This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa File: 7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa (raw, json) Hash identifier: Ta0kQh63KwrpdP7uny2gLAtF6b0S/SeTu7KeHa3/Glk= Subject key identifier: F1:0D:8F:4D:09:E5:17:3D:84:0D:80:F7:7D:89:35:39:51:C9:B9:F9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 674D034CF31889B8FC64DFC43F6E56E1A470387A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa Signing time: Sun 07 Dec 2025 03:00:11 +0000 ROA not before: Sun 07 Dec 2025 03:00:11 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06c:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4d:03:4c:f3:18:89:b8:fc:64:df:c4:3f:6e:56:e1:a4:70:38:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 7 03:00:11 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=090443381b5eea45cf4c1c126ef8cfe262a2df578db2c3d377258a77855a6775, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:79:86:63:35:5b:64:10:58:33:e8:80:e9: a9:e3:0b:45:77:9b:d8:34:38:d9:bf:94:da:e6:db: 7e:4d:49:5e:33:45:c6:96:12:5a:71:c5:17:a0:41: 5d:e1:10:c9:24:11:4a:8d:82:05:32:b5:c2:f2:7e: 45:0b:4a:4d:a6:94:b4:1e:92:6f:48:aa:9a:65:61: cb:3f:c7:11:9f:55:4c:02:ab:df:87:1b:53:f3:18: 75:f2:01:71:fc:a8:88:9c:d0:f9:35:13:af:62:bb: 6f:26:d1:f9:11:a5:38:26:45:7d:fd:91:48:97:e5: e5:21:78:4d:6b:dc:11:ae:e9:a7:f9:5c:df:dc:3b: 35:4f:20:dc:49:8e:41:b7:c2:08:c9:92:2d:aa:0d: fc:98:2f:0d:f9:21:9c:3e:cc:a8:4a:ea:b1:87:3a: 05:ea:58:c4:31:2b:72:89:e5:f4:49:0d:8c:bd:ef: a8:16:33:f9:e5:7b:e6:d9:9a:aa:76:a0:11:db:e9: 12:28:b8:fa:68:fb:12:0a:99:cf:86:89:34:c7:27: f5:fe:98:4d:3e:ee:bd:b7:62:79:de:db:38:28:92: 78:80:21:46:51:e7:cd:cc:3b:23:d2:6f:27:f4:4f: b8:85:6e:24:51:96:60:c9:d9:0d:b2:bf:b3:e2:df: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0D:8F:4D:09:E5:17:3D:84:0D:80:F7:7D:89:35:39:51:C9:B9:F9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fd7a5ed-37e9-48af-965f-a4b6d6af2b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06c:6000::/48 Signature Algorithm: sha256WithRSAEncryption 86:ac:6e:89:42:e6:c2:f6:9e:fb:99:bf:08:4e:3d:3d:e2:65: e7:6e:40:28:0c:c6:57:a7:72:ff:d5:0f:52:20:c4:fe:02:2a: 0e:33:2b:75:6a:99:31:1d:9b:52:a9:d0:68:0a:c5:ee:56:2c: 57:c9:c9:23:ae:04:9d:3b:79:6b:fd:8a:b5:74:b2:54:2a:2b: 9e:ae:f6:c0:51:8f:4f:14:3e:15:be:c2:fb:45:f8:6a:97:5a: e1:df:0b:a9:0c:c8:cc:ab:29:e3:2d:61:50:ca:71:65:58:51: cd:cf:14:4f:ce:a7:10:13:a5:50:e5:f3:2a:b1:b4:f4:81:51: bd:2a:11:42:af:01:0f:35:4d:3d:9a:5e:1a:e2:e1:72:71:43: 4d:ae:d3:14:1c:7c:54:cf:f4:c3:9e:0c:1b:a5:03:86:9f:c4: 0b:5e:a0:bd:df:62:cd:54:b0:a5:8d:6f:85:67:62:df:a1:40: 7c:41:f2:a1:3e:19:28:07:71:cf:ef:58:20:38:a6:51:61:18: 01:98:07:a7:52:42:95:72:e7:ca:ba:09:64:d8:50:90:97:4f: f4:f1:6d:5d:09:07:50:6d:f0:05:23:e3:6a:ec:d9:32:d3:0a: 7d:d8:c7:72:9e:b7:be:47:7d:38:65:5a:a3:d2:62:47:43:cc: 9d:3d:9c:de -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUZ00DTPMYibj8ZN/EP25W4aRwOHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDcwMzAwMTFaFw0yNjAzMDcyMzU5NTlaMHoxSTBHBgNV BAUTQDA5MDQ0MzM4MWI1ZWVhNDVjZjRjMWMxMjZlZjhjZmUyNjJhMmRmNTc4ZGIy YzNkMzc3MjU4YTc3ODU1YTY3NzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5leYZjNVtkEFgz6IDpqeMLRXeb2DQ42b+U2ubbfk1JXjNFxpYSWnHFF6BB XeEQySQRSo2CBTK1wvJ+RQtKTaaUtB6Sb0iqmmVhyz/HEZ9VTAKr34cbU/MYdfIB cfyoiJzQ+TUTr2K7bybR+RGlOCZFff2RSJfl5SF4TWvcEa7pp/lc39w7NU8g3EmO QbfCCMmSLaoN/JgvDfkhnD7MqErqsYc6BepYxDErconl9EkNjL3vqBYz+eV75tma qnagEdvpEii4+mj7EgqZz4aJNMcn9f6YTT7uvbdied7bOCiSeIAhRlHnzcw7I9Jv J/RPuIVuJFGWYMnZDbK/s+LfhCUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTxDY9N CeUXPYQNgPd9iTU5Ucm5+TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2ZkN2E1ZWQtMzdlOS00OGFmLTk2NWYtYTRiNmQ2YWYyYjk4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gxg ADANBgkqhkiG9w0BAQsFAAOCAQEAhqxuiULmwvae+5m/CE49PeJl525AKAzGV6dy /9UPUiDE/gIqDjMrdWqZMR2bUqnQaArF7lYsV8nJI64EnTt5a/2KtXSyVCornq72 wFGPTxQ+Fb7C+0X4apda4d8LqQzIzKsp4y1hUMpxZVhRzc8UT86nEBOlUOXzKrG0 9IFRvSoRQq8BDzVNPZpeGuLhcnFDTa7TFBx8VM/0w54MG6UDhp/EC16gvd9izVSw pY1vhWdi36FAfEHyoT4ZKAdxz+9YIDimUWEYAZgHp1JClXLnyroJZNhQkJdP9PFt XQkHUG3wBSPjauzZMtMKfdjHcp63vkd9OGVao9JiR0PMnT2c3g== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:56 2026 by rpki-client