This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa File: 2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa (raw, json) Hash identifier: 4aakGvcarZ97/Pt8nJJjyyvdNYKW3jtfkVT8OD9T4WI= Subject key identifier: 76:DD:85:82:4D:80:34:FF:4E:AA:ED:92:22:A1:31:91:6E:B6:34:EB Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3B16813EA0EFE8EFCDAF297CB6CC5598660F9DAB Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa Signing time: Wed 10 Dec 2025 06:00:03 +0000 ROA not before: Wed 10 Dec 2025 06:00:03 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:16:81:3e:a0:ef:e8:ef:cd:af:29:7c:b6:cc:55:98:66:0f:9d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:00:03 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=db4320ffc378ef50a358419954b7def7cea43f8bebd4b472b6828460327e6657, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:24:80:70:81:fd:14:58:f3:65:03:63:01: 44:92:43:59:14:59:cc:3e:18:7c:06:fc:e7:00:d5: 11:e0:50:4d:e5:c4:5f:f8:09:cc:98:d5:8d:53:e1: 64:5c:5d:e0:88:ab:52:d4:3b:0e:23:25:e8:43:fb: 02:e7:92:5a:53:e9:9f:e8:ff:98:d5:cc:58:78:cd: 8f:12:06:c8:b8:61:49:71:04:e0:f2:3c:03:39:ab: b1:3d:cc:a7:49:77:55:3a:69:39:27:68:71:29:c8: 21:35:f1:cb:7e:e5:2c:a3:7a:51:ac:1f:27:a6:9e: c5:2d:21:6f:e0:83:ea:b2:bb:b0:ce:08:94:67:e8: 5c:6c:dd:b9:4c:72:c6:24:7d:50:db:be:89:bf:16: d2:31:03:f6:9a:57:73:5a:d7:a8:e4:06:e1:65:ac: 99:69:df:b1:5f:5b:e1:86:96:10:13:98:86:f5:b7: 74:db:7f:9e:fb:c7:32:14:12:ce:73:d8:39:e1:8a: d3:f8:b8:e4:02:f8:12:70:dc:be:04:0e:86:43:ae: d7:a9:c8:95:57:7d:5d:81:4a:76:bc:aa:40:b0:c9: 02:81:5a:fc:65:dd:71:79:c4:6b:54:db:e4:48:d8: f1:31:7b:3a:78:15:b6:ea:7e:62:c4:18:5e:b1:b6: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:85:82:4D:80:34:FF:4E:AA:ED:92:22:A1:31:91:6E:B6:34:EB X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:1080::/48 Signature Algorithm: sha256WithRSAEncryption 91:9f:de:68:5f:35:5f:f8:1c:4a:89:96:ed:4f:e6:17:f5:81: b5:a6:f9:90:ae:3c:10:1a:31:d2:9d:ad:c6:a8:2e:48:bf:d8: b0:a3:22:e5:82:9a:3e:47:0b:5d:47:ce:c3:a0:9e:21:cc:23: 14:56:d5:c7:1a:c9:e5:89:52:d3:4b:e9:fb:a4:84:c7:cc:a8: b4:6c:25:c4:ec:ae:c6:48:a0:f6:4e:bd:26:39:84:8a:65:2d: 3b:76:da:ec:23:4c:31:52:0c:1c:40:2c:13:cf:79:c3:1b:0d: 4a:b7:35:cd:0d:16:07:b9:c2:29:23:33:8d:7c:51:65:43:66: 24:c6:97:0c:fa:4e:98:4e:a8:3e:c8:4b:dc:b1:5b:b0:ed:c0: d6:de:e2:f9:04:40:47:11:3e:96:78:d5:3e:36:dd:dd:ba:3b: 84:a2:03:52:94:ac:77:d8:07:18:ae:23:4d:57:00:25:67:4f: e6:49:b5:1e:e9:f1:47:95:39:9c:0a:67:5c:3e:0a:7e:51:72: 39:ed:98:3e:16:e8:7f:6f:b6:34:81:36:2e:5b:4c:1f:97:6b: cd:cc:1b:06:76:d2:dd:3e:bd:ce:4f:14:6d:e3:10:7f:4e:5b: 3b:35:e7:c1:4f:57:43:02:0c:52:38:d2:2d:e7:8d:de:6d:41: d0:48:b6:9e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUOxaBPqDv6O/Nryl8tsxVmGYPnaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAwMDNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGRiNDMyMGZmYzM3OGVmNTBhMzU4NDE5OTU0YjdkZWY3Y2VhNDNmOGJlYmQ0 YjQ3MmI2ODI4NDYwMzI3ZTY2NTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJn0JIBwgf0UWPNlA2MBRJJDWRRZzD4YfAb85wDVEeBQTeXEX/gJzJjVjVPh ZFxd4IirUtQ7DiMl6EP7AueSWlPpn+j/mNXMWHjNjxIGyLhhSXEE4PI8AzmrsT3M p0l3VTppOSdocSnIITXxy37lLKN6UawfJ6aexS0hb+CD6rK7sM4IlGfoXGzduUxy xiR9UNu+ib8W0jED9ppXc1rXqOQG4WWsmWnfsV9b4YaWEBOYhvW3dNt/nvvHMhQS znPYOeGK0/i45AL4EnDcvgQOhkOu16nIlVd9XYFKdryqQLDJAoFa/GXdcXnEa1Tb 5EjY8TF7OngVtup+YsQYXrG2FIMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR23YWC TYA0/06q7ZIioTGRbrY06zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmE5M2JkYzItODIzYy00MTZhLWFjNDAtNmY2YzgyM2JjZWY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEQ gDANBgkqhkiG9w0BAQsFAAOCAQEAkZ/eaF81X/gcSomW7U/mF/WBtab5kK48EBox 0p2txqguSL/YsKMi5YKaPkcLXUfOw6CeIcwjFFbVxxrJ5YlS00vp+6SEx8yotGwl xOyuxkig9k69JjmEimUtO3ba7CNMMVIMHEAsE895wxsNSrc1zQ0WB7nCKSMzjXxR ZUNmJMaXDPpOmE6oPshL3LFbsO3A1t7i+QRARxE+lnjVPjbd3bo7hKIDUpSsd9gH GK4jTVcAJWdP5km1HunxR5U5nApnXD4KflFyOe2YPhbof2+2NIE2LltMH5drzcwb BnbS3T69zk8UbeMQf05bOzXnwU9XQwIMUjjSLeeN3m1B0Ei2ng== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:55 2026 by rpki-client