KOpaD63aT1yVLqTgJmRXfhoLQPfmh9uhHqIH91EOlxvvg66CmF GBofNZ0OElqCnB9H/PuQXZIe6iOm5lc/+5eMGpbdsW/mCYI0BC2jBlODKU8NboUs BRGV9Ez1Twf8W4OQQK1/CmCfVgDoEEG96BeKvYsMXJhK2UpD+r6mKPP0ZFGoK1it HZgBIj8oLq5xq/B5Z7v/KOZ3enECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQgrO59 Mtx0R1WQLNvDYJB23qJbbDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Y2IzNTJiYTItMWM2MS00OTkzLTgwMmQtODk1ZGM3Mzg4MGMyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DYI MA0GCSqGSIb3DQEBCwUAA4IBAQCreD+z7t5jkO8bhOxFvlDSos5mh0qwBTuo9tNU 1gpKiJQ0/mImD5Mi8PC/DykV6axWSNvqpek5J1jjbp7g5wM+iggm+ID4fI05/By5 9BuB9Hp1sZnBGlH/KD4UONFELH7PQf1UroV/6+alKKssPOoQ7JPoIaMBSRD6BGzj LtwqSn6FXADXk8I6XB2S/vinGmtEHPyk9LIvl+aDeLE4Hn6f8VeaY9bYefkZVgCE BRFgWXGqMBN2DRhAFvSGE4NUHYybCuxRl4vv/T6YCiKCGRFshYIMKXpLCdv/YNyb ATqtpF5AOkMKhgC9YcozMLzRQ9ISPCQaBwHIKVYIQpMRVa+M -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:04 2025 by rpki-client