This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa File: 049fd671-de95-4496-9712-c56affcb2b27.roa (raw, json) Hash identifier: 2A1sv7ml6lZg1C8YxaHkc2Y20FMovBEThZ4ABp6aW2k= Subject key identifier: 61:EA:68:42:AD:6E:37:36:DF:C4:6E:43:1A:0F:A2:3F:03:30:C1:F4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1CA69EE7A8BFF2C7620E7BBE09660C1DBE9771ED Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa Signing time: Tue 02 Dec 2025 01:50:49 +0000 ROA not before: Tue 02 Dec 2025 01:50:49 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 176.34.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a6:9e:e7:a8:bf:f2:c7:62:0e:7b:be:09:66:0c:1d:be:97:71:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:50:49 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=b1d05df6f52f64214698c2320a402742de16f55409b6877d498745daa743f7e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:fd:1c:28:f7:aa:23:ef:66:ea:d5:bf:ca: d1:ca:c4:10:61:db:e1:08:88:be:37:f8:7e:4d:c3: f1:a9:94:65:86:a0:78:af:45:a0:d8:28:e1:d0:58: 82:7c:ea:80:61:71:52:60:7b:2e:fd:27:32:ed:09: 37:0e:d2:fa:8e:37:ef:37:e8:92:8e:04:b2:73:bc: 6b:e7:63:5f:0b:c6:e8:1b:9c:12:3d:50:4e:92:b1: e7:4a:aa:26:22:aa:ac:31:e2:6e:e8:7e:a0:2a:91: e7:36:ea:14:57:02:42:45:c3:04:82:fd:29:46:53: e5:4b:9f:c1:eb:f0:20:e0:68:9d:61:5d:b7:22:1f: 67:dd:f0:c8:52:45:fe:4f:c0:e4:e6:da:0c:20:33: 20:c0:2f:44:58:9d:e7:2b:de:c2:5d:70:55:7a:75: 09:e5:3b:4b:56:74:c5:18:4b:7d:3d:40:97:e2:17: 39:b6:c4:2b:5a:29:bb:f3:c5:fc:23:9f:0f:b3:1c: 76:12:a7:0d:55:df:76:76:9f:61:87:d6:f2:94:44: 30:31:b7:6e:34:53:fb:6d:78:c3:be:29:09:1d:c6: b5:89:8c:c7:93:75:07:34:10:dc:16:a7:4c:32:51: b4:bd:53:f4:ca:60:53:9b:f6:79:70:b2:16:b5:d5: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EA:68:42:AD:6E:37:36:DF:C4:6E:43:1A:0F:A2:3F:03:30:C1:F4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/049fd671-de95-4496-9712-c56affcb2b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.34.24.0/21 Signature Algorithm: sha256WithRSAEncryption 99:6e:02:21:4e:b1:c0:f3:09:e1:5c:38:93:a5:1b:a5:ae:e8: a3:68:49:2e:53:fa:19:9b:ac:03:b8:51:f8:d3:e2:7f:49:13: 24:d9:74:60:20:b6:16:b4:a2:b8:f0:cd:71:09:32:f6:97:df: f1:0f:27:e0:9a:af:f0:af:75:a1:8e:0f:df:5f:da:b6:b4:bc: eb:d3:a6:d4:9f:47:76:a8:51:3d:7e:5e:94:85:dd:cf:20:e3: 70:11:73:db:43:a7:c3:89:a7:20:6d:ac:8b:9d:51:e7:5a:d5: b3:2c:bc:b6:90:b4:ec:16:1e:56:f8:c4:ff:c0:32:bb:f7:7e: 82:42:e7:08:54:1e:35:1e:22:25:b3:06:94:b8:ba:0e:ca:35: 32:34:e2:b7:89:e6:75:80:1c:63:f0:2f:47:51:69:b5:07:b0: 78:e9:48:e4:fc:6d:42:3b:30:78:3a:62:41:76:b8:73:51:8a: 0b:30:3e:4a:91:95:73:b4:e9:34:ba:1e:f5:5e:4f:f6:f8:b1: 9e:a3:8e:05:98:cb:b8:1f:06:b7:97:3e:31:34:b2:ad:0e:6f: 83:49:5b:8e:76:79:68:b1:d1:05:b9:14:e9:63:65:a8:c0:12: bf:66:75:71:f5:17:ec:d1:1e:7a:5c:52:a6:00:b6:4f:63:fa: b3:c8:b2:01 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUHKae56i/8sdiDnu+CWYMHb6Xce0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUwNDlaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGIxZDA1ZGY2ZjUyZjY0MjE0Njk4YzIzMjBhNDAyNzQyZGUxNmY1NTQwOWI2 ODc3ZDQ5ODc0NWRhYTc0M2Y3ZTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ35/Rwo96oj72bq1b/K0crEEGHb4QiIvjf4fk3D8amUZYageK9FoNgo4dBY gnzqgGFxUmB7Lv0nMu0JNw7S+o437zfoko4EsnO8a+djXwvG6BucEj1QTpKx50qq JiKqrDHibuh+oCqR5zbqFFcCQkXDBIL9KUZT5UufwevwIOBonWFdtyIfZ93wyFJF /k/A5ObaDCAzIMAvRFid5yvewl1wVXp1CeU7S1Z0xRhLfT1Al+IXObbEK1opu/PF /COfD7McdhKnDVXfdnafYYfW8pREMDG3bjRT+214w74pCR3GtYmMx5N1BzQQ3Ban TDJRtL1T9MpgU5v2eXCyFrXVcFsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRh6mhC rW43Nt/EbkMaD6I/AzDB9DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDQ5ZmQ2NzEtZGU5NS00NDk2LTk3MTItYzU2YWZmY2IyYjI3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AiGDAN BgkqhkiG9w0BAQsFAAOCAQEAmW4CIU6xwPMJ4Vw4k6Ubpa7oo2hJLlP6GZusA7hR +NPif0kTJNl0YCC2FrSiuPDNcQky9pff8Q8n4Jqv8K91oY4P31/atrS869Om1J9H dqhRPX5elIXdzyDjcBFz20Onw4mnIG2si51R51rVsyy8tpC07BYeVvjE/8Ayu/d+ gkLnCFQeNR4iJbMGlLi6Dso1MjTit4nmdYAcY/AvR1FptQeweOlI5PxtQjsweDpi QXa4c1GKCzA+SpGVc7TpNLoe9V5P9vixnqOOBZjLuB8Gt5c+MTSyrQ5vg0lbjnZ5 aLHRBbkU6WNlqMASv2Z1cfUX7NEeelxSpgC2T2P6s8iyAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:07 2025 by rpki-client