This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa File: ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa (raw, json) Hash identifier: qCFToM8JcZsOnbEwSEIfo39QSZR5Rw/ZKvdR1Iovs1Q= Subject key identifier: D3:A4:54:39:52:1C:A6:3A:EB:39:01:B5:93:D5:15:C9:72:16:56:BA Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 3C85D1DAAA896F6BCD22D801758C8CA04EA6A548 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa Signing time: Wed 10 Dec 2025 05:31:23 +0000 ROA not before: Wed 10 Dec 2025 05:31:23 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2a05:d06f:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:85:d1:da:aa:89:6f:6b:cd:22:d8:01:75:8c:8c:a0:4e:a6:a5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 05:31:23 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=c7b3e922c1282b17e83db3174f670c119a34cd5667dba7b5061e66002904e676, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:18:32:6c:75:4a:02:19:7a:80:4a:b9:43: 3d:4c:68:8c:66:73:ad:d3:78:57:5f:a1:4f:91:5c: e7:c4:55:bd:7c:c2:11:30:d0:41:a7:34:05:01:14: 83:59:cf:d5:8a:62:17:41:d8:5c:4c:f5:8d:cf:32: b7:18:ff:62:b4:9d:08:97:aa:c0:cd:9f:c0:2a:9d: 08:63:3a:40:09:3b:32:13:af:ce:0a:06:84:1f:9f: 52:75:40:0a:33:90:51:d6:f4:c9:ca:34:12:d5:fc: 86:fe:6c:01:da:97:57:87:d9:f9:16:d3:5a:cf:b0: 3a:8f:1b:da:16:a8:83:31:4c:ad:e1:df:80:81:c8: 4d:ce:37:eb:fb:ad:a4:b3:3c:d3:9c:01:59:14:8b: c4:df:d4:a6:bd:a9:14:a5:22:52:d1:45:cd:af:3c: 7f:2e:bf:b2:16:63:c3:4a:8c:e5:1c:99:ba:91:2e: c8:f1:b9:c7:fc:6d:ea:02:7e:e3:42:f5:54:5e:3c: 06:c2:24:ed:63:47:1b:6b:92:cb:b9:d4:e1:50:a1: 48:6d:ff:e3:9b:b8:85:91:e7:b4:04:2b:3f:1a:3e: bf:44:23:a2:da:95:ff:a4:8e:b6:67:5b:22:c4:65: 90:6b:58:a8:16:90:d0:44:40:ca:2f:37:4e:79:db: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A4:54:39:52:1C:A6:3A:EB:39:01:B5:93:D5:15:C9:72:16:56:BA X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06f:4000::/40 Signature Algorithm: sha256WithRSAEncryption b2:bb:73:36:b4:1c:36:1e:0a:f7:49:dc:30:13:de:6a:91:d1: 69:13:92:52:f4:44:a2:20:f7:9e:4e:23:28:48:d3:06:98:f3: bf:fc:d2:52:6b:df:e3:f5:a5:e4:1d:dc:99:2a:39:96:56:99: ce:e4:af:42:ab:49:1e:4d:b6:eb:bd:1d:6b:29:0c:72:c0:d2: cd:0d:ef:d9:12:b5:fb:79:85:9b:74:b5:b3:50:69:87:9d:1a: be:bb:0d:0c:69:83:ac:08:9c:95:4e:69:d0:f2:66:51:7c:af: 83:d8:09:1f:30:8f:e2:5a:50:56:18:6f:9a:19:56:11:57:a9: 41:d8:24:94:96:b0:60:a6:ea:e0:cf:67:28:7b:cc:47:7c:b6: af:ed:70:44:63:fa:4e:8c:d8:e0:79:47:f5:7e:f4:d8:6b:25: ba:c8:67:52:3c:aa:cf:40:21:41:e7:eb:38:ce:0e:db:5e:48: fb:61:b6:88:3c:ed:8c:00:67:7d:c7:8f:8d:a9:81:e0:e8:d6: 5d:43:4c:11:c8:14:08:70:68:8f:7b:ce:96:59:66:09:f9:e5: 07:ea:18:a2:11:4c:4a:f1:6a:a0:ca:bc:d0:28:23:54:ca:e6: 8e:4f:37:1a:a3:b0:d4:d6:8b:76:da:83:7f:e6:80:2c:3b:bb: 5e:c1:e4:41 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUPIXR2qqJb2vNItgBdYyMoE6mpUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNTMxMjNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGM3YjNlOTIyYzEyODJiMTdlODNkYjMxNzRmNjcwYzExOWEzNGNkNTY2N2Ri YTdiNTA2MWU2NjAwMjkwNGU2NzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJ5GDJsdUoCGXqASrlDPUxojGZzrdN4V1+hT5Fc58RVvXzCETDQQac0BQEU g1nP1YpiF0HYXEz1jc8ytxj/YrSdCJeqwM2fwCqdCGM6QAk7MhOvzgoGhB+fUnVA CjOQUdb0yco0EtX8hv5sAdqXV4fZ+RbTWs+wOo8b2haogzFMreHfgIHITc436/ut pLM805wBWRSLxN/Upr2pFKUiUtFFza88fy6/shZjw0qM5RyZupEuyPG5x/xt6gJ+ 40L1VF48BsIk7WNHG2uSy7nU4VChSG3/45u4hZHntAQrPxo+v0QjotqV/6SOtmdb IsRlkGtYqBaQ0ERAyi83Tnnbfd8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTTpFQ5 UhymOus5AbWT1RXJchZWujAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZmZkYzNkYTEtMmVjNy00MTFlLTk1NTAtYjdjOTU2ZmI0NmRiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G9A MA0GCSqGSIb3DQEBCwUAA4IBAQCyu3M2tBw2Hgr3SdwwE95qkdFpE5JS9ESiIPee TiMoSNMGmPO//NJSa9/j9aXkHdyZKjmWVpnO5K9Cq0keTbbrvR1rKQxywNLNDe/Z ErX7eYWbdLWzUGmHnRq+uw0MaYOsCJyVTmnQ8mZRfK+D2AkfMI/iWlBWGG+aGVYR V6lB2CSUlrBgpurgz2coe8xHfLav7XBEY/pOjNjgeUf1fvTYayW6yGdSPKrPQCFB 5+s4zg7bXkj7YbaIPO2MAGd9x4+NqYHg6NZdQ0wRyBQIcGiPe86WWWYJ+eUH6hii EUxK8WqgyrzQKCNUyuaOTzcao7DU1ot22oN/5oAsO7teweRB -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:45 2025 by rpki-client