This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa File: ea31a166-ce12-4108-9868-894ac9df0e65.roa (raw, json) Hash identifier: kBR4XkDqwvaOXm6P+86sz8LV58+NpCnZf+UeGh7hp8E= Subject key identifier: 2B:DD:75:11:9E:9E:5F:D2:61:02:02:43:09:B8:16:70:0B:DF:5D:F1 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0487EC8F3AE7139C04272E611EA0826E547CA51A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa Signing time: Wed 10 Dec 2025 05:41:06 +0000 ROA not before: Wed 10 Dec 2025 05:41:06 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:87:ec:8f:3a:e7:13:9c:04:27:2e:61:1e:a0:82:6e:54:7c:a5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:41:06 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=4c554d2e7a4a0fafa7660c69e9cdb4b3d4f9ee88d08094da18a1350587eb40aa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:eb:3f:4d:04:b3:78:d9:b3:ea:4e:75:6b: 78:51:3c:4e:a6:a7:23:42:37:d7:2c:c4:8b:89:b9: 21:11:b4:fc:90:a8:d0:d7:6b:1d:20:a3:6b:15:3b: c6:f9:de:c8:fa:34:2d:52:f3:e8:b4:6e:5b:59:e3: 95:b8:17:dc:f8:a5:b8:85:66:e1:15:cc:4c:60:71: dc:af:0b:bb:75:1e:21:96:47:cb:6f:e7:79:e3:09: d0:7e:70:12:ce:07:2d:b2:7e:63:5a:b0:78:f9:c1: 53:22:91:f4:4e:d1:e2:13:9f:ab:6a:fc:e8:7b:62: 09:77:95:84:da:11:9d:0c:ab:c3:23:c6:c1:74:51: 39:66:75:92:9a:bd:f5:f6:4a:2b:c9:bc:45:bf:fe: b1:5e:67:d0:eb:1c:f0:5d:79:35:16:8c:d6:0b:1b: de:9b:48:0c:11:ce:fa:cc:37:24:8d:e6:df:8a:fe: dc:b1:8b:5e:db:b8:b4:04:96:b6:02:ab:6b:60:2f: 33:31:45:c2:df:41:6e:96:17:93:be:83:bf:01:19: eb:f2:a2:10:45:da:83:d0:64:b0:28:74:26:2c:05: 2d:1f:50:f3:c9:4d:3b:d8:3f:ac:6f:b5:ad:b5:17: 6d:fa:0f:a3:b8:d8:97:96:ba:8f:73:b9:b9:e6:ec: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:75:11:9E:9E:5F:D2:61:02:02:43:09:B8:16:70:0B:DF:5D:F1 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:b080::/48 Signature Algorithm: sha256WithRSAEncryption c9:85:03:68:71:e3:76:80:6a:31:0a:17:a8:5b:ce:0c:74:9a: 36:cb:8e:37:30:34:4f:0e:16:5d:6a:7d:d4:df:f0:41:f9:28: fe:ae:04:b0:65:61:da:db:af:7f:30:13:d1:0a:73:43:1f:b0: dc:7b:12:02:c9:b3:5d:5e:11:66:60:49:af:fb:66:84:0d:94: ce:99:48:d0:69:16:41:16:56:e3:fa:96:8a:2f:b9:8e:22:fa: bb:9e:a9:83:db:f0:fb:df:c5:5e:7e:1a:a2:71:f9:44:7b:05: 72:50:e5:b1:0b:02:10:ae:70:61:8a:57:98:c0:50:65:00:f8: b5:fb:bd:d9:54:86:4a:3a:0d:a6:8e:e3:34:8b:69:f4:63:4c: ee:50:c1:8e:96:27:f5:6b:6e:0e:a2:c2:17:1d:3d:56:93:e7: 78:a8:01:10:6a:12:22:6d:93:30:65:d9:af:43:33:b3:ce:03: df:a5:4d:38:e6:ab:83:a3:7a:3d:76:1e:e4:d4:55:71:ba:fd: bf:46:44:c5:3e:24:19:ca:68:7d:5d:41:2e:cd:e0:f2:62:07: 3a:25:88:c3:fb:84:d4:cc:3b:85:3d:b2:c1:95:ce:a0:3f:54: f3:2b:0a:60:2d:67:7d:54:f0:5f:6b:12:20:d8:49:34:36:6f: 1a:e2:26:fb -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUBIfsjzrnE5wEJy5hHqCCblR8pRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQxMDZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDRjNTU0ZDJlN2E0YTBmYWZhNzY2MGM2OWU5Y2RiNGIzZDRmOWVlODhkMDgw OTRkYTE4YTEzNTA1ODdlYjQwYWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANs46z9NBLN42bPqTnVreFE8TqanI0I31yzEi4m5IRG0/JCo0NdrHSCjaxU7 xvneyPo0LVLz6LRuW1njlbgX3PiluIVm4RXMTGBx3K8Lu3UeIZZHy2/neeMJ0H5w Es4HLbJ+Y1qwePnBUyKR9E7R4hOfq2r86HtiCXeVhNoRnQyrwyPGwXRROWZ1kpq9 9fZKK8m8Rb/+sV5n0Osc8F15NRaM1gsb3ptIDBHO+sw3JI3m34r+3LGLXtu4tASW tgKra2AvMzFFwt9BbpYXk76DvwEZ6/KiEEXag9BksCh0JiwFLR9Q88lNO9g/rG+1 rbUXbfoPo7jYl5a6j3O5uebscoECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQr3XUR np5f0mECAkMJuBZwC99d8TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZWEzMWExNjYtY2UxMi00MTA4LTk4NjgtODk0YWM5ZGYwZTY1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+w gDANBgkqhkiG9w0BAQsFAAOCAQEAyYUDaHHjdoBqMQoXqFvODHSaNsuONzA0Tw4W XWp91N/wQfko/q4EsGVh2tuvfzAT0QpzQx+w3HsSAsmzXV4RZmBJr/tmhA2UzplI 0GkWQRZW4/qWii+5jiL6u56pg9vw+9/FXn4aonH5RHsFclDlsQsCEK5wYYpXmMBQ ZQD4tfu92VSGSjoNpo7jNItp9GNM7lDBjpYn9WtuDqLCFx09VpPneKgBEGoSIm2T MGXZr0Mzs84D36VNOOarg6N6PXYe5NRVcbr9v0ZExT4kGcpofV1BLs3g8mIHOiWI w/uE1Mw7hT2ywZXOoD9U8ysKYC1nfVTwX2sSINhJNDZvGuIm+w== -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:41 2026 by rpki-client