This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa File: f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa (raw, json) Hash identifier: gyS86wKziYy+ocWUnXOiFMHUd1QqV+9Ob/o+ApPjvXA= Subject key identifier: 94:35:F0:39:22:E3:56:03:2B:74:DA:AF:29:86:6E:3D:33:1F:4D:0D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3A9FE0E12DA33A58C7BB07AE45A5C5D008F89ACB Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa Signing time: Wed 10 Dec 2025 05:20:48 +0000 ROA not before: Wed 10 Dec 2025 05:20:48 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d000:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9f:e0:e1:2d:a3:3a:58:c7:bb:07:ae:45:a5:c5:d0:08:f8:9a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:20:48 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=4bdead735473759117968b9d9ee03ec213631f31650b60d9caba00e4e4d4d5e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:4b:70:42:7f:0b:f2:cb:70:14:fd:a6:cd: 4f:26:f8:3d:a7:15:62:c0:97:98:ad:0f:7d:ca:6b: 21:cc:f7:b7:15:74:9b:e4:7b:fa:ef:05:34:c1:ff: c8:8b:b8:32:62:db:2e:83:80:2c:7b:d8:b9:c7:c7: 55:ff:81:b2:d1:f9:c8:6c:2d:18:fb:04:d7:d3:d2: e2:72:2a:81:8a:a2:f2:72:c6:d8:db:5d:a7:f5:da: 67:62:0e:e7:23:a0:91:8f:1c:8c:d2:4e:df:bb:21: 6f:5f:06:cc:78:dd:68:28:2f:54:59:6e:91:f9:3c: 7c:9e:99:55:d2:3b:da:1f:9c:57:ba:c1:08:d3:1a: a9:ec:40:47:03:bf:a5:12:60:bc:33:cc:e7:ca:fd: e9:12:c5:43:8e:c6:a2:73:b9:23:5e:8b:9a:75:80: bf:bc:39:cd:6c:dd:eb:56:7c:f4:28:3f:a6:a6:78: e8:1f:7d:ce:c4:83:49:55:7a:3d:aa:8a:60:51:9f: 36:ca:42:9a:9b:c4:21:6b:ee:b4:8f:b4:68:d9:49: fd:0a:fa:1b:70:cd:5d:9e:91:cb:3c:98:ad:50:df: 85:5c:c0:92:13:35:42:69:d3:93:b3:55:66:39:28: ed:33:54:ea:08:6b:68:e8:57:9d:11:37:43:9c:19: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:35:F0:39:22:E3:56:03:2B:74:DA:AF:29:86:6E:3D:33:1F:4D:0D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5e64938-fc2d-4971-b2da-aabc9fe556fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d000:6040::/48 Signature Algorithm: sha256WithRSAEncryption 14:86:e0:e7:5c:d2:50:e4:06:00:6a:ca:0c:c1:b2:fb:74:b2: ac:63:a7:c9:16:7c:bf:56:0b:88:14:29:54:7e:f0:64:27:38: 2e:e2:60:d2:0f:53:35:4e:a8:8b:39:b7:a8:15:89:25:bd:d3: f9:98:e0:65:a9:e0:0c:63:ba:92:f7:f9:1c:0e:32:60:65:e2: 08:ed:93:93:d3:72:f2:89:41:61:8e:b2:08:cf:2e:a8:72:de: 7a:81:3f:80:59:e3:83:9f:92:bf:f5:5c:77:de:29:e0:2e:f8: 41:57:7f:02:8b:67:23:fa:2a:7d:df:fd:e2:5f:5d:b0:77:4f: e7:d0:a4:07:48:ad:8f:21:0d:01:16:6e:24:69:a6:9e:64:2f: 42:49:04:a4:94:c1:94:43:11:32:fd:51:7e:15:aa:11:39:36: a1:c3:0b:51:70:a4:46:ad:75:9e:d1:32:96:e9:18:62:8d:24: 67:53:36:d0:92:62:00:87:18:d4:5d:8f:8c:f8:a0:fc:7f:54: 6f:40:65:16:ca:8d:63:63:03:aa:50:77:88:b4:62:ca:89:d9: 4f:43:a7:4a:cd:d4:82:49:a7:33:ea:86:15:77:37:7c:7c:66: fe:ff:4a:81:af:ff:70:f6:24:48:b8:41:55:1d:a2:a9:bc:80: 14:d3:77:00 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUOp/g4S2jOljHuweuRaXF0Aj4msswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTIwNDhaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDRiZGVhZDczNTQ3Mzc1OTExNzk2OGI5ZDllZTAzZWMyMTM2MzFmMzE2NTBi NjBkOWNhYmEwMGU0ZTRkNGQ1ZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL08S3BCfwvyy3AU/abNTyb4PacVYsCXmK0PfcprIcz3txV0m+R7+u8FNMH/ yIu4MmLbLoOALHvYucfHVf+BstH5yGwtGPsE19PS4nIqgYqi8nLG2Ntdp/XaZ2IO 5yOgkY8cjNJO37shb18GzHjdaCgvVFlukfk8fJ6ZVdI72h+cV7rBCNMaqexARwO/ pRJgvDPM58r96RLFQ47GonO5I16LmnWAv7w5zWzd61Z89Cg/pqZ46B99zsSDSVV6 PaqKYFGfNspCmpvEIWvutI+0aNlJ/Qr6G3DNXZ6RyzyYrVDfhVzAkhM1QmnTk7NV Zjko7TNU6ghraOhXnRE3Q5wZxv8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSUNfA5 IuNWAyt02q8phm49Mx9NDTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZjVlNjQ5MzgtZmMyZC00OTcxLWIyZGEtYWFiYzlmZTU1NmZjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABg QDANBgkqhkiG9w0BAQsFAAOCAQEAFIbg51zSUOQGAGrKDMGy+3SyrGOnyRZ8v1YL iBQpVH7wZCc4LuJg0g9TNU6oizm3qBWJJb3T+ZjgZangDGO6kvf5HA4yYGXiCO2T k9Ny8olBYY6yCM8uqHLeeoE/gFnjg5+Sv/Vcd94p4C74QVd/AotnI/oqfd/94l9d sHdP59CkB0itjyENARZuJGmmnmQvQkkEpJTBlEMRMv1RfhWqETk2ocMLUXCkRq11 ntEylukYYo0kZ1M20JJiAIcY1F2PjPig/H9Ub0BlFsqNY2MDqlB3iLRiyonZT0On Ss3UgkmnM+qGFXc3fHxm/v9Kga//cPYkSLhBVR2iqbyAFNN3AA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:17 2026 by rpki-client