This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa File: 3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa (raw, json) Hash identifier: BtzkAnEOA8ReM38SzheH6UByfjyDVSOVlBD/iyy4ljw= Subject key identifier: 79:55:CB:86:B7:27:13:F8:F1:9B:3F:96:88:25:46:A4:E7:A4:BC:43 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1BB7AECB3AAAEB03C49A9948F5973FEDB611977C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa Signing time: Wed 10 Dec 2025 05:20:30 +0000 ROA not before: Wed 10 Dec 2025 05:20:30 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06f:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b7:ae:cb:3a:aa:eb:03:c4:9a:99:48:f5:97:3f:ed:b6:11:97:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:20:30 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=6ede404d0bbd69d1c32bc6d9fb6ba541af230a0c19dab9dc68c1a0bf4f053b78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:22:cf:2f:6e:84:e9:0f:7c:cd:33:c4:45: 83:3e:d0:68:b0:1c:75:18:19:eb:90:7c:a2:d7:52: c9:03:24:75:ec:8a:1e:77:43:ef:35:73:ba:86:81: 7a:53:30:af:df:02:52:d7:cc:e4:cf:dc:d8:25:1a: 59:06:b5:51:e9:27:20:dd:e0:a7:df:27:e3:5e:c4: 26:6c:d4:c7:24:8a:c5:36:39:2e:40:bf:f1:9d:cd: 22:3b:c6:d4:3e:97:7a:75:4c:e6:cd:06:7e:01:90: 0b:33:ea:c0:03:de:97:04:7b:c2:ce:1e:6e:d8:87: 6a:39:66:39:57:e9:d5:a1:39:c7:e3:21:a7:44:c7: c3:09:76:00:a5:d8:03:97:70:01:42:0f:1a:d8:7d: 78:09:d2:e9:38:de:bc:e7:f0:e8:26:d6:8b:3a:a0: 17:4b:aa:47:b2:c6:14:5b:d4:f7:42:e3:4c:72:e4: 8b:88:59:35:88:18:a0:0a:14:6b:ae:aa:4a:43:36: f6:c9:0c:7e:af:c1:d6:3c:e7:4f:af:dc:24:02:bc: 79:5f:2a:87:0b:d8:3b:1a:67:31:47:d4:8e:44:ad: c8:29:08:3e:0d:07:5a:7e:af:2a:2b:97:41:c9:a6: e9:a8:07:14:54:96:32:9c:fa:8d:df:a2:47:a9:ce: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:55:CB:86:B7:27:13:F8:F1:9B:3F:96:88:25:46:A4:E7:A4:BC:43 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:c000::/40 Signature Algorithm: sha256WithRSAEncryption 63:8c:07:9f:db:2d:06:f4:e7:40:45:1f:18:4b:80:d9:2f:60: 87:e9:f8:09:29:0b:38:9a:6c:b4:87:4b:13:c0:e8:98:d6:a5: 74:cb:f7:9d:bf:33:c2:9b:79:a2:d1:30:fa:ea:7b:b2:c0:26: 3d:ec:9d:b8:f4:88:6c:3b:a9:9b:e9:6c:6a:a0:e3:d5:9f:00: 0f:39:7e:7b:2e:fc:51:13:98:96:5e:80:53:d9:41:74:3e:8e: 1a:05:01:31:40:1e:ee:c7:25:d3:80:01:84:68:cb:16:c0:a1: 44:21:86:53:f3:b9:75:84:93:02:48:e0:6b:3c:26:88:33:4f: f7:81:ea:8b:33:ff:f1:dd:d0:1b:8f:6a:89:8e:6c:23:97:ad: 64:e1:28:f7:df:93:73:04:9b:54:ae:f7:f1:b7:87:b6:d0:5a: 0d:49:69:b9:0f:16:76:2f:ca:1c:f4:ab:5b:26:10:b9:e4:4c: a4:61:a7:c1:f2:c3:45:81:ea:c4:01:45:d1:69:10:79:f0:02: b6:e3:93:17:08:6b:4a:0c:9e:91:e1:e7:5d:70:60:88:95:bf: 8a:8d:dd:d1:f5:34:b1:34:0b:92:2f:ca:65:d6:45:4b:43:77: 2e:82:bb:4c:d4:f1:ce:0c:20:46:68:a5:b0:ca:55:27:6f:27: 4b:5f:c0:f2 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUG7euyzqq6wPEmplI9Zc/7bYRl3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTIwMzBaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDZlZGU0MDRkMGJiZDY5ZDFjMzJiYzZkOWZiNmJhNTQxYWYyMzBhMGMxOWRh YjlkYzY4YzFhMGJmNGYwNTNiNzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmEIs8vboTpD3zNM8RFgz7QaLAcdRgZ65B8otdSyQMkdeyKHndD7zVzuoaB elMwr98CUtfM5M/c2CUaWQa1UeknIN3gp98n417EJmzUxySKxTY5LkC/8Z3NIjvG 1D6XenVM5s0GfgGQCzPqwAPelwR7ws4ebtiHajlmOVfp1aE5x+Mhp0THwwl2AKXY A5dwAUIPGth9eAnS6TjevOfw6CbWizqgF0uqR7LGFFvU90LjTHLki4hZNYgYoAoU a66qSkM29skMfq/B1jznT6/cJAK8eV8qhwvYOxpnMUfUjkStyCkIPg0HWn6vKiuX Qcmm6agHFFSWMpz6jd+iR6nO310CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR5VcuG tycT+PGbP5aIJUak56S8QzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv M2I1YzY4ZDMtZTVhMS00NzQyLWE5MGMtNTliMWUyOWNmYzAwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G/A MA0GCSqGSIb3DQEBCwUAA4IBAQBjjAef2y0G9OdARR8YS4DZL2CH6fgJKQs4mmy0 h0sTwOiY1qV0y/edvzPCm3mi0TD66nuywCY97J249IhsO6mb6WxqoOPVnwAPOX57 LvxRE5iWXoBT2UF0Po4aBQExQB7uxyXTgAGEaMsWwKFEIYZT87l1hJMCSOBrPCaI M0/3geqLM//x3dAbj2qJjmwjl61k4Sj335NzBJtUrvfxt4e20FoNSWm5DxZ2L8oc 9KtbJhC55EykYafB8sNFgerEAUXRaRB58AK245MXCGtKDJ6R4eddcGCIlb+Kjd3R 9TSxNAuSL8pl1kVLQ3cugrtM1PHODCBGaKWwylUnbydLX8Dy -----END CERTIFICATE-----Generated at Mon Dec 15 19:47:21 2025 by rpki-client