This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa File: 19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa (raw, json) Hash identifier: B2Yf928HGJkBjg9nDngKbIoAMoyv2DEHtwFvTp47dsc= Subject key identifier: 20:3B:5C:F5:56:D9:97:B1:9F:6A:6E:90:14:EC:B7:80:FF:4E:C7:FE Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0A4E7FB8AC328DBD6608FEF9ADFA4BFC4A41FEEC Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa Signing time: Wed 10 Dec 2025 05:30:10 +0000 ROA not before: Wed 10 Dec 2025 05:30:10 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4e:7f:b8:ac:32:8d:bd:66:08:fe:f9:ad:fa:4b:fc:4a:41:fe:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:30:10 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a55e03df583ed52f21f0bebc5565dbb46f6e75cd79d32fd449f6322b475a61d0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:15:c5:82:da:4a:a1:30:71:4d:44:cc:3c: 3c:03:46:12:e9:43:a9:2f:43:d8:36:c6:01:b1:3e: 39:b2:85:6c:42:b5:61:56:ee:6e:ee:ab:47:65:8c: af:05:6a:1b:1f:66:d4:9a:f2:4c:f5:d1:42:18:05: 52:4f:6b:c1:2e:d0:52:d2:87:2c:99:53:f9:f9:78: 99:39:ac:91:2e:42:57:d6:5b:a0:51:b9:55:f5:d7: b4:1c:59:a5:b0:68:98:98:a0:47:dc:7c:44:e8:c6: e4:53:dd:80:0d:94:cf:a0:66:dd:f2:91:0a:c6:f3: d7:db:c2:5b:7e:a4:d5:3e:a4:c4:ec:70:71:f9:36: 47:16:ee:0d:f4:50:85:ff:39:64:5d:d1:db:e3:94: d7:7a:8c:98:1c:3e:44:30:ca:cd:bc:13:9e:54:65: cc:5e:e8:ba:4e:73:67:6b:78:f0:40:4e:60:17:a6: bb:f7:4a:f0:5f:50:4e:6d:13:51:56:f5:2c:19:76: 23:9e:cb:36:6a:96:c9:b3:af:59:72:eb:83:ec:17: e7:17:31:48:bb:03:e9:6b:92:52:0b:8c:6b:11:65: 6c:b2:1a:5d:45:90:29:05:9b:5f:08:04:45:d9:65: 2e:27:6e:58:aa:d8:af:d1:97:d7:f9:1d:02:0a:61: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3B:5C:F5:56:D9:97:B1:9F:6A:6E:90:14:EC:B7:80:FF:4E:C7:FE X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:5080::/48 Signature Algorithm: sha256WithRSAEncryption a4:91:8e:b5:f1:cb:05:c2:ae:c6:0b:1f:d5:51:68:02:aa:fd: be:75:aa:7e:15:57:04:40:26:4a:27:d4:e5:2f:ac:5d:dc:6b: cb:43:58:d0:e4:61:1a:9b:da:64:01:a9:62:3b:73:8a:f3:1c: 52:83:a1:be:2a:91:ef:1b:7c:1f:b3:e1:f6:42:48:21:05:bc: c1:b3:b8:47:85:c7:4d:0e:7e:47:ea:c7:eb:7d:d0:ce:8c:09: 8b:11:20:f7:4a:77:b9:14:ce:33:e5:b6:25:a3:dd:87:5d:28: 4c:8e:eb:e0:7f:b4:f8:b1:7d:67:8a:3f:c7:d1:f4:aa:ca:4b: b0:2d:d4:f7:d4:81:55:47:1d:37:bc:50:1b:91:b1:4b:6c:86: 40:95:75:b0:41:64:6b:a7:96:b6:08:3e:01:3d:73:af:12:2b: c5:90:72:73:d9:e7:6d:03:dd:7f:e4:9a:90:b1:f2:63:13:74: f7:b3:0a:be:f5:35:0b:bb:22:1f:33:56:48:c0:82:91:72:65: 3d:62:4f:bb:7c:e1:36:54:4e:87:53:e3:71:a1:ad:2b:83:b8: 46:82:b9:75:40:85:e6:4a:8c:b0:89:38:be:72:01:43:94:8a: 53:06:85:09:c5:b7:45:47:4d:b5:1b:a1:f3:60:c5:4a:29:fa: dd:ca:5b:c1 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUCk5/uKwyjb1mCP75rfpL/EpB/uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMwMTBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGE1NWUwM2RmNTgzZWQ1MmYyMWYwYmViYzU1NjVkYmI0NmY2ZTc1Y2Q3OWQz MmZkNDQ5ZjYzMjJiNDc1YTYxZDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaYFcWC2kqhMHFNRMw8PANGEulDqS9D2DbGAbE+ObKFbEK1YVbubu6rR2WM rwVqGx9m1JryTPXRQhgFUk9rwS7QUtKHLJlT+fl4mTmskS5CV9ZboFG5VfXXtBxZ pbBomJigR9x8ROjG5FPdgA2Uz6Bm3fKRCsbz19vCW36k1T6kxOxwcfk2RxbuDfRQ hf85ZF3R2+OU13qMmBw+RDDKzbwTnlRlzF7ouk5zZ2t48EBOYBemu/dK8F9QTm0T UVb1LBl2I57LNmqWybOvWXLrg+wX5xcxSLsD6WuSUguMaxFlbLIaXUWQKQWbXwgE RdllLiduWKrYr9GX1/kdAgphZtsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQgO1z1 VtmXsZ9qbpAU7LeA/07H/jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTlhMjdkOWYtM2NjOS00YWM0LTlhZmItMzk5ZjY2YmVlNjBiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9Q gDANBgkqhkiG9w0BAQsFAAOCAQEApJGOtfHLBcKuxgsf1VFoAqr9vnWqfhVXBEAm SifU5S+sXdxry0NY0ORhGpvaZAGpYjtzivMcUoOhviqR7xt8H7Ph9kJIIQW8wbO4 R4XHTQ5+R+rH633QzowJixEg90p3uRTOM+W2JaPdh10oTI7r4H+0+LF9Z4o/x9H0 qspLsC3U99SBVUcdN7xQG5GxS2yGQJV1sEFka6eWtgg+AT1zrxIrxZByc9nnbQPd f+SakLHyYxN097MKvvU1C7siHzNWSMCCkXJlPWJPu3zhNlROh1PjcaGtK4O4RoK5 dUCF5kqMsIk4vnIBQ5SKUwaFCcW3RUdNtRuh82DFSin63cpbwQ== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:36 2026 by rpki-client