This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa File: 9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa (raw, json) Hash identifier: +S88TeWTQj2XSQQ2SevpUhA//sLmB6c6E/ZX8697lzM= Subject key identifier: 82:CF:7A:0E:C2:79:74:33:14:52:E2:D5:55:B9:5B:F4:06:0F:DB:B9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 231919BD1A6FCDD2F3F1DCAD849E6E8F5D71ABBE Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa Signing time: Wed 10 Dec 2025 05:10:08 +0000 ROA not before: Wed 10 Dec 2025 05:10:08 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:19:19:bd:1a:6f:cd:d2:f3:f1:dc:ad:84:9e:6e:8f:5d:71:ab:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:10:08 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=d5e379aafea28121660f6ecf53b4fe323ab4077e6d54a699ef5a245fb16bdb44, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:e2:b0:bf:50:5a:22:7a:74:dc:0c:fa:02: 36:bd:ea:39:68:13:d5:a9:8a:8d:c3:18:67:d2:cc: 0f:5a:53:af:7f:c9:3a:04:90:0e:bb:e6:4a:48:5d: 16:71:15:05:0d:65:0e:13:63:d8:af:ce:b2:02:06: f9:84:c8:7c:13:a3:6f:cf:68:59:5b:35:d2:46:fd: 50:6a:72:ed:22:06:84:39:90:13:2e:6f:ab:7a:2b: 9c:fd:4e:74:80:64:66:28:a4:2b:94:52:fd:df:d4: 76:b5:aa:ed:4f:51:61:d5:ff:79:c4:a6:e5:50:cc: ca:e1:d2:4d:ce:b2:5b:aa:3f:6c:94:05:88:b0:21: f0:19:56:40:3f:1b:a4:ab:0c:a6:a4:62:5c:b8:6d: 5c:81:29:18:57:44:68:27:49:34:54:9c:e8:d0:6d: 05:16:db:f5:6b:1c:30:e9:a6:a4:9d:f2:36:e1:6d: ae:96:ec:b9:42:d3:7c:fe:6a:0e:00:4c:ff:ea:35: 80:f5:3b:db:c7:a0:8e:f3:45:a3:89:b9:a5:fe:e7: ee:ec:6e:6d:54:b4:d6:19:c8:5a:51:65:26:e2:a4: 9e:ed:98:34:a0:ca:f3:ac:db:29:63:c7:3b:19:e6: e6:ff:ee:1b:5b:c8:0b:a8:f9:e2:f0:0d:df:c9:0c: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CF:7A:0E:C2:79:74:33:14:52:E2:D5:55:B9:5B:F4:06:0F:DB:B9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:9080::/48 Signature Algorithm: sha256WithRSAEncryption 46:dc:50:fd:bb:ce:ef:f0:f3:95:00:94:2b:10:5c:69:3e:63: b8:ee:15:f2:20:02:64:24:af:d2:3c:d0:75:c2:17:7e:54:1e: f4:52:10:c7:7f:36:b9:b4:98:83:36:ba:68:30:cf:57:e3:66: 7a:50:db:bf:d4:6a:93:b3:b7:aa:1b:00:e0:0c:86:27:df:6f: 8f:b2:76:05:62:d1:2f:3f:4d:e3:6e:b1:3c:22:1c:55:bd:8a: 2b:41:11:a2:bb:d4:2b:bc:40:31:72:52:73:76:a8:f2:9d:40: bf:bc:7b:17:d8:6b:10:fe:46:e5:83:00:3f:7c:14:a5:7c:cc: e7:83:f6:17:6d:97:8a:76:9b:32:5d:a6:3b:e5:4e:f7:70:90: 77:eb:5e:34:bd:e8:76:24:ac:77:d8:bb:d7:2b:ba:b7:8d:82: 29:a7:12:80:e4:8f:8e:5f:3e:97:c8:c6:cb:aa:ef:6d:cc:33: 58:8a:04:63:56:c0:08:6d:c7:7b:94:16:cf:cf:5c:38:3b:39: 15:2f:0c:3b:45:ed:5c:12:18:ae:91:21:85:35:93:6c:e9:2e: af:1a:3b:ef:96:82:a9:16:26:5b:f8:cb:b4:b6:36:8e:8d:38: dc:ba:11:cd:06:8e:cc:6f:eb:6e:58:2f:16:f3:d9:ee:95:17: f2:50:df:e1 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUIxkZvRpvzdLz8dythJ5uj11xq74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTEwMDhaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGQ1ZTM3OWFhZmVhMjgxMjE2NjBmNmVjZjUzYjRmZTMyM2FiNDA3N2U2ZDU0 YTY5OWVmNWEyNDVmYjE2YmRiNDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeA4rC/UFoienTcDPoCNr3qOWgT1amKjcMYZ9LMD1pTr3/JOgSQDrvmSkhd FnEVBQ1lDhNj2K/OsgIG+YTIfBOjb89oWVs10kb9UGpy7SIGhDmQEy5vq3ornP1O dIBkZiikK5RS/d/UdrWq7U9RYdX/ecSm5VDMyuHSTc6yW6o/bJQFiLAh8BlWQD8b pKsMpqRiXLhtXIEpGFdEaCdJNFSc6NBtBRbb9WscMOmmpJ3yNuFtrpbsuULTfP5q DgBM/+o1gPU728egjvNFo4m5pf7n7uxubVS01hnIWlFlJuKknu2YNKDK86zbKWPH Oxnm5v/uG1vIC6j54vAN38kM4lsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSCz3oO wnl0MxRS4tVVuVv0Bg/buTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTkyNmExNWUtZDdmZC00ZDdiLWFkMWUtZDBkZjk4ZjU0NmNiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+Q gDANBgkqhkiG9w0BAQsFAAOCAQEARtxQ/bvO7/DzlQCUKxBcaT5juO4V8iACZCSv 0jzQdcIXflQe9FIQx382ubSYgza6aDDPV+NmelDbv9Rqk7O3qhsA4AyGJ99vj7J2 BWLRLz9N426xPCIcVb2KK0ERorvUK7xAMXJSc3ao8p1Av7x7F9hrEP5G5YMAP3wU pXzM54P2F22XinabMl2mO+VO93CQd+teNL3odiSsd9i71yu6t42CKacSgOSPjl8+ l8jGy6rvbcwzWIoEY1bACG3He5QWz89cODs5FS8MO0XtXBIYrpEhhTWTbOkurxo7 75aCqRYmW/jLtLY2jo043LoRzQaOzG/rblgvFvPZ7pUX8lDf4Q== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:23 2026 by rpki-client