This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa File: f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa (raw, json) Hash identifier: VCvdJ5VQAnrUgjECNi4grodJpYyQ8rI2UOdRMX9GYsQ= Subject key identifier: 7F:DE:9E:36:74:76:CC:DD:A8:D6:0F:6E:D8:F4:BD:61:1A:ED:66:F6 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7CFABEA82C3849CA79DA938A2AB7EAE02C30CB56 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa Signing time: Wed 10 Dec 2025 06:01:01 +0000 ROA not before: Wed 10 Dec 2025 06:01:01 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d072:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fa:be:a8:2c:38:49:ca:79:da:93:8a:2a:b7:ea:e0:2c:30:cb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:01:01 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=be39ed95f530bfa4b52d7cf671eab5c77a9d24c4eb49142bf0b425032181e9d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:4b:ad:fd:7c:6c:5a:b6:c6:bd:50:20:56: 6f:56:af:a7:73:b4:ea:30:70:cd:11:2a:eb:55:92: cc:86:76:ab:e3:ea:c4:39:b8:97:d7:17:bd:5c:d4: 40:58:70:e3:1d:41:0b:70:64:e4:e7:f6:3b:df:8b: e3:05:d7:9b:f2:3c:3e:29:69:ca:10:2e:8f:59:c8: 85:3b:fb:1b:56:36:a1:4a:8e:fe:1a:89:64:66:32: 93:f4:4f:f2:ed:fb:7d:0d:6b:1e:7a:74:ec:50:30: 3c:31:bc:93:67:ee:6b:2a:d0:c5:e8:21:86:e0:bf: 27:36:e3:55:9e:52:5a:0c:4f:9e:b0:66:11:87:b4: 10:56:04:e0:43:75:12:15:99:c1:2c:46:d9:39:cc: 51:8d:e1:2f:ec:11:5d:53:18:e9:49:d1:40:d9:55: 2b:0e:7b:fe:74:f0:93:d7:a7:3b:5a:ee:9c:44:72: ac:27:cd:fe:fd:67:f7:56:3f:24:70:2a:2c:52:1b: 2f:bb:a1:be:60:05:b4:88:33:49:ae:8d:ac:6f:32: 71:43:25:12:8a:ec:1d:d1:ed:4e:2b:c0:ed:7c:94: c8:8e:c0:05:ce:00:a3:62:4e:64:10:78:7c:3b:b1: b0:a4:76:09:32:e5:cf:9a:0e:65:88:3a:11:5f:0c: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DE:9E:36:74:76:CC:DD:A8:D6:0F:6E:D8:F4:BD:61:1A:ED:66:F6 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d072:5080::/48 Signature Algorithm: sha256WithRSAEncryption 33:57:32:15:5d:4b:61:d3:31:3a:3d:ff:3a:a8:03:0a:6e:3a: aa:fb:68:a8:58:7f:b1:db:7c:bc:0c:c5:98:fe:b7:b2:0f:20: e7:6d:4c:26:5c:f7:53:01:39:88:0a:39:44:25:e0:bf:38:3e: 7b:8f:96:32:aa:1c:db:95:37:9e:31:49:c1:5d:ba:a6:14:01: 00:cf:ad:9e:1f:cc:97:4a:85:05:e5:c0:47:ea:08:4a:a4:df: 73:4e:97:39:c4:72:7c:71:62:c7:5d:2f:e4:bd:58:be:67:68: 67:c4:dd:45:ba:f8:9a:00:fc:94:8d:e6:79:a1:62:b2:ee:21: a2:69:c4:49:05:c5:7e:bc:9c:4b:ca:a8:5d:36:18:f6:9f:e9: 8a:94:c7:b2:21:13:ac:a4:05:ef:27:ed:c3:b8:a0:a8:ad:f1: 9a:b4:c6:0d:9b:1f:25:3a:64:de:37:4a:fd:31:71:10:af:11: df:3b:d4:fc:fc:ea:bb:00:9d:af:54:ef:bf:6f:a8:c4:74:eb: 8f:82:c7:5d:de:74:47:de:58:1c:5c:76:ca:b0:73:cf:f8:6c: ed:a3:75:0f:6f:91:25:3e:a8:69:20:76:1b:30:23:6a:57:47: f7:b6:80:fc:ff:8f:69:a4:ac:88:f1:06:9c:0e:e1:eb:89:f7: fd:3e:b3:35 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUfPq+qCw4Scp52pOKKrfq4Cwwy1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAxMDFaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGJlMzllZDk1ZjUzMGJmYTRiNTJkN2NmNjcxZWFiNWM3N2E5ZDI0YzRlYjQ5 MTQyYmYwYjQyNTAzMjE4MWU5ZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHpS639fGxatsa9UCBWb1avp3O06jBwzREq61WSzIZ2q+PqxDm4l9cXvVzU QFhw4x1BC3Bk5Of2O9+L4wXXm/I8PilpyhAuj1nIhTv7G1Y2oUqO/hqJZGYyk/RP 8u37fQ1rHnp07FAwPDG8k2fuayrQxeghhuC/JzbjVZ5SWgxPnrBmEYe0EFYE4EN1 EhWZwSxG2TnMUY3hL+wRXVMY6UnRQNlVKw57/nTwk9enO1runERyrCfN/v1n91Y/ JHAqLFIbL7uhvmAFtIgzSa6NrG8ycUMlEorsHdHtTivA7XyUyI7ABc4Ao2JOZBB4 fDuxsKR2CTLlz5oOZYg6EV8MYl0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR/3p42 dHbM3ajWD27Y9L1hGu1m9jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZjE5NTFiZGEtNTljZC00YjExLWI3YTEtMTliMWY1ZDMyMTE2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJQ gDANBgkqhkiG9w0BAQsFAAOCAQEAM1cyFV1LYdMxOj3/OqgDCm46qvtoqFh/sdt8 vAzFmP63sg8g521MJlz3UwE5iAo5RCXgvzg+e4+WMqoc25U3njFJwV26phQBAM+t nh/Ml0qFBeXAR+oISqTfc06XOcRyfHFix10v5L1YvmdoZ8TdRbr4mgD8lI3meaFi su4homnESQXFfrycS8qoXTYY9p/pipTHsiETrKQF7yftw7igqK3xmrTGDZsfJTpk 3jdK/TFxEK8R3zvU/PzquwCdr1Tvv2+oxHTrj4LHXd50R95YHFx2yrBzz/hs7aN1 D2+RJT6oaSB2GzAjaldH97aA/P+PaaSsiPEGnA7h64n3/T6zNQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:24:10 2025 by rpki-client