This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa File: 4622ab3d-f2d8-4bec-a18b-b056342928a8.roa (raw, json) Hash identifier: gb0FkJaezoGo0ZkhJxzhlRdK0MGGAC4Va6cYg8kzWww= Subject key identifier: 69:33:4C:64:CB:30:FE:D1:96:02:0D:A2:7F:12:0B:8A:33:8A:BE:06 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7ADAACE7B809D79ADCE82FC4DBCF76CEECD2E194 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa Signing time: Wed 10 Dec 2025 05:31:03 +0000 ROA not before: Wed 10 Dec 2025 05:31:03 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d031:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:da:ac:e7:b8:09:d7:9a:dc:e8:2f:c4:db:cf:76:ce:ec:d2:e1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:03 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=714c9fee4883b5cca07029ae4caa58b72bab80c4e851b4b56c3f21e06a3f5c83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:26:fa:8a:3e:a8:5e:88:7a:76:f2:d9:89:ae: 9a:e2:4d:9a:2d:a7:4f:27:9c:8b:39:0a:ac:55:c2: 79:7a:c0:85:55:05:b5:6b:df:8f:93:e9:20:66:35: d7:6a:04:bc:e6:86:96:58:68:68:b4:9b:04:22:67: f2:00:49:4e:99:c8:a3:2f:92:4f:7c:fa:44:67:39: 34:da:f5:87:42:8f:01:54:8b:7c:d9:ca:c6:76:3e: 68:44:1a:58:2a:f6:e3:75:a0:e1:8f:d5:d8:7f:f3: 8b:76:86:0b:7c:92:bd:5f:85:59:2a:b9:b9:5c:12: 6a:d9:64:be:58:8e:8d:8d:6e:fd:a6:05:3d:8a:ca: 06:b6:86:f4:7e:d5:41:a8:98:20:ae:2b:71:4f:aa: 07:c1:2d:11:24:2b:85:31:f8:48:90:bf:03:e9:5e: 66:a5:cb:c0:de:89:17:4e:4f:99:ab:36:1e:ca:1f: 4a:ee:9f:ed:35:12:20:8f:ef:77:5d:93:1b:03:56: f9:b3:61:5f:f0:9f:be:54:0a:c6:8f:66:f5:52:44: 5b:4e:3b:53:c0:7c:5d:0e:df:0a:00:90:61:13:46: 69:6a:01:dc:a8:b8:16:42:32:9b:ec:7c:29:53:19: f2:49:31:09:4c:4a:83:c8:87:63:f3:c2:81:e6:b1: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:33:4C:64:CB:30:FE:D1:96:02:0D:A2:7F:12:0B:8A:33:8A:BE:06 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d031:a080::/48 Signature Algorithm: sha256WithRSAEncryption b8:61:fd:64:05:83:88:5a:6a:d5:f1:a4:00:5e:9f:b2:54:8f: d6:44:b2:04:e5:0c:28:d8:e8:23:99:1c:fd:f0:b1:6d:ae:46: 67:ae:87:c1:79:65:e2:8e:b9:34:22:e6:ae:e6:be:21:c6:94: af:60:27:72:02:86:df:3c:bb:27:5f:ff:9d:17:93:bd:5a:58: c8:0b:83:4e:5f:d3:2a:70:39:f3:42:83:20:30:09:a8:d2:a7: 80:2b:a7:7b:b1:aa:45:23:31:35:1a:48:89:10:b0:1e:fb:7a: d2:87:bd:20:3e:bc:ce:54:2f:0e:18:ec:14:a4:77:ae:cb:66: d8:4c:46:98:44:3f:4f:86:79:a0:d1:ed:38:a8:b1:f2:22:4b: f7:4a:2b:e3:d2:52:f4:8f:61:aa:6e:61:00:70:f3:4a:19:83: 44:e6:63:6c:04:b4:ff:fd:ae:86:2a:ee:d6:fe:33:01:e2:1f: 6d:97:7b:33:db:e6:f2:d7:f0:e5:9b:08:31:c6:01:76:48:fd: cb:e2:4b:ae:05:e7:e0:e1:2f:76:d6:43:d3:f7:47:82:2c:3e: 07:ec:e3:f8:33:97:69:a2:99:af:b6:7b:6d:8d:b9:18:4a:d6: 79:c5:9f:e0:b7:84:8b:f1:22:a7:30:bd:a3:d5:b2:ae:09:9b: 56:7f:61:07 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUetqs57gJ15rc6C/E2892zuzS4ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMDNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDcxNGM5ZmVlNDg4M2I1Y2NhMDcwMjlhZTRjYWE1OGI3MmJhYjgwYzRlODUx YjRiNTZjM2YyMWUwNmEzZjVjODMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIEm+oo+qF6Ienby2YmumuJNmi2nTyecizkKrFXCeXrAhVUFtWvfj5PpIGY1 12oEvOaGllhoaLSbBCJn8gBJTpnIoy+ST3z6RGc5NNr1h0KPAVSLfNnKxnY+aEQa WCr243Wg4Y/V2H/zi3aGC3ySvV+FWSq5uVwSatlkvliOjY1u/aYFPYrKBraG9H7V QaiYIK4rcU+qB8EtESQrhTH4SJC/A+leZqXLwN6JF05Pmas2HsofSu6f7TUSII/v d12TGwNW+bNhX/CfvlQKxo9m9VJEW047U8B8XQ7fCgCQYRNGaWoB3Ki4FkIym+x8 KVMZ8kkxCUxKg8iHY/PCgeax4dUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRpM0xk yzD+0ZYCDaJ/EguKM4q+BjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDYyMmFiM2QtZjJkOC00YmVjLWExOGItYjA1NjM0MjkyOGE4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGg gDANBgkqhkiG9w0BAQsFAAOCAQEAuGH9ZAWDiFpq1fGkAF6fslSP1kSyBOUMKNjo I5kc/fCxba5GZ66HwXll4o65NCLmrua+IcaUr2AncgKG3zy7J1//nReTvVpYyAuD Tl/TKnA580KDIDAJqNKngCune7GqRSMxNRpIiRCwHvt60oe9ID68zlQvDhjsFKR3 rstm2ExGmEQ/T4Z5oNHtOKix8iJL90or49JS9I9hqm5hAHDzShmDROZjbAS0//2u hiru1v4zAeIfbZd7M9vm8tfw5ZsIMcYBdkj9y+JLrgXn4OEvdtZD0/dHgiw+B+zj +DOXaaKZr7Z7bY25GErWecWf4LeEi/EipzC9o9WyrgmbVn9hBw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:38 2025 by rpki-client