This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa File: e3c7ab12-58a1-44db-9063-7d7fef442d38.roa (raw, json) Hash identifier: R6Gp2YqItn10GxUyWWlKBNvrRq9qttX3gGnkRoQ7VHU= Subject key identifier: 31:A2:83:B1:C8:D5:53:A3:D1:E9:26:38:41:B2:2C:5C:89:BE:1B:EE Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 567A1EEEAC90072AAB6ED04FC277037AD7458436 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa Signing time: Sun 23 Nov 2025 01:31:03 +0000 ROA not before: Sun 23 Nov 2025 01:31:03 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06a:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7a:1e:ee:ac:90:07:2a:ab:6e:d0:4f:c2:77:03:7a:d7:45:84:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 23 01:31:03 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=c7b8a1c6000a1ac52d68e91499cd450beee7b00b6088da222bc536832ed44afe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:d7:0d:ae:59:a1:16:fe:97:da:eb:e5:19: 06:db:57:6a:7d:53:05:a9:36:ce:74:0c:0b:9b:71: e6:b8:28:bd:61:f9:ce:71:60:41:04:5d:bc:9a:8c: 0a:f0:d7:9e:17:c7:39:0d:c6:30:86:16:65:fe:4f: 5f:e5:02:ab:a7:6f:b0:ca:0e:8c:5b:2a:eb:38:9a: 33:23:f7:ea:b8:f8:6f:a4:46:de:18:79:41:97:70: 80:e6:ac:7b:f4:ce:d9:2a:0f:53:c1:58:76:c2:97: 2d:94:90:f6:c6:e2:7f:4b:5a:86:22:01:5d:a2:66: 6f:d8:d7:f6:d1:3b:4b:fb:47:58:cf:c1:e0:d8:fd: c7:48:9e:be:86:89:b7:57:87:f2:9f:fd:e7:67:10: 88:bc:9a:dc:75:4d:81:40:ea:fa:03:2d:3e:8e:1b: c1:54:a9:4f:c0:3a:80:40:71:30:3b:9d:63:e1:30: 3d:bc:2c:34:09:34:76:a2:1e:80:90:96:8a:b8:3f: bb:b5:6b:e8:88:36:de:e1:d5:af:6f:16:e9:98:71: 91:22:43:52:66:69:4a:53:81:89:04:95:9e:dd:b7: fc:16:53:e4:b7:46:e4:eb:01:08:fb:08:3c:5e:b2: 86:b7:e7:b8:f1:64:ed:27:86:39:0b:8b:26:78:8c: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A2:83:B1:C8:D5:53:A3:D1:E9:26:38:41:B2:2C:5C:89:BE:1B:EE X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06a:c080::/48 Signature Algorithm: sha256WithRSAEncryption 07:bc:7e:f4:3c:bc:14:ee:bb:df:e4:94:c4:d3:ee:0e:36:e8: b4:ea:ee:40:2a:fa:c4:78:ee:6d:fa:59:d6:c9:90:e1:4b:9d: ef:77:43:00:ac:fe:94:2d:92:aa:c4:08:8f:62:63:d5:e7:1b: e7:a8:14:ff:e2:f0:80:b2:d7:27:a3:8d:62:3b:0f:96:ce:d4: 24:95:79:f7:d0:b9:c3:85:29:62:b5:76:40:e4:57:11:e8:f0: 0b:3c:c4:f8:b1:12:bb:1c:a5:c5:56:80:be:7a:7f:aa:c7:9b: b2:c6:02:ca:0e:fa:cb:a9:d9:30:a8:52:f7:18:db:9a:65:a9: dc:91:40:70:d6:ca:83:ad:df:5f:d6:16:1b:ee:51:54:81:d7: 05:90:77:53:f7:b9:ec:62:ec:a7:30:68:a7:4c:fd:4f:f6:4b: 59:b2:af:3a:7c:d1:17:c1:e0:26:90:bc:50:2e:ab:a9:fa:ec: 10:51:d1:25:6f:6e:08:e3:b8:f8:74:92:29:e1:85:8a:e1:d1: 1f:b6:f2:c7:cb:c4:59:07:92:f2:b5:74:0c:97:9d:33:db:a3: 70:72:97:8c:f7:bf:aa:09:f9:26:c7:da:b7:b3:cc:ec:4d:5b: 06:b8:25:ae:2b:f7:4f:ef:7f:ae:b1:b7:e7:fb:85:3b:95:32: 75:ab:5d:c3 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUVnoe7qyQByqrbtBPwncDetdFhDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjMwMTMxMDNaFw0yNjAyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGM3YjhhMWM2MDAwYTFhYzUyZDY4ZTkxNDk5Y2Q0NTBiZWVlN2IwMGI2MDg4 ZGEyMjJiYzUzNjgzMmVkNDRhZmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBZ1w2uWaEW/pfa6+UZBttXan1TBak2znQMC5tx5rgovWH5znFgQQRdvJqM CvDXnhfHOQ3GMIYWZf5PX+UCq6dvsMoOjFsq6ziaMyP36rj4b6RG3hh5QZdwgOas e/TO2SoPU8FYdsKXLZSQ9sbif0tahiIBXaJmb9jX9tE7S/tHWM/B4Nj9x0ievoaJ t1eH8p/952cQiLya3HVNgUDq+gMtPo4bwVSpT8A6gEBxMDudY+EwPbwsNAk0dqIe gJCWirg/u7Vr6Ig23uHVr28W6ZhxkSJDUmZpSlOBiQSVnt23/BZT5LdG5OsBCPsI PF6yhrfnuPFk7SeGOQuLJniMxaECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQxooOx yNVTo9HpJjhBsixcib4b7jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTNjN2FiMTItNThhMS00NGRiLTkwNjMtN2Q3ZmVmNDQyZDM4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GrA gDANBgkqhkiG9w0BAQsFAAOCAQEAB7x+9Dy8FO673+SUxNPuDjbotOruQCr6xHju bfpZ1smQ4Uud73dDAKz+lC2SqsQIj2Jj1ecb56gU/+LwgLLXJ6ONYjsPls7UJJV5 99C5w4UpYrV2QORXEejwCzzE+LESuxylxVaAvnp/qsebssYCyg76y6nZMKhS9xjb mmWp3JFAcNbKg63fX9YWG+5RVIHXBZB3U/e57GLspzBop0z9T/ZLWbKvOnzRF8Hg JpC8UC6rqfrsEFHRJW9uCOO4+HSSKeGFiuHRH7byx8vEWQeS8rV0DJedM9ujcHKX jPe/qgn5Jsfat7PM7E1bBrglriv3T+9/rrG35/uFO5Uydatdww== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:10 2025 by rpki-client