This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa File: 4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa (raw, json) Hash identifier: EXYMm+d5YsjkE9wJaP+ZMC3jLYGYqZkWeKJVAp6f2JA= Subject key identifier: C9:39:32:62:52:1D:D8:8E:89:FE:F3:7C:A8:1C:DA:70:D2:14:BC:C4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 415C623E1F23BB1B44D66224D159BFAA53AE0434 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa Signing time: Wed 10 Dec 2025 06:20:44 +0000 ROA not before: Wed 10 Dec 2025 06:20:44 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d050:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5c:62:3e:1f:23:bb:1b:44:d6:62:24:d1:59:bf:aa:53:ae:04:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:20:44 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=ecdecd08083b844f290fd02f7176c488de1463617d15dfdfcc4010561da04ce8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:ad:70:e3:09:f7:50:54:af:82:bc:5b:fa: 49:ee:f6:22:62:dc:65:b2:e9:ca:fa:bb:97:6e:f1: 95:1d:cb:e0:e6:20:59:ab:a9:39:0d:52:f3:c3:6c: c4:b7:75:10:66:f1:c7:3b:7d:2c:c4:4a:ec:34:21: 6c:05:3b:9d:7c:73:b4:16:1a:a8:44:69:b7:71:82: f4:82:6a:2a:a9:87:d7:96:de:0a:52:f0:4a:cb:22: b9:ed:64:cd:7f:48:73:8e:df:be:3c:86:b0:b4:c0: 2b:12:c2:88:cb:71:e7:58:03:5d:df:e3:f3:88:ce: 29:66:d0:e1:49:ca:5d:4d:23:be:02:ef:3f:a7:42: 22:6a:0e:79:67:c7:cc:db:80:9c:fa:a3:cb:6f:ab: 24:c2:d0:ea:e4:a7:9a:1b:3f:b9:02:d8:da:8c:0c: 2e:93:7d:06:aa:b8:e8:7f:c2:38:5b:d1:ab:80:6a: 3d:5b:6d:79:1c:16:5e:0b:39:3f:00:8c:bf:7b:98: 8d:cd:0c:8c:67:1d:ce:c8:af:32:6c:7c:13:7b:8b: 68:ac:8f:ec:0b:bd:05:ec:18:21:00:70:83:17:88: 95:34:66:11:37:b9:f0:17:73:e1:d7:52:c0:26:32: fb:35:89:26:ff:ed:24:cc:4d:2f:09:16:19:83:7a: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:39:32:62:52:1D:D8:8E:89:FE:F3:7C:A8:1C:DA:70:D2:14:BC:C4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d050:c000::/40 Signature Algorithm: sha256WithRSAEncryption 13:26:b3:9b:67:8e:b1:8a:15:85:00:9e:c6:b3:68:2c:41:e8: d4:da:b5:ad:2d:7d:f8:c4:4e:c3:f5:de:42:b6:47:b4:73:9a: d9:86:67:e1:9f:39:84:74:45:3f:f2:ee:8b:46:cb:86:0b:0f: 29:de:38:1c:19:43:2f:d4:1a:35:d4:b0:47:b6:65:6f:44:09: 3d:40:99:c3:77:d9:22:6a:3d:1a:4c:94:84:d4:8e:86:ad:87: 03:d0:7c:0b:24:11:54:7e:70:17:b4:8d:37:d0:b5:36:9d:96: 77:cb:32:77:cc:dc:46:ae:0e:aa:f4:69:b1:c4:7b:37:bd:80: 22:ff:d7:9a:6b:b0:e2:b2:fb:9b:bd:e9:e8:68:6c:3d:e6:37: c9:96:07:73:9d:f9:c0:d4:ed:d8:98:6e:80:99:c8:d3:74:66: e2:d9:77:6f:0a:0e:d2:04:5d:6c:ce:28:bf:0e:e9:89:82:43: 53:1d:15:59:b5:25:e0:d0:f1:b9:f9:76:92:12:8c:29:c0:69: 16:4c:b9:b8:18:b8:6a:36:6f:34:55:15:b0:f4:d7:76:1d:b3: c7:3a:31:76:3b:09:85:5a:b1:c6:83:ab:10:66:ab:23:50:56: 29:c8:1a:35:1a:6f:49:b1:8a:93:53:87:e8:14:a6:ed:a5:d9: 2f:70:e7:4d -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQVxiPh8juxtE1mIk0Vm/qlOuBDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjIwNDRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGVjZGVjZDA4MDgzYjg0NGYyOTBmZDAyZjcxNzZjNDg4ZGUxNDYzNjE3ZDE1 ZGZkZmNjNDAxMDU2MWRhMDRjZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+prXDjCfdQVK+CvFv6Se72ImLcZbLpyvq7l27xlR3L4OYgWaupOQ1S88Ns xLd1EGbxxzt9LMRK7DQhbAU7nXxztBYaqERpt3GC9IJqKqmH15beClLwSssiue1k zX9Ic47fvjyGsLTAKxLCiMtx51gDXd/j84jOKWbQ4UnKXU0jvgLvP6dCImoOeWfH zNuAnPqjy2+rJMLQ6uSnmhs/uQLY2owMLpN9Bqq46H/COFvRq4BqPVtteRwWXgs5 PwCMv3uYjc0MjGcdzsivMmx8E3uLaKyP7Au9BewYIQBwgxeIlTRmETe58Bdz4ddS wCYy+zWJJv/tJMxNLwkWGYN6jTsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTJOTJi Uh3Yjon+83yoHNpw0hS8xDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGFkNGIxZDUtMTczZS00YzEzLTgwMzItYWIyZGQxZmFmZWU0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FDA MA0GCSqGSIb3DQEBCwUAA4IBAQATJrObZ46xihWFAJ7Gs2gsQejU2rWtLX34xE7D 9d5Ctke0c5rZhmfhnzmEdEU/8u6LRsuGCw8p3jgcGUMv1Bo11LBHtmVvRAk9QJnD d9kiaj0aTJSE1I6GrYcD0HwLJBFUfnAXtI030LU2nZZ3yzJ3zNxGrg6q9GmxxHs3 vYAi/9eaa7DisvubvenoaGw95jfJlgdznfnA1O3YmG6AmcjTdGbi2XdvCg7SBF1s zii/DumJgkNTHRVZtSXg0PG5+XaSEowpwGkWTLm4GLhqNm80VRWw9Nd2HbPHOjF2 OwmFWrHGg6sQZqsjUFYpyBo1Gm9JsYqTU4foFKbtpdkvcOdN -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:15 2025 by rpki-client