This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa File: da4dde97-2ca6-497d-9086-e0957352d3a4.roa (raw, json) Hash identifier: XhzUpg64GuHjYE9AYJchX6LEW3j0ma2z/FXVPp/YSIE= Subject key identifier: F0:58:05:27:B0:5F:B0:29:71:38:B3:95:9C:F3:A7:EB:1C:4E:0E:89 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 43A04645E8FE3E49660D662C60535000EE6A9B25 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa Signing time: Wed 10 Dec 2025 05:20:34 +0000 ROA not before: Wed 10 Dec 2025 05:20:34 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d059:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a0:46:45:e8:fe:3e:49:66:0d:66:2c:60:53:50:00:ee:6a:9b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:20:34 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=6a2282c91e90830ad7cd0c515054027f8d529c7ad29a9d607d33f655e3dede45, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:12:5a:19:4d:8d:61:09:b0:25:4c:18:f0: de:5f:9b:9c:dd:9a:3e:31:c5:5d:dd:bc:78:6c:a7: 5e:a1:88:98:6f:1e:8d:49:8d:da:ab:01:3a:0a:fa: cc:57:b7:1f:1e:9d:6a:70:f8:89:3d:08:19:cd:24: 9c:89:b2:83:f5:3e:1c:44:5f:ac:a8:48:db:7b:67: 54:ef:10:7b:db:01:7a:31:dd:56:8a:4f:aa:cf:f0: df:15:92:b6:95:07:39:d6:2a:35:2d:93:a8:7b:cc: 17:4c:54:7b:c3:37:36:20:e8:7b:76:bf:dd:b8:d7: bb:03:35:aa:fa:eb:a1:7a:5a:8e:46:7f:47:5c:e1: 38:3c:a6:67:42:0e:0a:8d:7b:bd:9f:b2:ab:0b:18: a9:e5:b5:e6:34:bb:65:01:c2:74:63:4d:36:b2:06: 54:47:8c:02:57:96:39:ef:1b:e6:fc:81:18:c0:b6: af:3b:10:55:5b:28:6e:48:66:95:ec:b8:ca:33:38: 19:6f:65:25:00:71:e0:dc:6c:ab:99:4e:e4:34:fe: 87:e0:33:5d:5d:24:55:ee:4f:a9:da:67:cf:f6:5a: 6b:69:1a:d8:5d:f2:76:1c:77:bb:d5:ad:f0:ec:f9: af:12:24:7d:24:54:a0:ab:e4:c5:d7:8d:7c:db:15: 7e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:05:27:B0:5F:B0:29:71:38:B3:95:9C:F3:A7:EB:1C:4E:0E:89 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d059:8000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:21:af:91:d6:24:41:4f:0a:fd:4d:b2:85:d0:5d:46:d4:53: 95:25:41:76:e8:15:31:86:02:fe:5d:81:5c:04:5f:11:49:e5: 46:53:7d:b9:61:67:68:45:8b:1f:da:60:bb:c9:35:08:3a:43: 67:ab:47:8c:0e:58:0f:67:6c:d0:89:8b:c7:46:a7:96:54:99: 5c:70:2b:70:50:e7:e3:c2:f3:b0:34:ef:66:b0:07:bb:7e:82: 8f:df:1f:90:99:14:87:29:ea:8b:08:2d:e4:8d:84:eb:77:96: b8:68:4a:44:a4:71:04:e6:cf:85:a8:cb:f0:cf:ce:1d:4f:db: 3d:4c:f2:0a:06:5c:15:e1:04:dd:5c:88:56:6c:f3:58:e2:e0: 4b:db:1f:4c:ac:0b:fa:39:de:9d:9e:2a:97:02:ae:6a:c7:87: 79:cb:01:a8:ac:71:23:0c:0f:46:a9:cc:e6:eb:39:f4:a5:ac: 18:d4:89:e6:28:5c:78:79:49:58:8e:61:1b:d5:47:bc:3a:36: 85:84:83:d3:6e:c8:cc:9c:fd:f2:d9:23:af:9d:8c:54:3c:d5: 92:4d:f8:9e:bc:da:8d:8f:9c:b7:56:f1:28:1c:73:f6:71:fb: 1c:6d:6c:7c:2e:b1:0a:90:88:ad:c7:2c:2d:96:b9:d7:2f:42: 88:58:9e:28 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQ6BGRej+PklmDWYsYFNQAO5qmyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTIwMzRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDZhMjI4MmM5MWU5MDgzMGFkN2NkMGM1MTUwNTQwMjdmOGQ1MjljN2FkMjlh OWQ2MDdkMzNmNjU1ZTNkZWRlNDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7IEloZTY1hCbAlTBjw3l+bnN2aPjHFXd28eGynXqGImG8ejUmN2qsBOgr6 zFe3Hx6danD4iT0IGc0knImyg/U+HERfrKhI23tnVO8Qe9sBejHdVopPqs/w3xWS tpUHOdYqNS2TqHvMF0xUe8M3NiDoe3a/3bjXuwM1qvrroXpajkZ/R1zhODymZ0IO Co17vZ+yqwsYqeW15jS7ZQHCdGNNNrIGVEeMAleWOe8b5vyBGMC2rzsQVVsobkhm ley4yjM4GW9lJQBx4Nxsq5lO5DT+h+AzXV0kVe5Pqdpnz/Zaa2ka2F3ydhx3u9Wt 8Oz5rxIkfSRUoKvkxdeNfNsVfjkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTwWAUn sF+wKXE4s5Wc86frHE4OiTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGE0ZGRlOTctMmNhNi00OTdkLTkwODYtZTA5NTczNTJkM2E0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FmA MA0GCSqGSIb3DQEBCwUAA4IBAQBbIa+R1iRBTwr9TbKF0F1G1FOVJUF26BUxhgL+ XYFcBF8RSeVGU325YWdoRYsf2mC7yTUIOkNnq0eMDlgPZ2zQiYvHRqeWVJlccCtw UOfjwvOwNO9msAe7foKP3x+QmRSHKeqLCC3kjYTrd5a4aEpEpHEE5s+FqMvwz84d T9s9TPIKBlwV4QTdXIhWbPNY4uBL2x9MrAv6Od6dniqXAq5qx4d5ywGorHEjDA9G qczm6zn0pawY1InmKFx4eUlYjmEb1Ue8OjaFhIPTbsjMnP3y2SOvnYxUPNWSTfie vNqNj5y3VvEoHHP2cfscbWx8LrEKkIitxywtlrnXL0KIWJ4o -----END CERTIFICATE-----Generated at Tue Dec 16 00:27:58 2025 by rpki-client