This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa File: e84166dd-4497-414d-9864-983017c7c326.roa (raw, json) Hash identifier: wZ0BteCd9v+3Pz5XwMhLdlcxo2p59vrICohlHfJgQVI= Subject key identifier: E9:60:2F:55:AC:5E:FE:08:8B:49:5E:FB:49:08:DB:FA:11:44:87:2A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4442332340C924425A0A4CFFC3897524E24C29F9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa Signing time: Sat 15 Nov 2025 06:20:50 +0000 ROA not before: Sat 15 Nov 2025 06:20:50 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:42:33:23:40:c9:24:42:5a:0a:4c:ff:c3:89:75:24:e2:4c:29:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:50 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=938304b1b96cc08f5f31a0061ee1437187231fe6cf5a92af3e0b4edde7e4da8a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:07:c4:64:4f:23:79:15:29:8e:9a:7d:24: 1e:96:c8:9d:e2:f1:f1:cb:4c:0f:f0:56:6e:88:90: 8e:a9:30:35:fa:ae:66:e9:47:14:02:74:0d:0a:e8: 5d:68:a7:9c:03:86:06:3e:96:7d:9d:e9:9f:18:a1: a0:73:5e:0e:2a:9c:2e:dd:53:63:52:7d:32:35:f9: 8b:a6:28:64:1c:26:e9:cb:d5:c8:b7:e5:3e:1d:bb: d9:36:f9:3c:7b:c4:fa:78:3d:af:54:67:09:14:1b: 5a:5e:b9:5d:99:f2:49:ea:b1:7e:01:17:41:8c:19: a7:6b:c5:13:cb:96:86:77:30:37:84:ce:17:12:2b: a8:d6:11:67:98:2c:b2:84:18:01:ed:1c:82:47:85: 71:c7:c0:92:b9:d7:91:3f:bf:b9:43:10:bb:42:55: fa:75:ca:52:6a:fb:79:cc:2c:4d:c2:5e:0b:49:d2: cb:93:d0:e5:74:b7:6e:d3:f7:42:56:97:66:45:ad: 18:8a:28:3f:ae:dc:38:12:d4:59:7d:dc:2f:37:0c: 95:f6:0e:4b:9b:9e:53:21:f3:ea:3e:92:1d:5c:4f: e3:78:c6:b8:00:f0:7c:bb:4c:ed:84:62:00:a0:ce: 02:26:66:98:a6:69:88:c5:81:48:5c:97:0a:9c:6a: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:60:2F:55:AC:5E:FE:08:8B:49:5E:FB:49:08:DB:FA:11:44:87:2A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036:5000::/40 Signature Algorithm: sha256WithRSAEncryption 15:89:26:c9:1c:c7:8d:3e:ef:d6:32:c2:87:b2:15:f9:65:20: 8e:f3:32:f6:72:07:a1:c1:ee:f4:f8:e7:71:00:4f:68:e7:71: 17:4d:0a:de:e3:c7:b3:9f:cf:cd:aa:0d:81:b8:d3:9e:63:95: 54:6d:5b:da:f5:69:47:08:93:ab:52:0e:45:70:a9:ff:76:f1: 9e:9d:b3:d6:bb:6c:37:dc:e0:63:d7:9d:ee:fe:90:25:c7:0b: 98:f7:3f:a4:40:4e:b8:2f:08:5f:e5:4d:d8:e2:2d:51:f0:bf: be:ab:81:3e:cb:f1:81:f8:b3:0e:30:ab:19:73:76:05:4b:35: 21:b4:1f:59:18:68:5b:b5:ca:37:31:4c:ba:df:5c:7d:e1:2b: b0:fe:26:f7:40:4a:18:08:9d:a1:d9:6d:cc:39:45:74:ca:02: 82:37:2c:89:6e:e2:13:7d:fb:20:61:a7:6b:e7:a6:94:07:21: 1c:e7:db:87:b3:e1:76:56:13:82:67:12:fe:38:23:2c:c5:7c: 32:76:79:b8:ff:47:88:fe:5b:e4:df:cf:bf:39:b8:39:d2:9f: d8:87:3e:d9:a3:9f:46:e4:cf:67:ad:89:c7:a0:de:f9:46:e5: 05:62:93:b8:35:3b:93:12:e7:a6:d2:ef:62:cc:ce:3b:69:4b: db:18:db:5a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUREIzI0DJJEJaCkz/w4l1JOJMKfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwNTBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDkzODMwNGIxYjk2Y2MwOGY1ZjMxYTAwNjFlZTE0MzcxODcyMzFmZTZjZjVh OTJhZjNlMGI0ZWRkZTdlNGRhOGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7CB8RkTyN5FSmOmn0kHpbIneLx8ctMD/BWboiQjqkwNfquZulHFAJ0DQro XWinnAOGBj6WfZ3pnxihoHNeDiqcLt1TY1J9MjX5i6YoZBwm6cvVyLflPh272Tb5 PHvE+ng9r1RnCRQbWl65XZnySeqxfgEXQYwZp2vFE8uWhncwN4TOFxIrqNYRZ5gs soQYAe0cgkeFccfAkrnXkT+/uUMQu0JV+nXKUmr7ecwsTcJeC0nSy5PQ5XS3btP3 QlaXZkWtGIooP67cOBLUWX3cLzcMlfYOS5ueUyHz6j6SHVxP43jGuADwfLtM7YRi AKDOAiZmmKZpiMWBSFyXCpxq9jUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTpYC9V rF7+CItJXvtJCNv6EUSHKjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTg0MTY2ZGQtNDQ5Ny00MTRkLTk4NjQtOTgzMDE3YzdjMzI2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DZQ MA0GCSqGSIb3DQEBCwUAA4IBAQAViSbJHMeNPu/WMsKHshX5ZSCO8zL2cgehwe70 +OdxAE9o53EXTQre48ezn8/Nqg2BuNOeY5VUbVva9WlHCJOrUg5FcKn/dvGenbPW u2w33OBj153u/pAlxwuY9z+kQE64Lwhf5U3Y4i1R8L++q4E+y/GB+LMOMKsZc3YF SzUhtB9ZGGhbtco3MUy631x94Suw/ib3QEoYCJ2h2W3MOUV0ygKCNyyJbuITffsg Yadr56aUByEc59uHs+F2VhOCZxL+OCMsxXwydnm4/0eI/lvk38+/Obg50p/Yhz7Z o59G5M9nrYnHoN75RuUFYpO4NTuTEuem0u9izM47aUvbGNta -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:27 2025 by rpki-client