This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa File: 0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json) Hash identifier: Nk4dUZSb+ew9n/DqmDup7HwbAC+m+DvOvA7NKZ/j3ms= Subject key identifier: EE:03:46:83:75:8D:88:A3:C6:C5:16:46:15:C7:EE:81:89:82:4D:B5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2232381FA19C67D9E66DA7FCDABB8DE7F45F8604 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa Signing time: Tue 25 Nov 2025 20:00:47 +0000 ROA not before: Tue 25 Nov 2025 20:00:47 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 178.236.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:32:38:1f:a1:9c:67:d9:e6:6d:a7:fc:da:bb:8d:e7:f4:5f:86:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 25 20:00:47 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=de009ce5edaf892f6ab727b385e36b404f07e1caebce733d17b5efeda70fc8dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:c2:1d:a5:b2:66:42:76:32:93:1a:3e:18: df:08:96:7e:ee:08:c9:ed:55:c1:01:62:3f:22:ff: ef:ac:f3:be:f7:e0:7e:12:6f:6e:ce:4d:fb:28:0e: d6:54:f3:0f:20:80:0e:90:2f:da:cc:36:31:4f:c8: 03:f9:e1:a1:b0:71:12:bc:98:51:33:a5:ce:48:77: 0e:d7:8d:8d:c4:8c:72:5c:c6:e7:ad:e9:e3:cd:33: 4e:c8:3b:f0:06:78:39:2a:2c:f9:9c:3a:1e:38:af: 3e:79:1d:30:fa:7d:3b:dd:1a:54:6c:08:b3:4c:c4: 9b:70:b5:f5:18:b7:4c:80:52:01:df:26:f9:a5:79: dc:28:25:c0:8e:57:27:57:23:f7:cd:3f:c7:6e:b8: 1f:95:9d:e5:d5:0e:89:34:78:c3:0c:4b:25:69:37: ca:c7:6e:58:26:ef:f5:b7:11:ea:23:c3:64:1b:fb: 62:e6:90:43:57:79:b9:d6:4d:d8:78:e3:4a:b0:28: c9:e4:de:c5:61:85:32:34:89:da:68:9f:8d:19:60: 2f:79:d3:58:fc:09:4d:ed:3b:c1:bc:74:42:e4:0a: 99:7a:35:28:db:e1:65:f3:34:d8:5d:1b:07:cc:eb: 5e:98:54:14:51:d8:c9:25:e7:51:94:59:43:7a:49: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:03:46:83:75:8D:88:A3:C6:C5:16:46:15:C7:EE:81:89:82:4D:B5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.0.0/20 Signature Algorithm: sha256WithRSAEncryption 93:0e:92:a0:66:97:3a:97:f8:20:df:02:52:07:78:59:52:71: 97:59:d7:b9:8d:37:77:c2:f5:ec:c7:47:0c:cd:75:4d:71:d7: a3:ac:77:c4:96:fc:78:24:2c:7e:34:23:b3:a8:2b:d4:48:f9: 1a:c2:d0:84:89:c0:f9:4e:44:2c:1d:3a:76:d0:1f:21:b9:02: 98:43:53:21:ae:29:5e:1c:55:e5:ee:93:71:d9:03:49:55:ed: e6:55:b3:17:d5:8d:17:b9:4c:6a:18:0b:2c:8e:45:4f:b0:cc: 88:d8:95:28:78:a1:fe:a8:2b:1e:45:91:c9:e1:48:fe:0c:40: 65:3a:06:d4:c2:59:dc:1f:52:18:42:e1:2a:a0:66:d2:07:7a: 43:89:01:2a:b0:70:72:f8:8e:a3:78:73:2a:32:55:09:2c:58: 03:b6:c7:9a:ab:c0:1a:13:bb:c9:9c:6c:18:29:6e:c0:f7:c9: 04:14:fb:74:ee:77:c4:ec:aa:a4:38:23:8c:6d:22:5e:ac:d0: 22:1c:69:95:a5:8a:43:fc:12:67:9a:91:85:31:d1:ea:5a:7f: 4f:03:8b:30:16:13:27:dc:5a:9c:69:24:79:df:0b:30:ef:5f: 21:07:f6:1d:d9:84:78:0a:c5:36:8e:af:f9:3f:d0:29:f8:37: 54:7f:9c:15 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUIjI4H6GcZ9nmbaf82ruN5/RfhgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjUyMDAwNDdaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQGRlMDA5Y2U1ZWRhZjg5MmY2YWI3MjdiMzg1ZTM2YjQwNGYwN2UxY2FlYmNl NzMzZDE3YjVlZmVkYTcwZmM4ZGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIgJwh2lsmZCdjKTGj4Y3wiWfu4Iye1VwQFiPyL/76zzvvfgfhJvbs5N+ygO 1lTzDyCADpAv2sw2MU/IA/nhobBxEryYUTOlzkh3DteNjcSMclzG563p480zTsg7 8AZ4OSos+Zw6HjivPnkdMPp9O90aVGwIs0zEm3C19Ri3TIBSAd8m+aV53CglwI5X J1cj980/x264H5Wd5dUOiTR4wwxLJWk3ysduWCbv9bcR6iPDZBv7YuaQQ1d5udZN 2HjjSrAoyeTexWGFMjSJ2mifjRlgL3nTWPwJTe07wbx0QuQKmXo1KNvhZfM02F0b B8zrXphUFFHYySXnUZRZQ3pJnhMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTuA0aD dY2Io8bFFkYVx+6BiYJNtTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MDk5MmM4ZjMtOTFiOC00ODNlLTgyYTMtM2M1YzljMWE5ZTg0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLLsADAN BgkqhkiG9w0BAQsFAAOCAQEAkw6SoGaXOpf4IN8CUgd4WVJxl1nXuY03d8L17MdH DM11TXHXo6x3xJb8eCQsfjQjs6gr1Ej5GsLQhInA+U5ELB06dtAfIbkCmENTIa4p XhxV5e6TcdkDSVXt5lWzF9WNF7lMahgLLI5FT7DMiNiVKHih/qgrHkWRyeFI/gxA ZToG1MJZ3B9SGELhKqBm0gd6Q4kBKrBwcviOo3hzKjJVCSxYA7bHmqvAGhO7yZxs GCluwPfJBBT7dO53xOyqpDgjjG0iXqzQIhxplaWKQ/wSZ5qRhTHR6lp/TwOLMBYT J9xanGkked8LMO9fIQf2HdmEeArFNo6v+T/QKfg3VH+cFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:02 2025 by rpki-client