This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1db7d6f9-20a2-495c-9303-96004ae64814.roa File: 1db7d6f9-20a2-495c-9303-96004ae64814.roa (raw, json) Hash identifier: aKPBdljr+zvkdgu7NNt37Bjc1gL9K9EfKK+HVJcJMkk= Subject key identifier: 26:16:0C:45:8A:BD:2A:62:1B:B8:2B:85:54:58:0E:94:12:28:6B:95 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7CF7923AE3058F44AF2643FC8F8A97FE70B39A1C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1db7d6f9-20a2-495c-9303-96004ae64814.roa Signing time: Mon 08 Dec 2025 02:10:30 +0000 ROA not before: Mon 08 Dec 2025 02:10:30 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06f:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f7:92:3a:e3:05:8f:44:af:26:43:fc:8f:8a:97:fe:70:b3:9a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:30 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=22429504ad324abdea690a19d8eac6780ef3aac29db2f1d0714dba11d8fc5db7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:47:b2:e0:11:93:6a:1e:9c:bf:ee:87:75: e1:4c:b7:6b:41:0e:06:17:12:7f:6f:ca:ef:ca:24: 1e:aa:4a:ae:4f:bb:fa:80:de:d3:33:e6:6c:21:d9: e1:7b:a6:d7:2d:c3:43:a8:25:b1:0d:e7:7b:92:3f: 18:05:48:bd:ca:fe:cd:00:3b:e2:95:d5:14:9c:f4: 91:3e:bf:82:ed:a5:e2:3c:f6:37:18:4c:98:51:7c: 80:c5:48:25:9f:de:5f:d2:47:46:97:99:26:4e:d3: eb:8f:9f:66:51:78:2f:5b:5b:fb:c2:1e:4a:87:68: 9f:d6:5d:80:f5:ee:c0:ad:f1:7b:b4:21:3b:65:c8: 9d:29:91:95:6a:18:36:2e:1c:1f:b9:86:2b:8f:c7: b3:84:d9:12:df:24:aa:e7:a8:ee:4f:ea:6f:0f:8d: 0d:65:80:b0:6a:84:08:fd:34:16:23:5d:0a:27:ca: 45:da:d7:f5:89:aa:46:e7:7b:2a:16:09:12:90:87: 48:e4:a1:ca:31:83:b8:ef:ee:38:f8:91:b0:53:2f: 52:eb:49:8d:43:a1:e8:53:7f:ab:36:4a:7a:cc:ed: b7:f1:6d:38:3a:e0:ef:04:b8:1a:b6:16:e0:29:cb: 4d:dd:6f:38:51:9d:14:a6:fc:59:d7:a8:c7:dd:70: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:16:0C:45:8A:BD:2A:62:1B:B8:2B:85:54:58:0E:94:12:28:6B:95 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1db7d6f9-20a2-495c-9303-96004ae64814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 05:ba:e9:32:ff:10:3a:04:15:e1:5a:34:c5:5e:2d:35:44:c5: 77:ee:ac:a3:24:ca:e8:e2:0e:8b:7a:a5:37:93:d4:e1:24:b4: d4:7b:f0:d4:f8:c3:12:7b:05:98:ec:74:5f:e4:25:30:4d:4f: 52:fe:0f:b5:4d:42:75:60:83:f0:d7:0f:e6:1a:56:c0:ae:15: 9d:e3:03:9d:98:5e:4f:85:e2:76:fd:bd:bc:1c:62:be:28:43: 6b:72:d1:68:c8:aa:db:51:81:da:71:5d:9d:68:5f:55:d4:10: 0a:9d:a1:6f:77:23:f0:91:d4:6d:7a:70:b0:db:ac:28:50:2a: 0d:cd:33:0c:98:ac:bd:24:c6:cc:ce:74:e1:32:6e:97:15:a1: 16:9a:a3:35:4c:66:9b:10:66:64:b4:ac:77:4b:f7:69:83:25: 4f:cf:67:02:12:89:2a:2c:92:af:d8:32:7a:ef:76:09:d5:f8: 47:91:12:50:a4:e1:8d:9f:f1:01:fa:94:c6:9c:17:35:42:42: f6:1d:dc:2b:3e:ca:9d:79:eb:66:62:09:5b:54:6b:62:56:10: e8:38:40:72:c2:96:19:75:54:f3:27:5c:88:b6:59:7e:3a:26: 4a:87:c7:04:b1:39:fe:7e:0c:ba:bc:d6:1d:4e:6f:75:d9:f8: ee:8e:9b:65 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUfPeSOuMFj0SvJkP8j4qX/nCzmhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMzBaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDIyNDI5NTA0YWQzMjRhYmRlYTY5MGExOWQ4ZWFjNjc4MGVmM2FhYzI5ZGIy ZjFkMDcxNGRiYTExZDhmYzVkYjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/zR7LgEZNqHpy/7od14Uy3a0EOBhcSf2/K78okHqpKrk+7+oDe0zPmbCHZ 4Xum1y3DQ6glsQ3ne5I/GAVIvcr+zQA74pXVFJz0kT6/gu2l4jz2NxhMmFF8gMVI JZ/eX9JHRpeZJk7T64+fZlF4L1tb+8IeSodon9ZdgPXuwK3xe7QhO2XInSmRlWoY Ni4cH7mGK4/Hs4TZEt8kqueo7k/qbw+NDWWAsGqECP00FiNdCifKRdrX9YmqRud7 KhYJEpCHSOShyjGDuO/uOPiRsFMvUutJjUOh6FN/qzZKesztt/FtODrg7wS4GrYW 4CnLTd1vOFGdFKb8Wdeox91wHhcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQmFgxF ir0qYhu4K4VUWA6UEihrlTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWRiN2Q2ZjktMjBhMi00OTVjLTkzMDMtOTYwMDRhZTY0ODE0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G8I wDANBgkqhkiG9w0BAQsFAAOCAQEABbrpMv8QOgQV4Vo0xV4tNUTFd+6soyTK6OIO i3qlN5PU4SS01Hvw1PjDEnsFmOx0X+QlME1PUv4PtU1CdWCD8NcP5hpWwK4VneMD nZheT4Xidv29vBxivihDa3LRaMiq21GB2nFdnWhfVdQQCp2hb3cj8JHUbXpwsNus KFAqDc0zDJisvSTGzM504TJulxWhFpqjNUxmmxBmZLSsd0v3aYMlT89nAhKJKiyS r9gyeu92CdX4R5ESUKThjZ/xAfqUxpwXNUJC9h3cKz7KnXnrZmIJW1RrYlYQ6DhA csKWGXVU8ydciLZZfjomSofHBLE5/n4MurzWHU5vddn47o6bZQ== -----END CERTIFICATE-----Generated at Fri Jan 2 10:58:39 2026 by rpki-client