This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa File: 92652652-28d6-49c1-8ea6-f5079f374345.roa (raw, json) Hash identifier: D3plVtn8MVEOQOphxnIHVwB0FwBCtCgl3iisegJwp24= Subject key identifier: BD:D2:98:5F:A2:47:86:DE:03:01:9E:F6:C6:D7:07:44:B7:89:B5:5A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1709C57496A28F44096E9AD84428A7FE4CBB2FC8 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa Signing time: Wed 10 Dec 2025 06:01:19 +0000 ROA not before: Wed 10 Dec 2025 06:01:19 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d07f:4060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:09:c5:74:96:a2:8f:44:09:6e:9a:d8:44:28:a7:fe:4c:bb:2f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:01:19 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=70cc899265d7ad8bcd1bc4a04ab2cbbb1c307c702495922fee4604493004bca4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:f0:17:ba:22:b1:9b:77:a4:b3:3a:c7:e4: fa:05:0d:f0:e5:95:6e:da:d0:0b:9a:a8:2c:6b:cc: 6e:66:2d:3f:be:66:ee:a6:38:84:e5:d6:81:ed:0e: 73:18:6e:54:bc:2f:0a:92:ed:e1:5a:fc:7b:7b:ff: 91:20:69:5b:51:84:fd:32:5e:d4:2b:b2:64:79:c5: bc:d9:15:a8:d7:ae:29:66:ae:83:e7:69:9c:43:bb: 0d:e2:5f:35:e6:53:87:6c:0c:e4:a6:17:ff:5c:45: b9:5e:b5:d5:d2:4e:c2:c0:60:9b:12:16:ac:de:32: fb:fb:01:75:5d:e5:48:32:c2:b3:91:2b:29:44:15: dd:0b:ce:72:46:f8:59:90:6f:c1:c1:ea:4b:9f:56: 23:3d:0c:5d:13:ce:31:3b:57:97:14:ab:a5:33:dd: 5e:a5:19:c3:ff:0e:91:77:15:1e:9a:52:a3:c6:6e: 49:76:57:47:db:23:bd:0e:4e:86:e9:2e:60:d9:a8: 49:55:0f:b3:28:62:a0:59:60:b4:0d:b2:f0:13:09: 2c:60:a4:fc:ba:82:1d:1d:47:48:26:9b:3d:67:49: d7:97:1e:ef:63:42:45:d3:71:a7:a9:18:96:67:03: a2:77:e5:6c:ba:d9:e4:30:48:5b:46:b9:d4:2b:77: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:98:5F:A2:47:86:DE:03:01:9E:F6:C6:D7:07:44:B7:89:B5:5A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d07f:4060::/48 Signature Algorithm: sha256WithRSAEncryption 8c:cf:ec:8f:f3:31:ac:7d:21:62:f0:6c:15:d0:35:66:bc:c0: 9d:9e:f3:65:76:9a:6d:19:05:51:2d:2c:cd:58:77:ea:9a:a0: fb:e9:7e:c8:a9:34:11:b9:cd:fe:dc:a7:8a:02:3d:e9:c4:9c: 7a:5e:56:f9:72:f9:0f:60:5f:cb:5f:11:38:e2:9f:82:e4:af: ca:ad:b8:af:87:6e:85:7f:a2:2e:53:c1:f4:31:eb:0e:51:c3: 84:22:eb:ef:b1:1b:48:bb:55:cd:79:13:8a:73:8b:44:90:fc: d7:53:42:29:d4:15:de:37:7e:a0:fd:fb:de:c2:cb:14:00:ea: 69:6c:9e:9e:9c:ad:c3:81:01:45:42:4c:93:54:d0:35:62:a4: 70:42:a9:bd:b9:a9:57:41:e5:e3:ec:bc:56:de:6d:af:bb:ed: 79:ad:2e:11:34:7f:f9:34:c5:89:4a:c6:6b:98:c4:ac:cd:71: 0b:52:af:04:f3:38:fd:84:74:d0:0e:04:07:4b:c8:df:dd:e3: 0f:93:39:91:0c:82:df:f2:cc:e4:ac:60:98:42:4a:fe:d8:df: 1d:06:60:35:10:9c:29:1d:82:97:1f:c2:02:48:ec:06:9f:c3: 9e:cb:68:9b:d7:93:4d:8f:cb:09:cb:e9:e9:58:0d:e4:b4:37: 56:c8:07:d9 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUFwnFdJaij0QJbprYRCin/ky7L8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAxMTlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDcwY2M4OTkyNjVkN2FkOGJjZDFiYzRhMDRhYjJjYmJiMWMzMDdjNzAyNDk1 OTIyZmVlNDYwNDQ5MzAwNGJjYTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhN8Be6IrGbd6SzOsfk+gUN8OWVbtrQC5qoLGvMbmYtP75m7qY4hOXWge0O cxhuVLwvCpLt4Vr8e3v/kSBpW1GE/TJe1CuyZHnFvNkVqNeuKWaug+dpnEO7DeJf NeZTh2wM5KYX/1xFuV611dJOwsBgmxIWrN4y+/sBdV3lSDLCs5ErKUQV3QvOckb4 WZBvwcHqS59WIz0MXRPOMTtXlxSrpTPdXqUZw/8OkXcVHppSo8ZuSXZXR9sjvQ5O hukuYNmoSVUPsyhioFlgtA2y8BMJLGCk/LqCHR1HSCabPWdJ15ce72NCRdNxp6kY lmcDonflbLrZ5DBIW0a51Ct3OQ8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS90phf okeG3gMBnvbG1wdEt4m1WjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTI2NTI2NTItMjhkNi00OWMxLThlYTYtZjUwNzlmMzc0MzQ1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A YDANBgkqhkiG9w0BAQsFAAOCAQEAjM/sj/MxrH0hYvBsFdA1ZrzAnZ7zZXaabRkF US0szVh36pqg++l+yKk0EbnN/tynigI96cScel5W+XL5D2Bfy18ROOKfguSvyq24 r4duhX+iLlPB9DHrDlHDhCLr77EbSLtVzXkTinOLRJD811NCKdQV3jd+oP373sLL FADqaWyenpytw4EBRUJMk1TQNWKkcEKpvbmpV0Hl4+y8Vt5tr7vtea0uETR/+TTF iUrGa5jErM1xC1KvBPM4/YR00A4EB0vI393jD5M5kQyC3/LM5KxgmEJK/tjfHQZg NRCcKR2Clx/CAkjsBp/Dnstom9eTTY/LCcvp6VgN5LQ3VsgH2Q== -----END CERTIFICATE-----Generated at Tue Dec 16 23:15:25 2025 by rpki-client