This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa File: 834ff2b2-55b6-4011-9d9b-451a7311335d.roa (raw, json) Hash identifier: 9+e5vnNaoRYY4t/gJqIC79noKfjXhDlDod2V7xDXoi8= Subject key identifier: B1:DC:15:68:4D:D9:99:71:14:E7:61:B5:44:EA:45:5B:E5:05:1F:CD Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 707CDD6F335C25A6F25B314927FB49ED6A6C31C4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa Signing time: Wed 10 Dec 2025 05:31:20 +0000 ROA not before: Wed 10 Dec 2025 05:31:20 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7c:dd:6f:33:5c:25:a6:f2:5b:31:49:27:fb:49:ed:6a:6c:31:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:20 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=1fe8867bc9a6b847e3494706e6ceeb77969e8df2d228f6e010672d0884ee90b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:a6:be:6e:52:ca:37:80:0a:c9:c7:6b:43: 04:45:86:18:7e:38:30:87:5b:6d:bb:25:7d:2b:79: 63:46:13:2e:4b:33:71:a4:ef:db:48:59:94:4a:54: ac:fa:5b:d9:45:6c:1e:90:af:fe:92:27:5c:4f:a9: e4:ae:f5:8a:22:40:0b:46:7a:8b:98:74:42:31:81: 9c:6e:4e:93:8f:e6:1e:12:2a:60:0f:6c:ef:44:35: d6:8f:3b:61:6e:aa:d5:1c:58:06:81:0e:15:1d:40: 78:eb:3f:40:e7:30:c8:bc:b7:e5:a4:92:61:ad:eb: 7c:c6:41:00:dd:f2:f6:45:fe:64:22:65:72:4d:d2: 53:5a:6d:7b:6b:25:7a:ca:c3:66:8b:5f:76:3a:e1: 8a:63:c4:10:90:20:d9:e4:5f:e4:64:8f:2c:31:b2: 5f:8a:fe:54:60:3e:08:44:7c:dd:7a:c9:8d:9d:32: 5d:fe:fb:09:ff:90:b8:40:78:23:64:c6:4a:24:2e: 30:c9:e8:84:93:d5:a1:01:7f:48:aa:e9:2a:1c:33: d9:ab:54:00:d0:23:ee:64:6c:8f:16:b8:d1:2c:e3: 90:34:8c:66:0c:1d:d5:24:24:81:35:b7:d6:d2:0c: 9a:c9:83:50:0d:9e:ef:0b:43:69:83:27:2c:7b:69: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DC:15:68:4D:D9:99:71:14:E7:61:B5:44:EA:45:5B:E5:05:1F:CD X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036:b000::/40 Signature Algorithm: sha256WithRSAEncryption 4f:14:0d:42:e4:b2:a9:81:31:7f:ee:3c:4f:b6:30:5a:b1:a0: 00:64:c5:08:a5:87:c4:0c:dd:70:19:49:ca:28:8c:c1:37:b9: 18:ec:0e:3b:ad:cd:03:4d:18:1c:b1:25:fc:3b:59:ad:05:bb: d1:96:7e:51:85:38:28:b3:4a:51:f5:42:73:ea:34:c8:f9:fc: 78:fb:fd:8d:0c:57:2f:b5:be:e2:35:c7:ad:52:3c:6c:98:a0: a4:c0:4b:44:39:6c:22:87:3e:47:06:5b:f6:4d:16:e6:9c:b7: d2:49:9d:cc:d0:98:f6:53:75:89:c6:60:bf:ec:71:46:6a:38: 6c:c5:82:1e:de:41:12:e4:94:4a:f9:2a:43:48:ce:af:2f:83: 2c:c2:3d:00:14:da:73:0e:0c:8c:a9:19:44:38:b2:89:1c:1e: ef:0c:ef:2a:8b:c7:9c:64:8d:f3:58:89:3a:f1:33:74:3a:d2: 1b:87:b4:7a:b1:65:33:d2:06:b8:e3:2d:45:7e:de:28:73:68: 0c:49:1d:b9:63:48:3f:6b:8d:0c:35:df:a3:7d:5d:9d:b7:c2: a3:98:93:aa:96:03:19:41:f1:39:24:b5:cc:39:07:b0:b4:88: a9:c2:e3:2d:89:18:6f:50:14:5d:cb:e9:54:18:cf:39:7b:8b: ad:7d:7c:cb -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUcHzdbzNcJabyWzFJJ/tJ7WpsMcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMjBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDFmZTg4NjdiYzlhNmI4NDdlMzQ5NDcwNmU2Y2VlYjc3OTY5ZThkZjJkMjI4 ZjZlMDEwNjcyZDA4ODRlZTkwYjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvOpr5uUso3gArJx2tDBEWGGH44MIdbbbslfSt5Y0YTLkszcaTv20hZlEpU rPpb2UVsHpCv/pInXE+p5K71iiJAC0Z6i5h0QjGBnG5Ok4/mHhIqYA9s70Q11o87 YW6q1RxYBoEOFR1AeOs/QOcwyLy35aSSYa3rfMZBAN3y9kX+ZCJlck3SU1pte2sl esrDZotfdjrhimPEEJAg2eRf5GSPLDGyX4r+VGA+CER83XrJjZ0yXf77Cf+QuEB4 I2TGSiQuMMnohJPVoQF/SKrpKhwz2atUANAj7mRsjxa40SzjkDSMZgwd1SQkgTW3 1tIMmsmDUA2e7wtDaYMnLHtpWvECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSx3BVo TdmZcRTnYbVE6kVb5QUfzTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODM0ZmYyYjItNTViNi00MDExLTlkOWItNDUxYTczMTEzMzVkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Daw MA0GCSqGSIb3DQEBCwUAA4IBAQBPFA1C5LKpgTF/7jxPtjBasaAAZMUIpYfEDN1w GUnKKIzBN7kY7A47rc0DTRgcsSX8O1mtBbvRln5RhTgos0pR9UJz6jTI+fx4+/2N DFcvtb7iNcetUjxsmKCkwEtEOWwihz5HBlv2TRbmnLfSSZ3M0Jj2U3WJxmC/7HFG ajhsxYIe3kES5JRK+SpDSM6vL4Mswj0AFNpzDgyMqRlEOLKJHB7vDO8qi8ecZI3z WIk68TN0OtIbh7R6sWUz0ga44y1Fft4oc2gMSR25Y0g/a40MNd+jfV2dt8KjmJOq lgMZQfE5JLXMOQewtIipwuMtiRhvUBRdy+lUGM85e4utfXzL -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:40 2026 by rpki-client