This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa File: c056757c-bb27-4ef4-91ff-67b9307d3085.roa (raw, json) Hash identifier: WXrt3YqIJkSUFlhMyGEwMGW/j3u9jZ5u9ERs/7LiovU= Subject key identifier: 88:24:61:6C:FA:FE:02:8C:50:A5:73:B9:D9:C1:27:E0:F6:52:B7:CC Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 511B67FE9CA258433D135C5C18B1AA8AD64B6943 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa Signing time: Wed 10 Dec 2025 06:21:31 +0000 ROA not before: Wed 10 Dec 2025 06:21:31 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1b:67:fe:9c:a2:58:43:3d:13:5c:5c:18:b1:aa:8a:d6:4b:69:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:21:31 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=e570b572885a2aed57c6fa00c486440408bb716cf2a5ff4d25cee01f38e82c75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:fd:49:d2:83:57:c5:72:5e:38:77:90:1a: f1:76:3d:1a:2b:d0:39:f6:f0:92:53:33:00:eb:8d: 72:98:b6:bf:0e:2e:34:3f:f4:fc:fc:55:77:6a:c3: 3b:27:1d:65:48:b2:5d:66:e8:87:ed:9c:6c:8e:da: c5:dc:5e:e6:1c:e1:66:f2:b3:21:b3:9a:16:aa:cc: 94:34:92:fa:1d:d8:3f:d8:af:36:09:5c:c0:cb:e4: a4:1d:63:0d:12:24:bd:b5:c3:a2:26:f6:bb:6f:93: a5:3a:05:53:c2:e2:20:24:bb:cb:20:e9:a5:2e:21: b4:e9:71:dc:6a:d7:d5:a7:71:7a:39:69:4c:fb:35: 82:38:9c:8d:27:a6:09:15:d9:e2:6e:34:e4:ad:b0: 98:d5:06:f9:ca:93:32:64:c3:78:b5:d9:c4:8f:5b: 73:77:14:b0:3b:c2:3f:d1:25:a0:15:02:e7:54:3a: 1c:1d:83:ce:db:1d:bc:0f:2c:d6:da:70:3c:3b:42: c4:99:e8:ec:0c:c5:1d:70:24:35:25:49:dc:99:f2: 56:29:87:27:28:98:86:14:13:17:8f:6d:6a:56:65: 65:0a:0a:4d:2a:94:26:51:f6:e6:0d:24:2b:d1:bb: 7e:f6:ec:74:0d:fb:3b:98:21:57:b0:02:5f:ce:7b: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:61:6C:FA:FE:02:8C:50:A5:73:B9:D9:C1:27:E0:F6:52:B7:CC X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c056757c-bb27-4ef4-91ff-67b9307d3085.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:50c0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:c3:4f:41:a6:c6:8b:1b:04:bb:85:5f:29:3d:58:bf:cd:89: 22:1a:a0:c0:10:9f:08:fa:33:58:59:20:08:7d:71:7c:c7:d9: c7:38:31:74:c2:2e:7f:c2:57:b8:6f:43:88:94:48:70:d4:58: 0a:a0:d1:24:9c:ae:44:a1:81:d5:50:49:57:fd:15:cf:6f:ca: aa:3b:45:32:d5:cd:91:1d:74:b7:af:ef:96:93:f6:ac:6f:74: cb:e1:0c:76:4c:94:5a:0f:65:ac:65:28:fc:9e:62:61:0a:64: 8e:71:3e:4b:21:f6:99:c0:68:89:0d:9a:f9:b0:36:84:e5:c0: d3:f7:27:56:64:40:fd:c7:88:a6:f0:e0:c4:74:d1:bc:e6:08: 58:ab:61:dc:13:c3:f5:d6:1f:b5:cd:57:22:4e:a1:9b:25:e1: 54:c7:d6:b9:fb:09:7e:91:33:53:6d:87:30:ce:5c:26:43:f3: ed:af:c6:3f:a1:b9:17:cb:9b:96:44:c8:9b:6e:f7:e9:b4:3e: e2:90:92:60:09:aa:3b:40:ae:28:f5:48:1f:66:11:83:f3:c9: cb:c9:be:2f:26:a3:55:2b:f0:eb:c2:6a:9a:78:3f:16:4b:b7: 35:0e:ab:c6:27:68:83:95:26:46:56:a2:3c:3f:5e:f6:fd:8b: fb:82:87:10 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUURtn/pyiWEM9E1xcGLGqitZLaUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIxMzFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGU1NzBiNTcyODg1YTJhZWQ1N2M2ZmEwMGM0ODY0NDA0MDhiYjcxNmNmMmE1 ZmY0ZDI1Y2VlMDFmMzhlODJjNzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRj/UnSg1fFcl44d5Aa8XY9GivQOfbwklMzAOuNcpi2vw4uND/0/PxVd2rD OycdZUiyXWboh+2cbI7axdxe5hzhZvKzIbOaFqrMlDSS+h3YP9ivNglcwMvkpB1j DRIkvbXDoib2u2+TpToFU8LiICS7yyDppS4htOlx3GrX1adxejlpTPs1gjicjSem CRXZ4m405K2wmNUG+cqTMmTDeLXZxI9bc3cUsDvCP9EloBUC51Q6HB2DztsdvA8s 1tpwPDtCxJno7AzFHXAkNSVJ3JnyVimHJyiYhhQTF49talZlZQoKTSqUJlH25g0k K9G7fvbsdA37O5ghV7ACX857IdUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSIJGFs +v4CjFClc7nZwSfg9lK3zDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzA1Njc1N2MtYmIyNy00ZWY0LTkxZmYtNjdiOTMwN2QzMDg1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABQ wDANBgkqhkiG9w0BAQsFAAOCAQEAa8NPQabGixsEu4VfKT1Yv82JIhqgwBCfCPoz WFkgCH1xfMfZxzgxdMIuf8JXuG9DiJRIcNRYCqDRJJyuRKGB1VBJV/0Vz2/KqjtF MtXNkR10t6/vlpP2rG90y+EMdkyUWg9lrGUo/J5iYQpkjnE+SyH2mcBoiQ2a+bA2 hOXA0/cnVmRA/ceIpvDgxHTRvOYIWKth3BPD9dYftc1XIk6hmyXhVMfWufsJfpEz U22HMM5cJkPz7a/GP6G5F8ublkTIm2736bQ+4pCSYAmqO0CuKPVIH2YRg/PJy8m+ LyajVSvw68Jqmng/Fku3NQ6rxidog5UmRlaiPD9e9v2L+4KHEA== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:15 2026 by rpki-client