This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa File: ddbb8798-3423-4d98-a384-58621b010556.roa (raw, json) Hash identifier: dALlYKbuKM9FFr4M+YD9J9GSJCno+OQAIaSlPmOqdfw= Subject key identifier: 3E:8D:20:22:16:6B:99:9F:03:4D:BD:53:8B:8C:61:BB:65:D8:80:0F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 05110D4AB57BC1278113D193D4C8DA75D72CFA42 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa Signing time: Wed 10 Dec 2025 06:11:02 +0000 ROA not before: Wed 10 Dec 2025 06:11:02 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d019:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:11:0d:4a:b5:7b:c1:27:81:13:d1:93:d4:c8:da:75:d7:2c:fa:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:11:02 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=ce8f0e33782aa1740b0a24646c72a55263687cc3034affd2332b5cb1c7b9092f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:17:0a:ff:c2:c3:b5:21:c0:d4:a9:0f:12: 8a:4f:c2:fe:83:1f:f3:7f:ba:dc:3a:df:a2:ef:cd: 38:ec:ab:c7:53:72:66:4f:4b:38:49:e9:03:3b:58: 86:c3:b4:14:03:52:45:4d:e5:58:88:63:53:a7:1b: b8:5d:1f:b5:23:e2:35:d4:03:65:db:a5:e9:6b:89: bd:2a:e1:95:84:1b:5f:7b:92:59:05:21:a1:8c:44: f1:b6:26:2f:a0:12:17:79:ef:b2:51:89:9b:34:75: 5c:3d:d3:bc:57:51:66:12:24:e2:4b:78:22:35:1a: d7:f6:6f:4a:f6:ae:31:58:7d:ba:83:00:e0:d4:f9: 1d:b6:05:fc:4d:b2:79:52:35:e6:86:66:e1:ba:4c: db:86:de:df:b8:5d:84:a2:c1:89:e9:06:dc:3d:ce: 9b:4b:c7:34:d4:65:02:15:c9:05:4a:6d:6b:b8:1b: 4c:43:e4:ae:82:ac:75:1d:6b:45:19:cc:96:aa:94: 85:7b:75:7b:cd:0c:76:8e:eb:ec:6b:fe:a2:ac:56: 2c:e2:3d:42:b1:dd:41:2d:25:ae:51:67:96:6e:69: 7a:cf:6b:59:7d:c8:aa:25:7f:41:17:a8:46:be:06: 54:b3:ae:ed:dc:02:d5:b8:1f:e8:a7:8a:76:5e:e9: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:20:22:16:6B:99:9F:03:4D:BD:53:8B:8C:61:BB:65:D8:80:0F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d019:c00::/38 Signature Algorithm: sha256WithRSAEncryption 20:8b:47:ab:84:71:97:aa:58:2b:29:0f:12:dd:16:d7:a7:24: 4f:07:3e:00:69:97:46:8a:b1:56:fd:45:4e:98:a5:4c:cf:89: 79:0d:99:5e:36:ac:d5:ad:0e:4d:d3:41:91:0a:39:82:22:53: 35:87:d7:32:fd:1e:f2:4b:39:26:88:5e:e1:fb:ca:b9:50:31: 55:46:12:a3:e7:03:42:ff:07:16:57:e7:0d:ec:5a:fa:99:cc: 55:76:e5:c2:dd:1f:b1:0d:61:11:b3:59:53:36:ee:c3:92:0a: 54:05:6e:12:22:3c:c9:35:7c:e5:22:0c:cf:b3:76:cd:29:2e: 34:da:b2:23:bc:52:53:ef:98:39:8b:16:f2:c0:11:d4:26:90: f4:83:c7:83:79:87:72:ab:6d:8f:59:c6:fd:f6:dc:9c:2a:f6: a0:17:03:5b:28:3d:37:fa:44:ac:d6:ae:a6:45:03:de:c1:76: 08:f1:e7:97:26:51:36:80:f7:46:a2:7a:9c:f5:5b:d2:1d:a5: f1:78:e5:fc:cc:b4:f9:01:ac:75:25:87:79:0b:89:ea:95:14: 6f:db:85:2c:03:75:81:c8:dc:90:25:aa:41:dc:39:b9:0b:9b: 94:87:70:96:d6:b0:54:f0:b8:44:ca:e3:6e:63:c8:1f:71:e6: 53:7b:6b:12 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUBRENSrV7wSeBE9GT1Mjaddcs+kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjExMDJaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGNlOGYwZTMzNzgyYWExNzQwYjBhMjQ2NDZjNzJhNTUyNjM2ODdjYzMwMzRh ZmZkMjMzMmI1Y2IxYzdiOTA5MmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1cFwr/wsO1IcDUqQ8Sik/C/oMf83+63Drfou/NOOyrx1NyZk9LOEnpAztY hsO0FANSRU3lWIhjU6cbuF0ftSPiNdQDZdul6WuJvSrhlYQbX3uSWQUhoYxE8bYm L6ASF3nvslGJmzR1XD3TvFdRZhIk4kt4IjUa1/ZvSvauMVh9uoMA4NT5HbYF/E2y eVI15oZm4bpM24be37hdhKLBiekG3D3Om0vHNNRlAhXJBUpta7gbTEPkroKsdR1r RRnMlqqUhXt1e80Mdo7r7Gv+oqxWLOI9QrHdQS0lrlFnlm5pes9rWX3IqiV/QReo Rr4GVLOu7dwC1bgf6KeKdl7pOC0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ+jSAi FmuZnwNNvVOLjGG7ZdiADzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGRiYjg3OTgtMzQyMy00ZDk4LWEzODQtNTg2MjFiMDEwNTU2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BkM MA0GCSqGSIb3DQEBCwUAA4IBAQAgi0erhHGXqlgrKQ8S3RbXpyRPBz4AaZdGirFW /UVOmKVMz4l5DZleNqzVrQ5N00GRCjmCIlM1h9cy/R7ySzkmiF7h+8q5UDFVRhKj 5wNC/wcWV+cN7Fr6mcxVduXC3R+xDWERs1lTNu7DkgpUBW4SIjzJNXzlIgzPs3bN KS402rIjvFJT75g5ixbywBHUJpD0g8eDeYdyq22PWcb99tycKvagFwNbKD03+kSs 1q6mRQPewXYI8eeXJlE2gPdGonqc9VvSHaXxeOX8zLT5Aax1JYd5C4nqlRRv24Us A3WByNyQJapB3Dm5C5uUh3CW1rBU8LhEyuNuY8gfceZTe2sS -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:02 2026 by rpki-client