This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa File: fbd3a3af-f307-4148-9e34-70199540a838.roa (raw, json) Hash identifier: +7FFjMJarUbTtA1lry8oHVm2ez9ZXnoIG+jxKeC/2+0= Subject key identifier: 0F:F6:13:71:6C:55:F8:B0:D9:37:48:5A:BF:91:E1:5A:70:E7:6E:D5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4489BC02EA246A2181EBA54E68F38CB6085170A2 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa Signing time: Wed 10 Dec 2025 06:31:08 +0000 ROA not before: Wed 10 Dec 2025 06:31:08 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d038:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:89:bc:02:ea:24:6a:21:81:eb:a5:4e:68:f3:8c:b6:08:51:70:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:31:08 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=b4c12805c6d7ee4367cc267b63c5c80a7ebd2b89f36b4d875b8fde6fdb12f057, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:0f:4e:76:4e:60:a1:29:7c:1e:8e:86:ad: f1:47:c5:c0:a4:56:de:3a:c8:62:6b:05:1e:82:73: 57:db:54:9b:85:33:e3:d3:9f:a3:f3:d5:e6:bd:8b: 39:ee:b6:db:90:1b:09:58:3b:fd:7b:e7:94:cb:82: 2a:b5:38:45:7a:c6:08:71:5e:1b:e8:a3:cf:c7:03: a9:f5:fd:55:0e:1b:8d:00:3d:af:79:d6:a9:83:78: 57:46:db:84:f4:9b:de:67:67:a9:38:40:da:4e:5d: 7b:a5:bf:18:c4:79:1d:3a:f8:a9:5d:f8:d5:bf:e4: 34:16:ef:ea:4f:a7:c6:f5:9a:7e:e1:ba:a9:f9:fc: 69:a0:a6:e3:94:7e:f4:9b:e4:fb:4f:52:00:d6:62: 5f:3a:18:d8:7a:6b:cb:0b:2e:02:37:76:f0:22:e1: 65:d5:82:5e:8b:ff:90:1c:e7:b2:89:1e:e3:d4:be: 28:1e:d5:61:db:f2:fe:6b:fd:55:c6:17:52:d5:bd: 46:08:07:9e:84:d3:8a:d8:e3:6d:ba:7f:04:64:34: ca:3b:8c:d0:f9:8d:67:ba:3c:e9:40:6c:af:a4:7e: 52:f7:95:11:62:47:eb:8c:22:d1:5b:cd:1a:64:25: ad:f5:43:14:e5:c1:dc:b1:4b:04:9b:71:40:69:5c: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:13:71:6C:55:F8:B0:D9:37:48:5A:BF:91:E1:5A:70:E7:6E:D5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d038:b000::/40 Signature Algorithm: sha256WithRSAEncryption 9a:c7:0a:4b:a5:b4:49:11:5a:ef:ba:bb:97:9d:51:88:c0:6e: ad:e1:ed:a3:70:5b:ec:16:2f:4c:ab:0b:2e:20:f5:e0:b6:0a: ca:92:7f:32:f4:5f:2e:2a:ee:d5:ce:e9:3e:60:63:65:07:94: 9d:4a:f1:db:34:c4:1b:f4:3e:fc:2f:b3:cd:ce:9a:4f:8d:ab: 68:61:50:42:d9:54:11:1b:10:dd:7b:76:54:82:1d:9c:87:ac: 51:42:3e:7a:90:1c:5b:1b:99:61:7b:9c:d4:bb:ee:e5:14:af: 47:99:72:28:c9:2a:77:50:e6:e1:b5:90:8d:15:32:7c:a2:c4: 58:df:e3:1a:6d:91:71:5b:cf:d4:06:91:04:40:91:33:3f:56: ac:4d:f9:d3:90:85:e5:1e:62:0e:eb:b8:83:29:3b:d4:d6:10: d0:ce:59:1c:06:da:bc:35:c1:07:bb:05:40:ab:af:00:a9:47: 84:42:10:aa:26:ed:62:cc:43:07:d7:12:ae:70:f9:8a:fc:92: f2:f2:5d:d2:f2:1c:1c:47:4d:67:a8:c1:b2:c6:2d:41:e7:09: ab:6c:12:7f:2c:8c:b0:e1:96:cb:1c:7c:b8:82:8b:53:91:eb: d9:d3:24:71:ee:45:f4:6d:eb:70:2e:a9:41:a1:72:3b:e7:a4: 7d:94:e4:94 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIURIm8AuokaiGB66VOaPOMtghRcKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjMxMDhaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGI0YzEyODA1YzZkN2VlNDM2N2NjMjY3YjYzYzVjODBhN2ViZDJiODlmMzZi NGQ4NzViOGZkZTZmZGIxMmYwNTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvuD052TmChKXwejoat8UfFwKRW3jrIYmsFHoJzV9tUm4Uz49Ofo/PV5r2L Oe6225AbCVg7/XvnlMuCKrU4RXrGCHFeG+ijz8cDqfX9VQ4bjQA9r3nWqYN4V0bb hPSb3mdnqThA2k5de6W/GMR5HTr4qV341b/kNBbv6k+nxvWafuG6qfn8aaCm45R+ 9Jvk+09SANZiXzoY2HprywsuAjd28CLhZdWCXov/kBznsoke49S+KB7VYdvy/mv9 VcYXUtW9RggHnoTTitjjbbp/BGQ0yjuM0PmNZ7o86UBsr6R+UveVEWJH64wi0VvN GmQlrfVDFOXB3LFLBJtxQGlceI0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQP9hNx bFX4sNk3SFq/keFacOdu1TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmJkM2EzYWYtZjMwNy00MTQ4LTllMzQtNzAxOTk1NDBhODM4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Diw MA0GCSqGSIb3DQEBCwUAA4IBAQCaxwpLpbRJEVrvuruXnVGIwG6t4e2jcFvsFi9M qwsuIPXgtgrKkn8y9F8uKu7Vzuk+YGNlB5SdSvHbNMQb9D78L7PNzppPjatoYVBC 2VQRGxDde3ZUgh2ch6xRQj56kBxbG5lhe5zUu+7lFK9HmXIoySp3UObhtZCNFTJ8 osRY3+MabZFxW8/UBpEEQJEzP1asTfnTkIXlHmIO67iDKTvU1hDQzlkcBtq8NcEH uwVAq68AqUeEQhCqJu1izEMH1xKucPmK/JLy8l3S8hwcR01nqMGyxi1B5wmrbBJ/ LIyw4ZbLHHy4gotTkevZ0yRx7kX0betwLqlBoXI756R9lOSU -----END CERTIFICATE-----Generated at Fri Jan 2 10:58:12 2026 by rpki-client