This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec4786d-f73f-4e64-99a3-0377bdf5c566.roa File: fec4786d-f73f-4e64-99a3-0377bdf5c566.roa (raw, json) Hash identifier: DbN/se+df3obK2DjoUmvSidIBsH7eZNKsjtk+PKqu+M= Subject key identifier: E8:8A:05:D8:95:F4:8C:3B:56:64:DE:9D:DC:73:3F:10:D4:5D:E1:0E Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 501813D2E32D089D0379C315E83A59DBFF080C07 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec4786d-f73f-4e64-99a3-0377bdf5c566.roa Signing time: Wed 10 Dec 2025 05:40:09 +0000 ROA not before: Wed 10 Dec 2025 05:40:09 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d02e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:18:13:d2:e3:2d:08:9d:03:79:c3:15:e8:3a:59:db:ff:08:0c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:40:09 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2f0abd8f122b3f6c5e4e85713c2ad7d541e85ce7cc3b4175f7acb5fa22c85359, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:ba:ef:d2:c1:15:46:8d:9f:b4:64:03:f6: b1:10:e7:8d:56:2e:a7:57:60:00:cf:7a:11:af:be: e3:5b:4f:bc:e3:39:7f:13:0a:50:8d:f2:b9:de:f0: 35:5f:9a:a9:b9:ee:9d:9c:76:90:3f:1a:57:ad:28: 2e:a2:00:8a:e2:a0:21:26:0e:10:c2:4f:71:d1:3c: aa:91:1b:ea:b1:5f:72:cc:66:0b:67:c7:76:f5:9c: da:5a:8f:75:a6:e6:95:95:5a:49:0e:40:6c:da:43: 59:74:e6:3c:3b:d3:ca:61:c3:1d:b2:47:8e:9b:be: 6f:74:4c:94:2d:e4:56:26:82:19:55:75:49:e2:dd: 4c:02:be:86:3d:a1:ed:ea:1b:2f:b1:10:bc:43:0d: 35:c5:1f:cc:73:8c:7f:d0:6e:2f:9f:a0:a1:05:77: e2:71:c3:04:e8:51:84:2c:48:1f:83:1f:1b:2e:c7: b3:d8:c5:00:77:76:63:b5:ae:12:16:93:65:c0:ab: eb:31:50:a0:3b:bd:f2:99:0d:99:ce:af:d4:92:75: 67:1b:b9:94:df:9d:48:4f:77:e8:4e:96:ed:b1:da: a6:dd:f7:f8:20:01:4b:88:7e:cb:27:87:6d:5f:89: d8:dd:94:c6:26:82:74:44:74:c3:6f:d5:06:74:f1: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8A:05:D8:95:F4:8C:3B:56:64:DE:9D:DC:73:3F:10:D4:5D:E1:0E X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fec4786d-f73f-4e64-99a3-0377bdf5c566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d02e::/36 Signature Algorithm: sha256WithRSAEncryption 66:a0:5e:13:b1:75:33:ec:12:b8:2a:51:ea:20:51:54:8f:91: 82:84:2d:c5:ee:7b:24:c4:a9:0b:fe:d2:9a:1b:3d:01:aa:81: e5:0e:d1:f1:a7:b7:ee:63:c2:b6:5e:e6:14:52:a3:03:5a:1b: fe:0d:d0:6f:1f:58:6b:13:3a:8f:87:e7:2f:ed:a9:00:c7:11: 5f:df:fb:56:53:06:ca:df:5b:33:27:de:de:a3:5f:8c:50:5e: 5a:34:4e:dc:32:ba:c9:7c:d7:30:39:a1:09:06:4e:5d:59:e8: f9:99:86:6d:2c:ab:09:e9:0c:22:af:e5:a5:fd:78:4d:11:90: fd:9b:b8:88:5c:de:1a:bb:18:53:4b:fb:55:9b:00:67:96:f0: 58:56:f8:12:4d:a5:cb:76:b9:f6:1b:36:52:6f:14:45:dc:22: 2f:c3:cb:fc:7a:73:1a:3c:ff:ba:2c:98:0b:73:8b:65:d3:4e: 7a:01:74:9a:e1:ed:10:eb:7b:18:ec:83:39:2e:17:63:44:46: 02:a6:7d:5f:b9:16:bf:68:73:ff:32:c9:5e:ba:53:2b:27:f1: 2e:ac:a9:0b:97:45:66:02:ea:c1:21:e3:1d:3f:fa:d4:02:b7: df:85:a6:23:6f:8d:2a:66:c1:dc:1d:ce:61:37:69:2b:bd:98: 04:15:d7:99 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUUBgT0uMtCJ0DecMV6DpZ2/8IDAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTQwMDlaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDJmMGFiZDhmMTIyYjNmNmM1ZTRlODU3MTNjMmFkN2Q1NDFlODVjZTdjYzNi NDE3NWY3YWNiNWZhMjJjODUzNTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKw1uu/SwRVGjZ+0ZAP2sRDnjVYup1dgAM96Ea++41tPvOM5fxMKUI3yud7w NV+aqbnunZx2kD8aV60oLqIAiuKgISYOEMJPcdE8qpEb6rFfcsxmC2fHdvWc2lqP dabmlZVaSQ5AbNpDWXTmPDvTymHDHbJHjpu+b3RMlC3kViaCGVV1SeLdTAK+hj2h 7eobL7EQvEMNNcUfzHOMf9BuL5+goQV34nHDBOhRhCxIH4MfGy7Hs9jFAHd2Y7Wu EhaTZcCr6zFQoDu98pkNmc6v1JJ1Zxu5lN+dSE936E6W7bHapt33+CABS4h+yyeH bV+J2N2UxiaCdER0w2/VBnTxVTECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBToigXY lfSMO1Zk3p3ccz8Q1F3hDjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmVjNDc4NmQtZjczZi00ZTY0LTk5YTMtMDM3N2JkZjVjNTY2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0C4A MA0GCSqGSIb3DQEBCwUAA4IBAQBmoF4TsXUz7BK4KlHqIFFUj5GChC3F7nskxKkL /tKaGz0BqoHlDtHxp7fuY8K2XuYUUqMDWhv+DdBvH1hrEzqPh+cv7akAxxFf3/tW UwbK31szJ97eo1+MUF5aNE7cMrrJfNcwOaEJBk5dWej5mYZtLKsJ6Qwir+Wl/XhN EZD9m7iIXN4auxhTS/tVmwBnlvBYVvgSTaXLdrn2GzZSbxRF3CIvw8v8enMaPP+6 LJgLc4tl0056AXSa4e0Q63sY7IM5LhdjREYCpn1fuRa/aHP/MsleulMrJ/EurKkL l0VmAurBIeMdP/rUArffhaYjb40qZsHcHc5hN2krvZgEFdeZ -----END CERTIFICATE-----Generated at Mon Dec 15 19:47:34 2025 by rpki-client