This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa File: c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa (raw, json) Hash identifier: ge08hiBHS8LvoZijYuY6pQK5bPvWWX0VJ0OUoS2KeCU= Subject key identifier: D5:AE:D6:CC:3C:B2:14:25:6A:57:21:C1:41:F0:23:B3:3F:80:C2:08 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5FDE7A2831135F98505C6BC7E09CFA7AFF6826D9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa Signing time: Wed 10 Dec 2025 05:50:55 +0000 ROA not before: Wed 10 Dec 2025 05:50:55 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:de:7a:28:31:13:5f:98:50:5c:6b:c7:e0:9c:fa:7a:ff:68:26:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:50:55 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=906173923a56bc246bf8950fb7724472f917e049eb61c3666014aac9bc4f1f77, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:09:50:ec:40:e5:9b:49:a4:cf:1e:7f:a8: 9f:25:b8:2b:37:0c:a5:ca:1c:90:72:f0:20:e6:42: 9d:05:8a:4d:d1:e3:99:ee:32:24:2e:04:53:a4:15: 19:9a:a7:de:c8:60:9c:18:bf:e2:29:28:99:9a:ae: 44:6f:92:c0:a2:8a:3b:71:56:da:28:ec:8a:c0:39: 46:81:64:12:e3:61:76:d6:f1:d4:1e:be:7f:46:47: fe:0c:ff:81:e6:46:ba:da:19:04:f8:b0:f4:78:91: 26:bb:aa:6b:18:2f:a8:b6:f7:79:ae:4b:99:3d:a2: e0:c7:da:a3:fe:04:fa:9d:d9:ec:99:75:64:91:9a: ba:33:03:4e:ac:2c:b8:16:12:7c:3a:08:e3:e6:c6: 5b:2e:f9:9f:12:c6:9d:86:ba:ec:df:0a:36:cd:27: 39:36:bc:e0:38:1a:eb:55:ce:5a:f5:83:08:f9:08: 71:b6:8b:65:27:aa:e3:dd:0d:a3:86:d9:8a:53:cc: cf:1d:b3:7d:5b:8c:a9:e7:cc:de:d8:28:10:e1:2f: 53:d5:4b:a1:3f:59:b7:cb:74:1e:8e:26:fd:d2:da: 59:d0:9c:44:62:7d:88:14:13:23:ba:06:ab:1a:e3: d7:cd:b4:26:82:a7:f5:fb:b7:ff:40:ae:5c:3e:aa: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AE:D6:CC:3C:B2:14:25:6A:57:21:C1:41:F0:23:B3:3F:80:C2:08 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 35:8d:a1:81:1b:f7:c7:47:17:76:79:83:89:a4:9c:17:72:c0: c9:2c:27:a1:42:bf:83:21:d7:68:5c:7a:b4:70:67:40:05:00: 86:84:cd:a8:46:eb:5e:9e:09:c9:3c:58:fe:85:7d:fc:13:fd: 5f:d3:da:27:3c:0c:34:7d:22:8d:16:2a:b0:45:40:5a:26:9f: ee:fa:7d:75:62:82:2f:ff:68:51:5e:af:13:27:92:ce:4d:9a: 80:33:4b:1f:cb:47:76:48:3d:93:6d:ea:50:fc:2a:02:c1:52: 0e:ff:e4:7a:3d:3c:05:5b:b1:53:b9:62:67:31:e0:3f:13:9d: 26:ab:0a:e2:21:cf:45:67:c3:08:4d:ce:41:7d:a5:83:e6:86: c1:dc:a5:5c:5c:0c:66:fc:90:92:ce:a5:d8:81:3c:2d:49:4f: 96:7f:f8:30:ac:8f:b2:e8:0b:70:94:63:15:0f:97:f5:5a:49: 6a:33:c9:82:1f:48:38:08:28:69:d6:90:1e:aa:5e:e5:ca:16: 50:41:d4:a4:15:69:f5:bd:5c:fb:5f:92:bd:df:bc:6a:2e:9f: 3e:1d:6a:30:c4:ca:f4:fb:6b:6f:7f:75:1d:e3:4d:45:c4:16: bc:6a:13:ad:37:5c:cf:33:f3:54:06:d2:6b:e5:f2:55:57:75: f0:1e:c4:a7 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUX956KDETX5hQXGvH4Jz6ev9oJtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTUwNTVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDkwNjE3MzkyM2E1NmJjMjQ2YmY4OTUwZmI3NzI0NDcyZjkxN2UwNDllYjYx YzM2NjYwMTRhYWM5YmM0ZjFmNzcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2TCVDsQOWbSaTPHn+onyW4KzcMpcockHLwIOZCnQWKTdHjme4yJC4EU6QV GZqn3shgnBi/4ikomZquRG+SwKKKO3FW2ijsisA5RoFkEuNhdtbx1B6+f0ZH/gz/ geZGutoZBPiw9HiRJruqaxgvqLb3ea5LmT2i4Mfao/4E+p3Z7Jl1ZJGaujMDTqws uBYSfDoI4+bGWy75nxLGnYa67N8KNs0nOTa84Dga61XOWvWDCPkIcbaLZSeq490N o4bZilPMzx2zfVuMqefM3tgoEOEvU9VLoT9Zt8t0Ho4m/dLaWdCcRGJ9iBQTI7oG qxrj1820JoKn9fu3/0CuXD6qPd0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTVrtbM PLIUJWpXIcFB8COzP4DCCDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzkxYWI4ZTctODM3MC00OGVkLTllMjUtMGRjMjYwYmExOTZiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJg wDANBgkqhkiG9w0BAQsFAAOCAQEANY2hgRv3x0cXdnmDiaScF3LAySwnoUK/gyHX aFx6tHBnQAUAhoTNqEbrXp4JyTxY/oV9/BP9X9PaJzwMNH0ijRYqsEVAWiaf7vp9 dWKCL/9oUV6vEyeSzk2agDNLH8tHdkg9k23qUPwqAsFSDv/kej08BVuxU7liZzHg PxOdJqsK4iHPRWfDCE3OQX2lg+aGwdylXFwMZvyQks6l2IE8LUlPln/4MKyPsugL cJRjFQ+X9VpJajPJgh9IOAgoadaQHqpe5coWUEHUpBVp9b1c+1+Svd+8ai6fPh1q MMTK9Ptrb391HeNNRcQWvGoTrTdczzPzVAbSa+XyVVd18B7Epw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:33 2026 by rpki-client