This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa File: 03a11d7d-6d37-488c-8fe1-258c484d1682.roa (raw, json) Hash identifier: Al4uMor+XSrJmOtM6B8tZ0uLbQeiBs20quSrWwNApAg= Subject key identifier: F8:01:32:45:CA:4A:3C:0A:AD:FB:50:69:2C:2E:E0:3A:E4:B5:C8:25 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5DB8CFC9235E697A23C31133B9452263A3870449 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa Signing time: Wed 10 Dec 2025 05:50:37 +0000 ROA not before: Wed 10 Dec 2025 05:50:37 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d050:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b8:cf:c9:23:5e:69:7a:23:c3:11:33:b9:45:22:63:a3:87:04:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:37 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a7d68f6d3637aa647e11e8c8c2cc8449115df9bac5fe193c75bf1225fe13c725, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:2e:8e:fb:d5:8a:cf:fb:89:9e:39:34:ed: bb:be:01:c5:67:9f:fc:fa:50:4e:da:d6:8a:f3:25: ac:11:cb:de:53:cd:42:da:8d:2b:7e:63:6b:3f:64: bd:98:cb:f7:ec:99:a3:16:01:5b:1c:1b:65:51:4c: 76:1a:c3:fd:67:8f:fe:72:f9:94:bf:c4:62:f8:91: 45:72:cd:11:cb:75:a4:8a:df:25:d9:78:cd:bd:d7: 10:86:34:de:17:f4:0d:6a:fd:c8:5c:af:d1:e0:9e: fa:e7:20:20:b3:83:aa:bd:4d:8e:bb:7b:a7:a8:79: 34:7c:45:9c:cd:d3:07:69:9b:8c:d3:95:5a:ae:26: 15:23:22:ff:76:a1:31:30:ef:9e:a6:49:6c:e7:fa: 73:19:c0:1c:32:8a:d2:e6:c7:8a:28:35:2d:35:06: 83:de:cf:34:02:d4:f9:09:1d:80:4f:6f:4e:d5:fc: 04:61:c9:d7:a8:43:53:1d:7f:ee:04:a8:53:53:1a: e2:3c:d4:3f:84:24:aa:d5:32:e3:04:48:43:e9:be: a4:d3:ff:7a:1b:c9:0b:9e:19:24:16:44:83:e6:de: 9c:ba:37:18:48:d5:3d:78:7b:97:74:9b:8d:07:44: af:69:0b:eb:7e:9e:8c:be:36:85:89:45:da:77:a7: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:01:32:45:CA:4A:3C:0A:AD:FB:50:69:2C:2E:E0:3A:E4:B5:C8:25 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d050:b000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:ac:c5:41:48:ba:67:cb:b1:2b:cf:bf:b6:4f:3c:3e:19:bc: d1:3b:51:4b:60:c1:7e:30:36:85:62:34:1a:58:89:f0:93:8d: 41:a0:87:0f:c5:88:c1:44:4d:1a:2c:4f:c6:d0:94:dd:54:0c: 6b:ee:c3:70:1f:df:e8:82:57:f6:e9:b2:dd:f5:e0:d6:14:c7: 81:eb:1d:1a:70:64:b7:d4:49:f5:0c:60:89:e5:ab:ee:95:0b: 74:e2:2d:8b:07:e8:75:e9:57:5f:d8:88:36:dd:c8:0d:05:a7: 61:be:e9:d1:b8:b8:7e:f6:a2:71:fb:0f:54:7c:fe:25:da:fa: 49:df:c1:b5:01:11:78:e7:2a:87:65:3c:8f:b9:15:a5:ca:e5: 29:df:3a:34:26:f3:83:ab:6d:0d:dc:fc:ac:8e:43:72:bd:3a: 5f:5e:82:1a:2f:ef:42:54:b1:1a:07:3b:07:d3:c7:c5:cb:a4: d2:c5:e7:ed:1a:87:76:9b:bf:4b:79:76:23:62:45:2d:e1:5e: 00:7b:15:ca:37:5f:98:40:c3:34:ac:cb:51:72:e6:67:ce:40: a2:24:bd:32:c2:9e:78:33:20:4a:1b:34:b6:ca:7d:13:62:e6: dd:a5:2f:df:c8:29:c5:a6:65:3e:1e:07:64:1f:58:af:c0:fb: 0b:00:ac:22 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXbjPySNeaXojwxEzuUUiY6OHBEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwMzdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGE3ZDY4ZjZkMzYzN2FhNjQ3ZTExZThjOGMyY2M4NDQ5MTE1ZGY5YmFjNWZl MTkzYzc1YmYxMjI1ZmUxM2M3MjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOoLo771YrP+4meOTTtu74BxWef/PpQTtrWivMlrBHL3lPNQtqNK35jaz9k vZjL9+yZoxYBWxwbZVFMdhrD/WeP/nL5lL/EYviRRXLNEct1pIrfJdl4zb3XEIY0 3hf0DWr9yFyv0eCe+ucgILODqr1Njrt7p6h5NHxFnM3TB2mbjNOVWq4mFSMi/3ah MTDvnqZJbOf6cxnAHDKK0ubHiig1LTUGg97PNALU+QkdgE9vTtX8BGHJ16hDUx1/ 7gSoU1Ma4jzUP4QkqtUy4wRIQ+m+pNP/ehvJC54ZJBZEg+benLo3GEjVPXh7l3Sb jQdEr2kL636ejL42hYlF2nenCiMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT4ATJF yko8Cq37UGksLuA65LXIJTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDNhMTFkN2QtNmQzNy00ODhjLThmZTEtMjU4YzQ4NGQxNjgyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FCw MA0GCSqGSIb3DQEBCwUAA4IBAQA6rMVBSLpny7Erz7+2Tzw+GbzRO1FLYMF+MDaF YjQaWInwk41BoIcPxYjBRE0aLE/G0JTdVAxr7sNwH9/oglf26bLd9eDWFMeB6x0a cGS31En1DGCJ5avulQt04i2LB+h16Vdf2Ig23cgNBadhvunRuLh+9qJx+w9UfP4l 2vpJ38G1ARF45yqHZTyPuRWlyuUp3zo0JvODq20N3PysjkNyvTpfXoIaL+9CVLEa BzsH08fFy6TSxeftGod2m79LeXYjYkUt4V4AexXKN1+YQMM0rMtRcuZnzkCiJL0y wp54MyBKGzS2yn0TYubdpS/fyCnFpmU+HgdkH1ivwPsLAKwi -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:35 2026 by rpki-client