This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa File: edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa (raw, json) Hash identifier: uuQQalfTvvVEhPcUarp451bPHze00zujioHdvRbE4JM= Subject key identifier: 36:D6:66:26:B7:E2:B0:F1:3D:DA:9E:EB:37:0F:9F:D0:5B:D1:DF:5D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3D4DBFE1FB6D043F69174E9A7669ACC16671DC0E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa Signing time: Sat 15 Nov 2025 06:30:48 +0000 ROA not before: Sat 15 Nov 2025 06:30:48 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d014::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4d:bf:e1:fb:6d:04:3f:69:17:4e:9a:76:69:ac:c1:66:71:dc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:30:48 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=994fb93049988c5ad4fb43e25f3754b12d1c439d47781e9b3a115117f8b2b17c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:4c:f4:b2:f4:fa:35:7a:7d:3a:40:b7:67: 26:18:fc:ad:47:3e:f5:b7:0d:04:5c:18:75:47:eb: 3e:25:42:d1:22:9a:4e:45:70:d9:cf:f0:79:37:02: d2:d3:97:02:4b:86:df:11:29:2b:c6:60:46:a0:0d: 77:b8:d9:cf:e1:e5:0e:7a:ec:e2:0b:08:51:55:bd: 05:53:aa:cc:83:fc:c2:db:1e:c0:fc:16:22:76:a0: e8:f1:32:43:69:9e:0d:6e:62:39:a6:4b:b9:6d:f6: 6a:20:e9:87:7b:55:82:40:2b:c2:22:c7:5b:74:77: ac:95:c8:03:6d:9e:dc:7b:29:b6:a0:01:04:d9:ab: ea:35:53:f9:ea:3f:24:93:67:06:18:44:99:48:d1: ff:81:a5:8e:b6:9d:ad:5c:eb:1f:45:14:5d:a7:61: aa:8b:b6:bd:b5:b7:ed:74:7a:09:40:54:52:a6:d9: 13:34:fc:62:4a:fc:f9:0a:58:dd:30:0d:76:c6:34: 9a:5d:bd:ee:dd:cf:0f:33:81:b8:1e:ff:b8:f5:36: d6:0a:48:c5:c6:d5:31:fe:5d:3c:11:02:25:ef:34: 73:0d:09:0d:37:ae:bc:af:c3:bf:c9:09:ac:dc:77: 52:0f:29:7a:ce:b8:ad:ec:81:ae:40:53:f5:de:80: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D6:66:26:B7:E2:B0:F1:3D:DA:9E:EB:37:0F:9F:D0:5B:D1:DF:5D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d014::/38 Signature Algorithm: sha256WithRSAEncryption 66:82:98:4b:88:e6:e1:db:40:dd:6a:77:65:24:e0:ed:a1:b6: 7b:50:93:95:fd:cc:b8:08:06:65:bc:ff:f1:7e:02:6d:4c:25: 53:ca:e0:dc:e7:92:4d:8c:52:4d:fc:7f:39:fe:cb:88:09:c6: a7:71:c7:f0:dd:ea:83:2e:52:60:6a:a9:e9:b8:85:f0:fa:fa: 76:f4:fb:55:36:e7:98:d2:0b:87:2a:1c:55:ad:c7:b0:06:7d: e4:02:0f:e3:8a:82:55:7c:67:03:50:c6:30:28:0d:13:35:9f: 41:0e:6d:4e:25:00:fa:13:08:e1:5a:21:28:1a:4a:0e:d2:62: be:33:19:00:70:df:22:c4:f2:72:fa:85:e4:ec:d6:76:79:ed: 39:7f:c9:5d:ca:59:6d:bf:eb:70:ec:92:04:99:34:3a:1e:83: 9a:30:61:0d:12:52:05:48:fe:e2:e2:21:fb:e2:93:2c:94:f3: e4:50:1b:c2:75:be:5e:cd:68:5b:5e:72:22:77:26:fd:01:94: cf:bd:29:22:43:91:31:75:d2:5c:4f:70:a6:dc:e2:9a:cd:46: 65:b0:ef:48:f7:77:ca:1b:ff:dc:e3:78:bb:e0:50:67:6c:93: b3:b3:58:47:94:8b:09:13:69:a9:6c:f0:bd:de:06:41:d0:ea: 31:d8:0b:bc -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUPU2/4fttBD9pF06admmswWZx3A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjMwNDhaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDk5NGZiOTMwNDk5ODhjNWFkNGZiNDNlMjVmMzc1NGIxMmQxYzQzOWQ0Nzc4 MWU5YjNhMTE1MTE3ZjhiMmIxN2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWgTPSy9Po1en06QLdnJhj8rUc+9bcNBFwYdUfrPiVC0SKaTkVw2c/weTcC 0tOXAkuG3xEpK8ZgRqANd7jZz+HlDnrs4gsIUVW9BVOqzIP8wtsewPwWInag6PEy Q2meDW5iOaZLuW32aiDph3tVgkArwiLHW3R3rJXIA22e3HsptqABBNmr6jVT+eo/ JJNnBhhEmUjR/4GljradrVzrH0UUXadhqou2vbW37XR6CUBUUqbZEzT8Ykr8+QpY 3TANdsY0ml297t3PDzOBuB7/uPU21gpIxcbVMf5dPBECJe80cw0JDTeuvK/Dv8kJ rNx3Ug8pes64reyBrkBT9d6Afe0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ21mYm t+Kw8T3anus3D5/QW9HfXTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZWRjYzk3ODktMTM4OC00YTVmLWExYWUtMWJiNThjNGNiMzE5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BQA MA0GCSqGSIb3DQEBCwUAA4IBAQBmgphLiObh20DdandlJODtobZ7UJOV/cy4CAZl vP/xfgJtTCVTyuDc55JNjFJN/H85/suICcanccfw3eqDLlJgaqnpuIXw+vp29PtV NueY0guHKhxVrcewBn3kAg/jioJVfGcDUMYwKA0TNZ9BDm1OJQD6EwjhWiEoGkoO 0mK+MxkAcN8ixPJy+oXk7NZ2ee05f8ldylltv+tw7JIEmTQ6HoOaMGENElIFSP7i 4iH74pMslPPkUBvCdb5ezWhbXnIidyb9AZTPvSkiQ5ExddJcT3Cm3OKazUZlsO9I 93fKG//c43i74FBnbJOzs1hHlIsJE2mpbPC93gZB0Oox2Au8 -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:54 2025 by rpki-client