This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa File: 57b964c4-07ca-4501-bd01-5cb8936846cc.roa (raw, json) Hash identifier: zDVlOM10TBclzd3V9CcqxwBMVSGCq64c8cbn9PyBRgA= Subject key identifier: 78:96:FA:43:A9:AF:F6:E0:57:01:02:18:A2:CC:C1:EE:DD:EF:33:8C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 37333A790B943DA2F0EA2B4EE978FC43A8EAEA61 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa Signing time: Wed 10 Dec 2025 06:11:27 +0000 ROA not before: Wed 10 Dec 2025 06:11:27 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d06f:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:33:3a:79:0b:94:3d:a2:f0:ea:2b:4e:e9:78:fc:43:a8:ea:ea:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:11:27 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=37ef2d72e08297e9718825ebdabad0d4a7e86d043a7a9d2e949645ba051a9233, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:ec:ff:09:48:6b:72:ef:c9:c7:ea:8e:c7: a7:c2:cf:2b:f5:6b:65:5f:7a:91:e5:01:bf:0f:59: 1c:95:b8:d9:67:38:09:73:56:39:5d:e1:1a:f7:97: e5:18:8a:90:66:c5:a1:17:3b:b6:b6:5e:26:cb:b7: a0:2f:33:91:90:73:92:b3:dd:8c:53:f1:98:81:3c: 1d:e7:d2:40:70:25:78:45:a2:af:4d:aa:51:b8:ea: 28:60:e2:d6:bc:e4:05:3e:12:d4:41:ae:da:8d:ca: 83:1c:41:d6:81:7e:27:b0:0a:66:1d:4c:87:12:18: 87:79:95:35:f5:a0:20:a7:14:c5:e0:99:7d:39:53: 86:87:cb:b2:fb:42:d9:ab:7c:c4:63:2c:0e:a3:d8: e2:b2:6f:30:6d:c5:19:bc:c8:f0:20:29:0b:81:5c: bd:ea:92:0b:75:b9:28:91:e4:58:1c:54:48:39:ae: 97:d7:c7:77:2f:66:26:20:74:73:45:2c:7b:e3:6f: 80:32:2b:4c:8b:b2:4f:16:c0:3d:83:52:8c:1b:9b: c4:bb:71:b4:92:b2:f3:7b:f3:a7:e2:27:67:c7:35: 8c:ad:db:26:4b:8b:92:ef:d2:25:d4:dc:f4:c9:49: a7:f7:57:36:26:1e:a2:e4:04:56:a8:a1:25:95:a3: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:96:FA:43:A9:AF:F6:E0:57:01:02:18:A2:CC:C1:EE:DD:EF:33:8C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:b000::/40 Signature Algorithm: sha256WithRSAEncryption 5a:e1:61:5d:e2:fe:90:4a:31:b7:4b:a9:e8:a3:b0:f5:e8:64: ee:1f:8b:02:a0:05:76:f8:74:f8:6c:fe:06:09:fd:ac:2d:65: b6:8b:07:0a:ae:59:80:b5:e1:9d:6e:a5:9a:6b:b9:27:63:c5: 4b:d5:fb:c2:8c:e4:f9:a4:27:3f:f1:b9:d8:5d:42:e5:99:86: 2b:64:1d:75:53:c3:8c:bc:5f:ea:fd:17:d7:ce:a8:e4:c3:bd: 30:dd:9c:8a:d8:d7:5b:7f:8e:18:73:c1:e5:32:5a:2f:bb:17: e1:f7:35:9d:64:f6:d4:ac:18:b4:56:45:1f:b7:dc:27:d6:62: bc:8d:b5:83:b9:1c:85:76:d5:d5:ea:78:00:50:a7:60:ce:f1: 94:b4:15:27:91:fa:23:a9:76:90:10:73:22:65:89:fb:68:c3: 4b:4a:4d:6d:42:86:f7:f8:82:3e:df:0a:f5:58:38:7c:b2:e6: 99:9b:64:91:23:51:eb:a9:74:dd:29:71:5f:a1:3f:ea:ad:01: be:a9:c8:c7:af:5b:a3:e1:d6:4e:99:31:b8:73:13:2d:b1:0f: 68:d9:94:47:13:b1:7f:98:c2:d3:c8:27:87:cf:87:60:ab:c9: 18:60:b1:9a:f3:0d:0f:24:2c:2f:b4:ad:86:0a:5a:95:ba:48: 05:da:ec:73 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUNzM6eQuUPaLw6itO6Xj8Q6jq6mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjExMjdaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDM3ZWYyZDcyZTA4Mjk3ZTk3MTg4MjVlYmRhYmFkMGQ0YTdlODZkMDQzYTdh OWQyZTk0OTY0NWJhMDUxYTkyMzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0s7P8JSGty78nH6o7Hp8LPK/VrZV96keUBvw9ZHJW42Wc4CXNWOV3hGveX 5RiKkGbFoRc7trZeJsu3oC8zkZBzkrPdjFPxmIE8HefSQHAleEWir02qUbjqKGDi 1rzkBT4S1EGu2o3KgxxB1oF+J7AKZh1MhxIYh3mVNfWgIKcUxeCZfTlThofLsvtC 2at8xGMsDqPY4rJvMG3FGbzI8CApC4FcveqSC3W5KJHkWBxUSDmul9fHdy9mJiB0 c0Use+NvgDIrTIuyTxbAPYNSjBubxLtxtJKy83vzp+InZ8c1jK3bJkuLku/SJdTc 9MlJp/dXNiYeouQEVqihJZWjDn0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR4lvpD qa/24FcBAhiizMHu3e8zjDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTdiOTY0YzQtMDdjYS00NTAxLWJkMDEtNWNiODkzNjg0NmNjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+w MA0GCSqGSIb3DQEBCwUAA4IBAQBa4WFd4v6QSjG3S6noo7D16GTuH4sCoAV2+HT4 bP4GCf2sLWW2iwcKrlmAteGdbqWaa7knY8VL1fvCjOT5pCc/8bnYXULlmYYrZB11 U8OMvF/q/RfXzqjkw70w3ZyK2Ndbf44Yc8HlMlovuxfh9zWdZPbUrBi0VkUft9wn 1mK8jbWDuRyFdtXV6ngAUKdgzvGUtBUnkfojqXaQEHMiZYn7aMNLSk1tQob3+II+ 3wr1WDh8suaZm2SRI1HrqXTdKXFfoT/qrQG+qcjHr1uj4dZOmTG4cxMtsQ9o2ZRH E7F/mMLTyCeHz4dgq8kYYLGa8w0PJCwvtK2GClqVukgF2uxz -----END CERTIFICATE-----Generated at Fri Jan 9 00:51:51 2026 by rpki-client