This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa File: 7665346b-5715-4d4a-9ee7-32affc669e92.roa (raw, json) Hash identifier: PM1EYinKhdRgaZySj7+kJY4PaZAaF61+GIabVKx2K9U= Subject key identifier: E1:D5:31:0B:C2:60:74:81:A4:B1:E7:E3:5F:79:B0:0B:E7:43:37:D3 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 71B0D1796EC116C64CBDCEBB9506532AA5B28DAF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa Signing time: Wed 10 Dec 2025 05:10:09 +0000 ROA not before: Wed 10 Dec 2025 05:10:09 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b0:d1:79:6e:c1:16:c6:4c:bd:ce:bb:95:06:53:2a:a5:b2:8d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:10:09 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=6df2fc0e36d6788bb0fb3c8089a6c893cbbb36ca6a00dbf3db26d28462531a0a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:4f:1b:fc:8e:9c:de:55:9e:76:dc:f0:01: 69:59:67:6a:87:b3:07:c5:8c:0a:e6:14:f5:49:65: 4a:a5:59:16:7d:63:f2:bd:d1:9f:64:66:0c:ca:9a: 66:a2:35:bc:f9:e5:76:4b:01:44:68:bd:9f:e4:71: 0a:e2:60:c7:f4:70:b0:9d:2e:cd:e0:31:cd:6b:f3: 3a:db:b3:0b:96:ad:aa:06:f6:74:33:bf:88:9a:8b: aa:83:89:9a:9b:9a:b8:fc:9a:25:5b:93:01:e2:41: 97:c9:69:da:12:5e:e8:e8:b4:1a:77:20:3f:b2:14: 16:f6:81:3d:4d:d6:1b:28:03:da:7e:ff:de:08:ad: b9:5a:2d:d6:c7:eb:18:94:54:0f:a7:40:78:03:10: c4:30:4c:04:8f:f4:04:25:02:a7:50:ac:ae:ec:54: d4:02:18:61:df:b7:6e:0b:d2:eb:0d:b0:d1:5c:d2: e2:84:56:1c:72:e8:a6:95:49:5d:fd:af:b6:7f:17: 99:f5:56:8f:fc:e5:dc:6a:95:f5:95:c2:9c:40:ab: d8:ec:cd:6e:11:d4:5d:52:b1:17:1b:ab:ee:06:de: 87:30:30:f6:f5:54:72:35:d2:39:2d:51:75:25:f6: 51:9a:c1:a0:76:30:19:f8:1e:8b:6c:8e:f7:3d:6d: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D5:31:0B:C2:60:74:81:A4:B1:E7:E3:5F:79:B0:0B:E7:43:37:D3 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:2040::/48 Signature Algorithm: sha256WithRSAEncryption 4a:08:02:c2:88:93:d5:2c:dd:7e:df:92:48:06:7a:f7:5f:1d: 6a:f1:e4:18:d5:1f:84:07:aa:6d:3f:03:b7:b7:13:47:c2:30: 20:55:d6:de:37:b9:46:ab:73:f4:15:2d:f2:ee:63:08:5b:fa: 0e:a1:fa:ca:7a:64:24:a4:3f:a4:55:5c:eb:3b:75:e2:c4:9a: 86:3b:35:05:ec:78:d4:80:1c:0e:12:be:4f:9b:9b:92:0e:3b: 74:49:6b:f7:74:7c:ed:13:01:1a:bd:e2:da:dc:f7:4a:d8:df: 17:4f:8a:50:fb:5d:5d:c3:b6:50:9e:87:58:6a:5f:fb:f0:d4: 15:c5:fb:be:ff:a3:09:0b:b0:17:0f:8b:0b:01:5c:10:2a:06: 94:ad:99:6b:75:fb:b5:74:32:08:51:7f:cf:12:f4:32:29:7c: 9f:84:04:87:9e:b9:8e:30:2c:ca:ed:a8:ff:80:52:03:9a:d5: b1:6f:6e:fe:c1:2a:e0:ac:b6:81:60:36:18:ab:39:3e:a4:20: 87:31:fc:dc:0f:ed:ea:e2:9e:d3:21:0c:ae:fb:49:47:95:96: 96:ee:63:96:a4:68:0b:0c:02:de:2c:4e:84:fb:6f:8a:86:ea: ae:2c:df:71:a4:16:dd:9c:87:ee:bc:cc:12:00:36:f8:4e:f3: 94:dc:d1:fa -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUcbDReW7BFsZMvc67lQZTKqWyja8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTEwMDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDZkZjJmYzBlMzZkNjc4OGJiMGZiM2M4MDg5YTZjODkzY2JiYjM2Y2E2YTAw ZGJmM2RiMjZkMjg0NjI1MzFhMGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3OTxv8jpzeVZ523PABaVlnaoezB8WMCuYU9UllSqVZFn1j8r3Rn2RmDMqa ZqI1vPnldksBRGi9n+RxCuJgx/RwsJ0uzeAxzWvzOtuzC5atqgb2dDO/iJqLqoOJ mpuauPyaJVuTAeJBl8lp2hJe6Oi0GncgP7IUFvaBPU3WGygD2n7/3gituVot1sfr GJRUD6dAeAMQxDBMBI/0BCUCp1CsruxU1AIYYd+3bgvS6w2w0VzS4oRWHHLoppVJ Xf2vtn8XmfVWj/zl3GqV9ZXCnECr2OzNbhHUXVKxFxur7gbehzAw9vVUcjXSOS1R dSX2UZrBoHYwGfgei2yO9z1tPvECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTh1TEL wmB0gaSx5+NfebAL50M30zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NzY2NTM0NmItNTcxNS00ZDRhLTllZTctMzJhZmZjNjY5ZTkyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAg QDANBgkqhkiG9w0BAQsFAAOCAQEASggCwoiT1Szdft+SSAZ6918davHkGNUfhAeq bT8Dt7cTR8IwIFXW3je5Rqtz9BUt8u5jCFv6DqH6ynpkJKQ/pFVc6zt14sSahjs1 Bex41IAcDhK+T5ubkg47dElr93R87RMBGr3i2tz3StjfF0+KUPtdXcO2UJ6HWGpf +/DUFcX7vv+jCQuwFw+LCwFcECoGlK2Za3X7tXQyCFF/zxL0Mil8n4QEh565jjAs yu2o/4BSA5rVsW9u/sEq4Ky2gWA2GKs5PqQghzH83A/t6uKe0yEMrvtJR5WWlu5j lqRoCwwC3ixOhPtviobqrizfcaQW3ZyH7rzMEgA2+E7zlNzR+g== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:25 2026 by rpki-client