This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa File: 9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa (raw, json) Hash identifier: lgSdtOXWbqksZJXuantbCMJpKaNwerfBijDow4mlKj4= Subject key identifier: EC:B4:1F:04:22:1C:EC:24:A8:B6:72:A4:37:4C:19:49:A6:25:21:14 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0CECB611C5BC2EE4488D8D6307399BBBF91B6FFF Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa Signing time: Sun 07 Dec 2025 03:00:09 +0000 ROA not before: Sun 07 Dec 2025 03:00:09 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06c:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ec:b6:11:c5:bc:2e:e4:48:8d:8d:63:07:39:9b:bb:f9:1b:6f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 7 03:00:09 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=0817daf4accab141bde50eaa950e45b45dcf0d455cbd3e572c5b824cea944ebe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:99:18:29:ba:41:bc:d5:bd:b4:ee:97:20: f2:83:7c:c3:2d:c3:f9:7f:cd:b9:b8:e9:49:b4:d8: bb:ce:94:c4:6e:5f:67:c5:67:58:f8:ec:fd:1f:59: b8:3b:a5:f7:cd:80:18:50:70:2b:cd:4d:b7:c8:51: 34:89:6a:ac:ca:d2:af:4e:75:a7:1c:5c:cf:3c:04: 13:18:c3:9e:95:70:61:04:f9:07:d8:57:c3:7f:f4: 13:ff:e3:0d:13:70:c1:da:a5:51:6a:29:8a:bf:80: 0c:bb:19:5d:15:ec:20:62:3a:e2:42:0a:0e:27:47: b4:ee:ae:50:cb:9f:67:7c:f5:3b:24:3c:82:ce:72: 61:10:76:1a:43:a3:d4:a8:26:6c:01:15:1d:d6:b5: 3f:79:7e:fb:9b:da:52:39:6f:3c:f2:69:33:b5:55: 99:01:dd:33:43:f4:3d:ad:c0:71:5a:4a:5e:77:08: e8:90:a9:b5:30:52:0f:d4:d1:a3:af:b7:e7:d7:27: c5:86:b9:6b:f0:1c:ae:45:d3:49:96:0e:84:7c:b9: 67:c4:48:aa:93:9a:73:c3:9f:f4:bf:01:4a:44:0b: 32:08:ac:b6:b7:ee:02:16:d0:55:5f:74:f1:50:a2: 0f:c7:eb:00:58:0c:06:df:b3:a6:cd:2e:e3:a1:e6: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B4:1F:04:22:1C:EC:24:A8:B6:72:A4:37:4C:19:49:A6:25:21:14 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06c:c000::/48 Signature Algorithm: sha256WithRSAEncryption 7a:ee:12:30:b0:b0:bd:1c:bd:7c:5c:0d:82:2d:6c:77:a8:4d: 4a:86:58:a7:bd:78:2f:e6:b7:92:2a:ac:5a:d6:c9:3f:de:07: 11:da:3b:cf:28:c2:e5:af:41:d8:35:64:33:36:f2:f1:83:7b: 12:d1:84:ad:9d:9f:22:a6:48:0a:bd:c7:22:21:8c:56:f2:be: 0d:f5:28:2d:f7:30:3d:76:b5:fe:84:a4:92:78:97:11:c4:ae: 9a:d4:41:ac:e1:4b:45:0c:93:c8:25:ab:44:63:1c:39:3c:57: d3:b7:c2:86:45:a2:29:7b:47:82:fe:81:9a:99:c6:26:f5:59: 55:42:b1:12:bf:2a:8d:aa:b3:04:7d:eb:d4:4b:ff:bd:6b:b2: 46:8c:1e:f4:93:92:b9:89:8b:43:20:f2:f1:90:a7:84:ac:35: 74:2a:c9:aa:78:44:66:e4:7c:34:d4:c9:79:24:f1:ab:9c:47: 0e:0a:db:18:33:28:ee:ef:09:8f:af:b2:1c:07:33:c9:74:4c: 11:e4:55:85:64:c3:c4:65:ba:3b:4c:90:de:30:ed:78:a4:39: b7:e1:41:ac:dc:20:75:31:7e:99:8e:50:bd:04:62:bc:91:f4: 79:72:4c:67:83:90:79:1d:2f:47:2c:8f:52:77:9a:7e:eb:bd: a4:e5:10:cc -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUDOy2EcW8LuRIjY1jBzmbu/kbb/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDcwMzAwMDlaFw0yNjAzMDcyMzU5NTlaMHoxSTBHBgNV BAUTQDA4MTdkYWY0YWNjYWIxNDFiZGU1MGVhYTk1MGU0NWI0NWRjZjBkNDU1Y2Jk M2U1NzJjNWI4MjRjZWE5NDRlYmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL65mRgpukG81b207pcg8oN8wy3D+X/NubjpSbTYu86UxG5fZ8VnWPjs/R9Z uDul982AGFBwK81Nt8hRNIlqrMrSr051pxxczzwEExjDnpVwYQT5B9hXw3/0E//j DRNwwdqlUWopir+ADLsZXRXsIGI64kIKDidHtO6uUMufZ3z1OyQ8gs5yYRB2GkOj 1KgmbAEVHda1P3l++5vaUjlvPPJpM7VVmQHdM0P0Pa3AcVpKXncI6JCptTBSD9TR o6+359cnxYa5a/AcrkXTSZYOhHy5Z8RIqpOac8Of9L8BSkQLMgistrfuAhbQVV90 8VCiD8frAFgMBt+zps0u46HmAvcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTstB8E IhzsJKi2cqQ3TBlJpiUhFDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWRmZThjNjUtZmQ1Yi00NTk3LWJlNGEtMGUwOTRjNTljNDBkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GzA ADANBgkqhkiG9w0BAQsFAAOCAQEAeu4SMLCwvRy9fFwNgi1sd6hNSoZYp714L+a3 kiqsWtbJP94HEdo7zyjC5a9B2DVkMzby8YN7EtGErZ2fIqZICr3HIiGMVvK+DfUo LfcwPXa1/oSkkniXEcSumtRBrOFLRQyTyCWrRGMcOTxX07fChkWiKXtHgv6BmpnG JvVZVUKxEr8qjaqzBH3r1Ev/vWuyRowe9JOSuYmLQyDy8ZCnhKw1dCrJqnhEZuR8 NNTJeSTxq5xHDgrbGDMo7u8Jj6+yHAczyXRMEeRVhWTDxGW6O0yQ3jDteKQ5t+FB rNwgdTF+mY5QvQRivJH0eXJMZ4OQeR0vRyyPUneafuu9pOUQzA== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:21 2026 by rpki-client