This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa File: 575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa (raw, json) Hash identifier: MUFX4WIRoxo596kEyMnfUPN/IWC5qG8NwCWS87JiuoI= Subject key identifier: 2D:EF:39:25:54:AC:C0:B3:F8:87:2B:99:F3:AB:12:08:5D:4E:C9:E9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 49375B2B5B8596C90019B68EBB9DE4AF8FC467CE Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa Signing time: Wed 10 Dec 2025 06:00:05 +0000 ROA not before: Wed 10 Dec 2025 06:00:05 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:37:5b:2b:5b:85:96:c9:00:19:b6:8e:bb:9d:e4:af:8f:c4:67:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:00:05 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=d1261b3d78053d74b486092fda8f1b3dc20872fe21d060368f9aa9f03866fc77, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:9c:53:f4:02:2d:cc:72:fe:cd:ae:3a:f6: 3a:d6:f0:1b:22:97:8b:b5:65:66:97:be:4e:c7:c1: 8c:00:82:ed:fd:b2:34:82:6f:28:ea:a5:e1:ce:53: 21:89:4b:cb:ce:74:c0:4f:a6:ab:c8:ed:e9:e0:a2: 6b:27:be:3e:cd:75:ae:fc:15:05:b4:b7:1a:4a:43: 50:f5:49:b1:10:bf:6a:be:e9:91:ac:23:ba:68:11: c8:27:6f:a2:05:28:62:e5:61:a2:53:8e:5d:97:91: ed:86:79:05:a9:a1:c0:5d:c8:6d:3a:73:31:97:3c: af:99:f6:07:27:3b:9d:cc:a6:e1:ce:76:d8:d3:f1: 47:d6:d7:0e:65:2c:2f:40:cd:d9:9d:70:42:27:0d: ca:aa:00:c0:96:70:6a:c3:31:60:88:85:8c:e8:ca: 0f:c1:b5:1d:3c:41:53:35:1f:0e:75:44:17:68:c8: ba:67:77:66:41:06:4f:fd:a2:f5:4d:4e:9b:50:d3: ca:ba:58:b1:65:44:4f:a5:d4:5c:06:d4:e2:8b:a1: 45:9f:2b:ee:24:5d:06:19:30:a4:10:02:33:7d:e7: da:c5:01:de:78:4f:3d:26:5a:15:28:d5:06:3e:fe: 50:98:11:c6:9f:5f:4a:e1:56:0b:83:79:a1:5d:a8: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EF:39:25:54:AC:C0:B3:F8:87:2B:99:F3:AB:12:08:5D:4E:C9:E9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/575e30c8-2ea5-4e97-872b-6af0b3e8318e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036:4000::/40 Signature Algorithm: sha256WithRSAEncryption 95:a6:00:2a:da:b3:ee:fe:13:80:6e:bb:cd:28:df:01:aa:71: 74:6c:80:1d:cf:2d:81:ea:2d:ac:12:46:06:11:d4:36:69:cf: 42:2e:c7:e8:9a:b7:40:24:a1:62:a2:10:68:c9:69:bd:20:41: fb:a4:72:94:85:b7:78:4e:d2:65:37:f1:14:36:b6:bc:68:37: e1:3d:9a:cb:73:27:b4:d3:e2:be:71:47:62:52:29:97:eb:fb: 54:0a:16:19:5b:92:c5:6d:fe:14:4f:ad:40:f1:ba:a2:8e:41: 42:fd:8e:7e:ab:3a:23:23:8d:c7:3a:19:a4:e4:bc:a2:6c:f8: d5:a1:fb:43:7b:18:29:a0:ba:50:cf:38:37:ee:42:4a:f2:70: 6a:8b:c8:2b:1b:01:4f:4c:d0:9c:be:12:f6:39:34:f2:15:a5: 50:07:52:55:21:fd:a8:fb:32:10:01:d8:a0:98:a8:d4:31:66: 1f:cf:19:b5:ff:35:56:80:a1:d7:8f:dc:b0:c5:35:cd:77:31: 81:31:d9:6c:0f:fa:1a:54:1b:91:44:d2:41:23:d7:9c:4c:36: 49:ac:0d:7d:be:f9:12:5f:ee:68:1e:10:e2:33:9d:12:1f:13: 40:e6:bc:99:07:73:29:40:91:b4:4f:99:10:89:3e:cb:e0:0c: 88:7e:f8:89 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUSTdbK1uFlskAGbaOu53kr4/EZ84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAwMDVaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGQxMjYxYjNkNzgwNTNkNzRiNDg2MDkyZmRhOGYxYjNkYzIwODcyZmUyMWQw NjAzNjhmOWFhOWYwMzg2NmZjNzcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALucnFP0Ai3Mcv7Nrjr2OtbwGyKXi7VlZpe+TsfBjACC7f2yNIJvKOql4c5T IYlLy850wE+mq8jt6eCiaye+Ps11rvwVBbS3GkpDUPVJsRC/ar7pkawjumgRyCdv ogUoYuVholOOXZeR7YZ5BamhwF3IbTpzMZc8r5n2Byc7ncym4c522NPxR9bXDmUs L0DN2Z1wQicNyqoAwJZwasMxYIiFjOjKD8G1HTxBUzUfDnVEF2jIumd3ZkEGT/2i 9U1Om1DTyrpYsWVET6XUXAbU4ouhRZ8r7iRdBhkwpBACM33n2sUB3nhPPSZaFSjV Bj7+UJgRxp9fSuFWC4N5oV2oDOcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQt7zkl VKzAs/iHK5nzqxIIXU7J6TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NTc1ZTMwYzgtMmVhNS00ZTk3LTg3MmItNmFmMGIzZTgzMThlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DZA MA0GCSqGSIb3DQEBCwUAA4IBAQCVpgAq2rPu/hOAbrvNKN8BqnF0bIAdzy2B6i2s EkYGEdQ2ac9CLsfomrdAJKFiohBoyWm9IEH7pHKUhbd4TtJlN/EUNra8aDfhPZrL cye00+K+cUdiUimX6/tUChYZW5LFbf4UT61A8bqijkFC/Y5+qzojI43HOhmk5Lyi bPjVoftDexgpoLpQzzg37kJK8nBqi8grGwFPTNCcvhL2OTTyFaVQB1JVIf2o+zIQ AdigmKjUMWYfzxm1/zVWgKHXj9ywxTXNdzGBMdlsD/oaVBuRRNJBI9ecTDZJrA19 vvkSX+5oHhDiM50SHxNA5ryZB3MpQJG0T5kQiT7L4AyIfviJ -----END CERTIFICATE-----Generated at Mon Dec 15 19:54:06 2025 by rpki-client