This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa File: fa3b401f-ea91-45a9-8182-d567cfac077a.roa (raw, json) Hash identifier: dBzXZ9yHcH3lZec6l6fvxYfXw90Yvl9kLCYCKksJNwc= Subject key identifier: 31:70:C3:21:D3:98:9A:45:8B:71:0F:DF:E6:09:89:AC:A1:09:F3:8F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 509B10B1E32C237BAFAB7126A1B6829480927F73 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa Signing time: Sat 15 Nov 2025 05:30:58 +0000 ROA not before: Sat 15 Nov 2025 05:30:58 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9b:10:b1:e3:2c:23:7b:af:ab:71:26:a1:b6:82:94:80:92:7f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 05:30:58 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=ef8d810a0872778dccf51ea1cbd04213dee90a8c4fc3eceafd9e2ca443358182, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:99:9b:4e:0c:be:df:b2:32:c3:33:1a:d6: 36:be:33:63:ca:54:1c:62:35:b7:c6:2d:cc:12:7a: aa:22:04:21:5b:b1:dd:9f:19:7d:72:d6:ac:d5:70: f7:d9:f7:86:4e:31:3e:7c:e2:b3:cf:c3:1a:fc:70: 8e:b6:98:4c:b5:c1:6a:74:18:d1:3c:2a:e1:27:34: 00:50:cb:84:8b:b1:c3:71:66:84:fd:86:ad:a7:50: 4d:59:3f:8b:07:95:10:9c:18:19:9b:6b:e4:e1:5f: 6f:59:3d:c0:41:4f:f2:41:82:89:11:fc:62:ac:0c: 74:1d:80:4a:d8:13:29:9e:38:07:80:cb:31:54:57: b6:96:3e:03:69:86:ad:c9:0f:6c:90:42:b4:e9:79: b5:0c:d0:e3:38:c0:ec:b8:56:55:08:09:79:39:86: 45:1d:f5:a8:0d:44:2f:58:d3:10:5c:24:a7:aa:73: 9d:2d:7e:22:06:ae:bb:66:e9:ea:42:b0:0a:4b:f4: d6:fe:c9:24:1c:41:12:92:48:da:4c:1e:63:be:cf: 2c:51:24:50:21:0f:cd:73:69:f6:95:e3:30:38:72: bf:50:30:35:2e:55:50:f7:4d:aa:b1:0b:83:f3:a2: 0a:d3:68:a8:f5:1c:77:60:d6:4a:b4:35:f7:5e:ee: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:70:C3:21:D3:98:9A:45:8B:71:0F:DF:E6:09:89:AC:A1:09:F3:8F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:b080::/48 Signature Algorithm: sha256WithRSAEncryption 18:7c:21:22:eb:81:6e:eb:8a:5b:f0:00:dc:4b:87:6d:70:cc: da:cc:bd:ab:94:9c:37:7d:e3:2e:2e:de:f8:95:0a:31:cf:c3: 6d:ea:b5:c0:05:85:97:66:41:c5:f7:2d:c5:c9:88:ab:0e:e6: d5:b6:18:9c:ac:55:4d:27:2d:02:81:7e:7c:55:d2:63:71:2c: 0d:45:a4:0e:32:94:30:7e:86:67:d7:a7:cc:be:5e:d5:0e:82: a7:93:fd:77:fe:e5:76:88:61:39:00:4e:48:b3:ac:38:6c:10: 60:05:f4:c6:d8:f2:58:85:d4:52:20:7c:5d:62:44:1a:c0:e5: a8:c5:a5:5f:ec:cc:e7:9c:8f:3f:42:01:55:33:a2:3b:e0:74: 74:f1:4c:ea:be:e3:cd:11:3d:ef:e2:b5:82:39:cd:f1:8e:dd: 9a:a6:bd:c3:10:15:fc:15:0f:68:22:58:af:1b:cb:ab:7d:cb: c7:30:b5:96:9d:50:a8:40:9b:89:2b:46:55:32:dc:fa:84:32: 44:18:59:a1:e9:0f:59:d3:8d:82:8c:15:89:d6:34:37:e9:11: 1f:b4:fd:54:b0:ad:fa:7e:14:18:dd:3d:f2:ed:c5:2a:fe:5b: 23:e9:05:86:bf:0a:04:57:89:ee:7c:80:4d:13:8e:c2:d0:aa: b0:00:e1:9e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUUJsQseMsI3uvq3EmobaClICSf3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNTMwNThaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGVmOGQ4MTBhMDg3Mjc3OGRjY2Y1MWVhMWNiZDA0MjEzZGVlOTBhOGM0ZmMz ZWNlYWZkOWUyY2E0NDMzNTgxODIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ52mZtODL7fsjLDMxrWNr4zY8pUHGI1t8YtzBJ6qiIEIVux3Z8ZfXLWrNVw 99n3hk4xPnzis8/DGvxwjraYTLXBanQY0Twq4Sc0AFDLhIuxw3FmhP2GradQTVk/ iweVEJwYGZtr5OFfb1k9wEFP8kGCiRH8YqwMdB2AStgTKZ44B4DLMVRXtpY+A2mG rckPbJBCtOl5tQzQ4zjA7LhWVQgJeTmGRR31qA1EL1jTEFwkp6pznS1+Igauu2bp 6kKwCkv01v7JJBxBEpJI2kweY77PLFEkUCEPzXNp9pXjMDhyv1AwNS5VUPdNqrEL g/OiCtNoqPUcd2DWSrQ1917uB80CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQxcMMh 05iaRYtxD9/mCYmsoQnzjzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmEzYjQwMWYtZWE5MS00NWE5LTgxODItZDU2N2NmYWMwNzdhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGw gDANBgkqhkiG9w0BAQsFAAOCAQEAGHwhIuuBbuuKW/AA3EuHbXDM2sy9q5ScN33j Li7e+JUKMc/Dbeq1wAWFl2ZBxfctxcmIqw7m1bYYnKxVTSctAoF+fFXSY3EsDUWk DjKUMH6GZ9enzL5e1Q6Cp5P9d/7ldohhOQBOSLOsOGwQYAX0xtjyWIXUUiB8XWJE GsDlqMWlX+zM55yPP0IBVTOiO+B0dPFM6r7jzRE97+K1gjnN8Y7dmqa9wxAV/BUP aCJYrxvLq33LxzC1lp1QqECbiStGVTLc+oQyRBhZoekPWdONgowVidY0N+kRH7T9 VLCt+n4UGN098u3FKv5bI+kFhr8KBFeJ7nyATROOwtCqsADhng== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:20 2025 by rpki-client