This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa File: 470f3c02-20c3-480f-a788-60d7378cea9b.roa (raw, json) Hash identifier: eWcAuntMGKGwEAMbcQr3HQvGBRiKEYAszgtAnQJn9+k= Subject key identifier: E9:5E:A0:F1:24:E3:D1:32:95:20:8C:EE:49:76:81:2C:E0:4F:16:4B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 52044D5A332F2A44B2FC1D6B3CFFF8F7D7AB7178 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa Signing time: Mon 08 Dec 2025 02:10:26 +0000 ROA not before: Mon 08 Dec 2025 02:10:26 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:04:4d:5a:33:2f:2a:44:b2:fc:1d:6b:3c:ff:f8:f7:d7:ab:71:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 8 02:10:26 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=3b353f259778ec83d8b42ea8079530fd6805a4ea539bcd2efd2c9b819b2c5177, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:a5:7d:6f:a4:ff:c5:a0:c2:fb:5c:0f:39: f7:d7:a9:e1:11:a0:ff:41:15:e0:57:3e:66:26:50: 4c:41:a7:a4:9f:30:d2:1c:21:f7:be:80:c7:31:60: db:f5:e1:d7:ec:05:03:37:ab:ae:9b:8b:45:4f:87: 83:7f:23:c5:a1:7e:96:01:3e:ad:8f:5a:27:b5:c7: a5:75:f7:f4:c7:7c:53:7d:dc:27:64:dd:8b:e5:d4: b4:5f:76:79:f3:60:5d:1c:f5:38:02:6d:4f:06:63: 72:87:8f:78:06:6a:69:47:96:2e:7d:2c:cf:50:9d: 86:9d:bc:5f:1d:19:54:82:29:d8:82:0b:a5:e4:c7: d8:13:04:e4:f2:a4:b4:e6:e1:93:8b:fc:a1:6f:15: 4e:28:cc:51:20:41:c8:0d:c9:de:f2:1d:a1:b9:57: ae:8c:57:6d:eb:71:72:6f:ed:75:0d:68:1f:3e:76: cd:23:32:59:98:31:3c:4c:bc:c1:19:a2:52:cd:01: 0c:14:a9:fa:f9:6c:01:d6:8d:41:84:d5:21:e4:d2: 5e:22:27:20:a9:66:ac:7e:48:26:70:3f:42:b3:75: e6:ba:01:c5:78:46:a0:f8:1e:2a:3e:98:14:3d:c5: 2e:98:13:9c:ea:17:54:c5:c3:61:af:23:89:94:fc: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5E:A0:F1:24:E3:D1:32:95:20:8C:EE:49:76:81:2C:E0:4F:16:4B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:880::/48 Signature Algorithm: sha256WithRSAEncryption 9b:1f:5a:4a:1c:84:7f:9e:ca:97:f5:ca:8f:8c:f8:2d:80:ee: 7c:09:fc:7c:7b:65:5e:55:ec:52:93:0c:c1:62:68:8d:ce:6f: c3:f4:e7:55:9e:01:a6:33:b6:6e:2c:3d:77:bc:e8:86:82:af: e3:97:46:75:95:5a:f1:35:5e:51:31:01:d7:e5:5a:a5:72:0e: 79:68:be:09:11:61:9a:37:11:69:3c:51:1f:48:5c:ea:00:df: 06:1e:70:9f:49:2f:61:f2:0a:13:ae:79:84:29:b4:1e:94:dc: 8b:57:91:66:c0:6e:b9:88:a8:e2:c2:60:73:7f:05:a8:65:2f: 3f:37:f3:ce:00:1e:94:34:3f:fa:74:a8:dd:e3:c8:3a:d8:2b: ac:09:93:9c:7b:79:05:45:be:22:3c:de:3e:37:da:83:37:66: 17:c4:7f:75:14:9e:f6:29:bb:93:ef:09:b0:09:8e:f0:1e:2a: a5:2a:28:d0:66:92:3e:62:b6:81:9a:a7:59:ac:d3:23:8c:12: b5:71:a2:b2:77:26:43:e0:2a:59:70:bb:9d:67:dd:5f:0f:4c: 0c:cc:ca:c5:b8:c4:21:ae:02:94:e6:fe:21:25:4d:81:d4:ca: ab:2f:a0:16:d6:2f:7b:d2:09:06:12:a6:1a:f5:21:90:72:dc: a9:75:87:23 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUUgRNWjMvKkSy/B1rPP/499ercXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDgwMjEwMjZaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDNiMzUzZjI1OTc3OGVjODNkOGI0MmVhODA3OTUzMGZkNjgwNWE0ZWE1Mzli Y2QyZWZkMmM5YjgxOWIyYzUxNzcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqfpX1vpP/FoML7XA8599ep4RGg/0EV4Fc+ZiZQTEGnpJ8w0hwh976AxzFg 2/Xh1+wFAzerrpuLRU+Hg38jxaF+lgE+rY9aJ7XHpXX39Md8U33cJ2Tdi+XUtF92 efNgXRz1OAJtTwZjcoePeAZqaUeWLn0sz1Cdhp28Xx0ZVIIp2IILpeTH2BME5PKk tObhk4v8oW8VTijMUSBByA3J3vIdoblXroxXbetxcm/tdQ1oHz52zSMyWZgxPEy8 wRmiUs0BDBSp+vlsAdaNQYTVIeTSXiInIKlmrH5IJnA/QrN15roBxXhGoPgeKj6Y FD3FLpgTnOoXVMXDYa8jiZT8xQsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTpXqDx JOPRMpUgjO5JdoEs4E8WSzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDcwZjNjMDItMjBjMy00ODBmLWE3ODgtNjBkNzM3OGNlYTliLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H8I gDANBgkqhkiG9w0BAQsFAAOCAQEAmx9aShyEf57Kl/XKj4z4LYDufAn8fHtlXlXs UpMMwWJojc5vw/TnVZ4BpjO2biw9d7zohoKv45dGdZVa8TVeUTEB1+VapXIOeWi+ CRFhmjcRaTxRH0hc6gDfBh5wn0kvYfIKE655hCm0HpTci1eRZsBuuYio4sJgc38F qGUvPzfzzgAelDQ/+nSo3ePIOtgrrAmTnHt5BUW+IjzePjfagzdmF8R/dRSe9im7 k+8JsAmO8B4qpSoo0GaSPmK2gZqnWazTI4wStXGisncmQ+AqWXC7nWfdXw9MDMzK xbjEIa4ClOb+ISVNgdTKqy+gFtYve9IJBhKmGvUhkHLcqXWHIw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:36 2026 by rpki-client