This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa File: 1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa (raw, json) Hash identifier: QJpkxtnaeMGI7riU1U3hZZCEnCLUprFVhy1SqPu6t/s= Subject key identifier: C8:2A:90:30:DB:3C:A5:90:2B:C8:D9:3C:A6:7F:EF:EF:45:5D:88:19 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 339BB4D7CE188CB8072E44C8767399A5469C117A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa Signing time: Tue 02 Dec 2025 01:50:45 +0000 ROA not before: Tue 02 Dec 2025 01:50:45 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 176.34.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9b:b4:d7:ce:18:8c:b8:07:2e:44:c8:76:73:99:a5:46:9c:11:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:50:45 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=bd4d1d894afdf63aefa96ec54887dcc9981b7c784d823d09dbd7cb1728e9bb72, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:69:13:e2:6d:ec:56:9c:09:ec:a7:2e:9a: 0a:a1:a6:87:00:f1:d5:e2:6d:58:17:fe:fb:d8:75: 09:30:6d:3e:86:9c:33:0f:9a:02:51:89:80:f0:a9: 90:92:5d:e4:d9:f7:b4:69:52:76:43:d5:ba:ee:89: b9:ee:35:d7:38:d9:4b:92:85:95:b4:1a:47:dc:30: 1b:29:dd:04:8f:88:08:b1:ac:18:7c:54:9f:1b:34: 15:bf:3c:50:95:58:ca:da:6e:d2:f2:9d:d9:d4:6c: a3:51:93:f8:b2:e0:7b:5c:2b:fe:dd:9a:cb:7b:29: 64:2d:bc:4d:bd:1c:18:3e:2e:81:8e:f1:97:b8:b6: 40:1b:05:a0:34:84:c1:b9:2b:b4:d8:62:2f:bf:7b: 75:a3:9f:b6:f9:57:70:56:13:56:19:4a:8a:c2:c2: 9f:a2:5a:53:bb:fb:17:07:ba:9a:38:cf:83:cd:89: 9c:db:78:a3:2c:26:23:00:27:49:5a:56:26:50:72: 17:0a:ad:bf:07:f0:1f:70:cf:b6:9d:b9:1f:f6:72: 65:db:19:b6:aa:8f:78:f9:a3:82:27:04:98:47:e8: 6d:23:14:a5:a7:e2:4b:bd:b6:32:36:6d:7b:86:77: cb:5d:50:25:58:d6:c0:91:b3:3f:d6:32:d3:86:0d: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2A:90:30:DB:3C:A5:90:2B:C8:D9:3C:A6:7F:EF:EF:45:5D:88:19 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.34.128.0/17 Signature Algorithm: sha256WithRSAEncryption c4:73:82:61:aa:48:68:73:c5:d1:be:67:cc:61:0c:95:32:f6: 2d:47:38:7b:61:5f:b5:3e:d7:67:ce:29:24:a4:50:1a:ef:1a: a5:8b:56:8c:6b:7d:b6:4d:ce:e9:bf:5c:35:a1:78:55:98:c9: 0d:85:ad:08:a8:2e:5d:01:ca:a0:f3:f2:c6:00:60:d6:14:91: 3f:d2:19:65:4f:5a:ba:73:4f:26:da:7b:77:9d:0a:b3:9c:7f: c3:23:1d:35:32:11:04:ba:0e:23:9a:ce:e3:b4:53:6b:ab:0c: 40:a0:e4:a5:c0:7c:56:d5:f4:b0:64:ee:49:52:be:6b:40:3d: e6:4b:98:a9:3a:45:b7:b8:47:9e:7b:9b:d5:95:5c:35:32:35: 67:e8:1f:fc:2e:cf:93:28:19:f1:20:71:e3:bc:a6:52:30:fd: fd:24:88:f0:b3:46:77:ef:ce:7d:c0:01:66:39:62:86:5d:49: 11:15:5f:56:dc:6d:4e:b8:ab:33:b3:8c:ac:13:fb:2f:e0:21: 24:d8:3f:20:b6:c3:03:3d:10:46:73:d0:0b:f7:e2:ba:d6:b5: 96:61:25:9e:b3:a7:b8:72:f3:bf:48:99:bb:89:95:0b:4d:06: 00:e0:3f:48:2d:e5:4a:e9:23:d8:ab:3c:bd:51:89:b9:f8:a9: e5:25:91:fa -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUM5u0184YjLgHLkTIdnOZpUacEXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUwNDVaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGJkNGQxZDg5NGFmZGY2M2FlZmE5NmVjNTQ4ODdkY2M5OTgxYjdjNzg0ZDgy M2QwOWRiZDdjYjE3MjhlOWJiNzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYFaRPibexWnAnspy6aCqGmhwDx1eJtWBf++9h1CTBtPoacMw+aAlGJgPCp kJJd5Nn3tGlSdkPVuu6Jue411zjZS5KFlbQaR9wwGyndBI+ICLGsGHxUnxs0Fb88 UJVYytpu0vKd2dRso1GT+LLge1wr/t2ay3spZC28Tb0cGD4ugY7xl7i2QBsFoDSE wbkrtNhiL797daOftvlXcFYTVhlKisLCn6JaU7v7Fwe6mjjPg82JnNt4oywmIwAn SVpWJlByFwqtvwfwH3DPtp25H/ZyZdsZtqqPePmjgicEmEfobSMUpafiS722MjZt e4Z3y11QJVjWwJGzP9Yy04YNat0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTIKpAw 2zylkCvI2Tymf+/vRV2IGTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWM0ZDJkMTQtYWEwYS00NTZlLTkwZjQtYmRmYTIxZTY2OGY4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7AigDAN BgkqhkiG9w0BAQsFAAOCAQEAxHOCYapIaHPF0b5nzGEMlTL2LUc4e2FftT7XZ84p JKRQGu8apYtWjGt9tk3O6b9cNaF4VZjJDYWtCKguXQHKoPPyxgBg1hSRP9IZZU9a unNPJtp7d50Ks5x/wyMdNTIRBLoOI5rO47RTa6sMQKDkpcB8VtX0sGTuSVK+a0A9 5kuYqTpFt7hHnnub1ZVcNTI1Z+gf/C7PkygZ8SBx47ymUjD9/SSI8LNGd+/OfcAB Zjlihl1JERVfVtxtTrirM7OMrBP7L+AhJNg/ILbDAz0QRnPQC/fiuta1lmElnrOn uHLzv0iZu4mVC00GAOA/SC3lSukj2Ks8vVGJufip5SWR+g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:39 2025 by rpki-client