This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa File: d4a512a3-4257-431f-b201-8d747948cebb.roa (raw, json) Hash identifier: IhjEcQkUh82GxA5PDz9VoDph9KPJdxTsVVn5y4AhN54= Subject key identifier: 8C:B8:09:40:EE:2A:01:9B:77:82:AE:22:81:24:73:EA:26:D3:F0:9D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 174E813D8FAAF58CD13914D7C9A0F2FFA9A17DD4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa Signing time: Sat 15 Nov 2025 06:00:12 +0000 ROA not before: Sat 15 Nov 2025 06:00:12 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4e:81:3d:8f:aa:f5:8c:d1:39:14:d7:c9:a0:f2:ff:a9:a1:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:00:12 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=4b2eef048e6cdc16a8f3c7b147ecf1d18175c36ef43c21b0debc2878c2da89e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a6:95:ec:1c:f2:53:36:7f:ea:56:75:f0:12: 50:9d:7d:e8:16:04:56:f1:e9:f7:ce:91:79:ad:2a: 98:01:91:7b:2e:d8:01:fc:5a:f0:97:46:99:21:f6: f6:17:a4:f8:cc:45:37:e1:32:62:c6:07:95:ff:8c: ca:24:d2:11:03:3a:9e:a0:94:ca:c2:d0:ff:ed:0e: c3:de:93:98:c0:87:b3:73:ff:14:b4:5c:ca:23:60: 88:78:f3:4c:0c:0a:3b:21:15:c7:b4:d3:70:6b:fd: b3:0f:1b:3a:58:43:d7:66:e8:1f:c6:d4:9d:d6:a3: bb:f1:9d:24:b5:c1:93:e0:19:d8:8b:8d:6b:52:05: d5:a6:f2:2b:67:b0:9d:b5:4f:7a:15:ae:a0:38:c8: 74:f6:7c:e2:08:da:0c:3d:4e:82:41:b3:1c:af:2e: b0:64:4c:5e:c3:ff:da:17:f6:68:25:9e:9c:67:45: 86:46:0b:d1:0d:af:37:5a:22:42:0d:e6:3d:af:14: 07:91:64:76:79:39:34:fe:f3:f1:85:70:8e:d5:6a: 16:79:7f:ca:cb:d3:e0:dc:21:aa:14:dd:e6:f3:8b: a4:c3:78:7d:95:29:d5:df:e6:4f:89:18:c7:09:41: 8c:2a:09:6f:20:31:b8:f3:73:80:bb:5c:13:0c:78: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B8:09:40:EE:2A:01:9B:77:82:AE:22:81:24:73:EA:26:D3:F0:9D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:a1:a7:69:53:80:f1:53:f9:1f:fa:34:21:93:12:55:6d:9d: f8:25:0d:7f:ed:87:90:d9:3d:89:7b:61:ad:51:10:81:41:b5: f2:2f:ed:69:0a:56:ce:01:bb:a1:44:97:68:52:3c:8f:09:df: e4:57:8b:39:97:23:b1:bb:70:6a:48:e5:e7:41:61:36:42:f1: b9:ac:35:14:35:c7:e8:5a:01:6d:d6:12:18:d5:c4:ee:d8:62: bb:23:6d:e6:15:27:ab:5f:d9:0f:42:d8:67:fc:ee:a0:fa:ec: fe:d3:fe:6d:c0:f7:76:52:6a:8f:37:40:f7:62:47:0b:95:f7: 9c:bd:13:2a:cc:c0:ca:89:c4:bb:21:67:03:03:17:27:d2:1c: c1:39:c0:1a:b8:ba:56:e7:da:b1:fb:ac:5b:32:cb:57:38:35: cc:6e:10:03:5e:91:62:2b:c5:3b:20:88:d3:78:9b:1a:68:d8: a0:8e:c2:40:90:0c:f4:7f:fb:00:fb:9c:c6:fc:09:c0:2e:74: 60:c6:dc:24:b0:64:eb:77:40:06:3d:75:38:c5:d4:48:f2:ca: cd:66:73:1a:86:5f:6f:b1:85:67:42:ee:f0:72:31:6e:c0:b8: d2:20:51:ac:33:62:1b:e5:93:fc:29:1d:95:7f:bb:40:15:ac: 60:3d:30:49 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUF06BPY+q9YzRORTXyaDy/6mhfdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjAwMTJaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDRiMmVlZjA0OGU2Y2RjMTZhOGYzYzdiMTQ3ZWNmMWQxODE3NWMzNmVmNDNj MjFiMGRlYmMyODc4YzJkYTg5ZTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPGmlewc8lM2f+pWdfASUJ196BYEVvHp986Rea0qmAGRey7YAfxa8JdGmSH2 9hek+MxFN+EyYsYHlf+MyiTSEQM6nqCUysLQ/+0Ow96TmMCHs3P/FLRcyiNgiHjz TAwKOyEVx7TTcGv9sw8bOlhD12boH8bUndaju/GdJLXBk+AZ2IuNa1IF1abyK2ew nbVPehWuoDjIdPZ84gjaDD1OgkGzHK8usGRMXsP/2hf2aCWenGdFhkYL0Q2vN1oi Qg3mPa8UB5Fkdnk5NP7z8YVwjtVqFnl/ysvT4NwhqhTd5vOLpMN4fZUp1d/mT4kY xwlBjCoJbyAxuPNzgLtcEwx4u2MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSMuAlA 7ioBm3eCriKBJHPqJtPwnTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDRhNTEyYTMtNDI1Ny00MzFmLWIyMDEtOGQ3NDc5NDhjZWJiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADA wDANBgkqhkiG9w0BAQsFAAOCAQEAXaGnaVOA8VP5H/o0IZMSVW2d+CUNf+2HkNk9 iXthrVEQgUG18i/taQpWzgG7oUSXaFI8jwnf5FeLOZcjsbtwakjl50FhNkLxuaw1 FDXH6FoBbdYSGNXE7thiuyNt5hUnq1/ZD0LYZ/zuoPrs/tP+bcD3dlJqjzdA92JH C5X3nL0TKszAyonEuyFnAwMXJ9IcwTnAGri6VufasfusWzLLVzg1zG4QA16RYivF OyCI03ibGmjYoI7CQJAM9H/7APucxvwJwC50YMbcJLBk63dABj11OMXUSPLKzWZz GoZfb7GFZ0Lu8HIxbsC40iBRrDNiG+WT/CkdlX+7QBWsYD0wSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:08 2025 by rpki-client