This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa File: 0849241f-abaf-4c57-aadb-d881485a0aac.roa (raw, json) Hash identifier: 35K0DzWMSM0hA6senDWmFXR4DwKR8XHdrTQn8+ZIASw= Subject key identifier: 53:CB:D9:C7:7F:CA:53:58:87:B8:C1:97:9C:8A:FA:2B:64:97:19:EC Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 31DCA0A7B0B7A651D8A539D5C65FCA49523A5714 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa Signing time: Wed 10 Dec 2025 05:30:08 +0000 ROA not before: Wed 10 Dec 2025 05:30:08 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d012::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:dc:a0:a7:b0:b7:a6:51:d8:a5:39:d5:c6:5f:ca:49:52:3a:57:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:30:08 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=949c0cb96345a9dec0b67df331390e3fddb4b83873765e822dc3c4e813eeb8c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:77:7b:ef:03:37:f6:24:9c:09:9e:8c:72: 47:12:1d:54:fc:b2:e7:6b:99:c3:b1:e9:0f:d6:ad: dd:88:bf:19:26:18:c3:d9:a3:d6:20:0f:ba:2a:16: a3:0d:3f:a7:f9:0a:e7:a6:bd:7c:c9:fe:7c:e6:8a: 8d:99:92:98:16:a6:8b:02:e8:d7:0c:bf:45:c1:ab: 2e:85:af:73:cb:6b:88:f3:76:1d:fd:fc:bd:fb:a6: 8a:73:66:c5:bd:82:1c:ef:f0:53:5e:bd:81:76:8b: 4b:41:fa:94:b8:0b:cf:4d:e1:d7:d1:c9:3b:86:01: 81:cd:e8:ec:b3:2e:9d:54:75:a5:7c:7f:3b:0a:4e: ff:b5:cb:6b:b1:85:2f:92:d2:62:33:36:1e:53:ca: 42:99:f1:1a:18:2b:e9:36:39:aa:8f:52:5c:fe:c4: 4d:b3:6e:db:ff:c5:08:57:85:c8:75:4b:1b:b3:ac: 45:1d:8b:e1:c2:4c:bd:91:f2:58:3e:cc:49:4a:60: e1:7c:d1:03:04:a6:c8:72:dd:aa:25:3a:6e:f0:73: bc:a4:92:89:f1:c8:be:98:27:25:06:81:13:8f:84: 11:74:b9:fe:31:58:42:8d:54:60:e9:fc:4d:ef:52: db:93:43:a9:2b:a6:37:f6:e2:19:c2:01:62:21:9d: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:D9:C7:7F:CA:53:58:87:B8:C1:97:9C:8A:FA:2B:64:97:19:EC X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d012::/38 Signature Algorithm: sha256WithRSAEncryption 54:15:32:03:7f:9f:b7:60:e6:86:d2:b1:f4:b8:71:8c:63:a4: f8:e5:ef:0e:26:a5:1e:df:94:ea:1d:c8:f1:17:36:b7:14:78: 2b:d7:c3:c2:58:7b:17:1a:cb:35:8a:f0:c0:65:f5:41:98:c5: d1:c5:91:34:5b:62:38:64:d5:13:da:e5:2d:f1:76:3a:17:84: 48:20:fb:8e:30:4e:15:87:16:fc:53:15:e9:bc:35:ba:a0:97: 6a:0b:ea:aa:7c:75:1e:98:9f:51:2e:dc:6a:ba:12:5a:02:fa: 6c:15:f3:e4:8c:5c:c4:08:52:99:5c:dd:96:03:d7:bb:c1:86: 5b:52:4e:63:02:f6:04:e3:eb:b9:35:70:eb:ad:e0:7e:21:b3: 8f:b9:7c:70:65:18:c2:3c:60:34:7c:0b:32:5f:16:89:02:b6: ee:d9:ab:52:b8:d1:d6:a3:bd:8b:2b:b6:5f:75:ed:5b:47:5b: cb:cc:01:6d:14:6d:29:ed:be:8f:05:46:3a:0e:04:63:e5:33: 55:a3:5c:52:c5:dc:9a:ce:f3:7f:03:8d:5a:47:a6:75:5f:57: c5:49:00:b1:2b:ee:01:6e:02:49:85:0f:98:66:9f:0b:a7:0a: 12:41:42:3b:ad:44:d5:04:31:46:73:63:2e:ce:15:74:95:60: c6:e3:7f:0b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUMdygp7C3plHYpTnVxl/KSVI6VxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMwMDhaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDk0OWMwY2I5NjM0NWE5ZGVjMGI2N2RmMzMxMzkwZTNmZGRiNGI4Mzg3Mzc2 NWU4MjJkYzNjNGU4MTNlZWI4YzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxVd3vvAzf2JJwJnoxyRxIdVPyy52uZw7HpD9at3Yi/GSYYw9mj1iAPuioW ow0/p/kK56a9fMn+fOaKjZmSmBamiwLo1wy/RcGrLoWvc8triPN2Hf38vfuminNm xb2CHO/wU169gXaLS0H6lLgLz03h19HJO4YBgc3o7LMunVR1pXx/OwpO/7XLa7GF L5LSYjM2HlPKQpnxGhgr6TY5qo9SXP7ETbNu2//FCFeFyHVLG7OsRR2L4cJMvZHy WD7MSUpg4XzRAwSmyHLdqiU6bvBzvKSSifHIvpgnJQaBE4+EEXS5/jFYQo1UYOn8 Te9S25NDqSumN/biGcIBYiGdVLkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRTy9nH f8pTWIe4wZecivorZJcZ7DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDg0OTI0MWYtYWJhZi00YzU3LWFhZGItZDg4MTQ4NWEwYWFjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BIA MA0GCSqGSIb3DQEBCwUAA4IBAQBUFTIDf5+3YOaG0rH0uHGMY6T45e8OJqUe35Tq HcjxFza3FHgr18PCWHsXGss1ivDAZfVBmMXRxZE0W2I4ZNUT2uUt8XY6F4RIIPuO ME4Vhxb8UxXpvDW6oJdqC+qqfHUemJ9RLtxquhJaAvpsFfPkjFzECFKZXN2WA9e7 wYZbUk5jAvYE4+u5NXDrreB+IbOPuXxwZRjCPGA0fAsyXxaJArbu2atSuNHWo72L K7Zfde1bR1vLzAFtFG0p7b6PBUY6DgRj5TNVo1xSxdyazvN/A41aR6Z1X1fFSQCx K+4BbgJJhQ+YZp8LpwoSQUI7rUTVBDFGc2MuzhV0lWDG438L -----END CERTIFICATE-----Generated at Sun Dec 14 03:23:29 2025 by rpki-client