This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa File: 27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa (raw, json) Hash identifier: goz4E0ueAlSLNH/ktax71OodaQBTkEHhFE+dXIquNK4= Subject key identifier: F9:CA:44:52:FB:42:9F:57:A8:20:CF:27:6C:1F:8A:75:D5:A5:EE:33 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7B069378BF2A761D01A90708C2BFED8AA73AF3D6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa Signing time: Sat 29 Nov 2025 03:00:24 +0000 ROA not before: Sat 29 Nov 2025 03:00:24 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.51.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:06:93:78:bf:2a:76:1d:01:a9:07:08:c2:bf:ed:8a:a7:3a:f3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:24 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=42aca831927dfcf67dd6441d0b7b6ff446512bd2827d0d786c920b0380e55a2d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:ff:0f:8b:86:5a:e4:52:07:74:69:a7:e2: 49:f6:50:68:10:b1:78:1d:4c:2e:8c:eb:a1:89:e1: 14:d8:f6:95:a1:47:1b:98:95:af:11:31:db:0d:d7: 3c:32:40:76:53:46:47:e7:50:20:74:f0:2b:3a:34: ad:93:cc:7d:b0:3c:01:cb:c3:bc:c8:1d:25:dd:8c: 9f:68:0f:33:6f:8e:e0:fe:a0:a1:b6:f5:4f:53:55: 42:a6:0f:cb:cb:18:19:b2:b2:67:07:1f:05:5c:de: 29:90:ea:92:5c:ba:9b:cf:5b:1b:90:c2:2f:2e:53: 2f:df:20:f1:b5:15:04:f3:7b:9c:14:b2:8e:ee:cf: f1:c1:63:b8:a5:c7:01:2e:29:c6:bc:4a:67:59:51: ad:6d:22:b3:3a:2e:76:dc:f9:c8:c7:68:60:b7:e0: 29:3d:1d:b0:29:51:f4:86:87:f8:3b:9d:e3:1b:15: 35:04:69:55:01:1a:57:7c:56:ad:cf:53:f5:22:e5: bb:cb:dc:37:ea:c4:38:7a:30:2f:37:c6:84:40:f4: 42:c8:b4:4e:f8:43:40:e9:16:f2:e5:b7:5a:a7:9c: 62:27:b9:4d:cb:4c:b6:a1:fd:bb:0a:a4:a0:81:8b: 44:f2:fa:76:f0:c6:f5:f6:f8:86:b5:3e:4d:fc:0d: e5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CA:44:52:FB:42:9F:57:A8:20:CF:27:6C:1F:8A:75:D5:A5:EE:33 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.51.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:83:8a:ea:eb:73:e7:05:f1:ed:45:1d:02:8b:8e:1e:3a:45: c4:a6:f9:76:80:63:cd:70:40:d5:1f:60:2a:97:b5:7c:0e:15: ab:57:31:06:1f:63:4c:da:5f:24:09:72:e1:79:1a:84:8a:52: 21:88:48:20:4f:cb:d7:f1:ae:79:17:e7:a1:c5:3c:07:0e:e3: 25:d1:06:cd:8d:dc:86:1d:2e:64:fa:e3:57:25:aa:b4:7d:a7: 8d:8f:6c:68:3a:b6:2b:a6:35:87:68:0b:cd:74:74:2e:5a:88: 9f:a2:b4:b0:96:79:46:9a:bd:94:58:da:ad:f6:81:fc:02:de: 66:fd:a2:53:aa:2c:6e:63:9d:d8:2c:80:1d:b2:7a:97:04:a0: bc:f8:4f:d1:13:56:2a:c2:ca:dc:60:91:1c:5a:5b:62:e2:a6: c2:46:b1:42:b3:fb:c7:24:7b:aa:c9:52:2e:b6:47:99:eb:f3: 74:f7:88:a1:fe:a0:9d:d0:6c:f1:7a:e1:11:2d:0f:bf:af:dc: db:70:2f:26:15:93:a5:ed:10:3e:d4:c2:7e:1d:8d:41:ae:f8: 20:b2:7f:0c:64:70:31:57:46:a7:ca:16:41:d5:1f:19:72:5b: 3e:06:cd:a6:ee:ad:54:0a:ea:26:ee:c1:f4:34:37:38:87:d3: 72:6d:9f:be -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUewaTeL8qdh0BqQcIwr/tiqc689YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMjRaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDQyYWNhODMxOTI3ZGZjZjY3ZGQ2NDQxZDBiN2I2ZmY0NDY1MTJiZDI4Mjdk MGQ3ODZjOTIwYjAzODBlNTVhMmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJji/w+LhlrkUgd0aafiSfZQaBCxeB1MLozroYnhFNj2laFHG5iVrxEx2w3X PDJAdlNGR+dQIHTwKzo0rZPMfbA8AcvDvMgdJd2Mn2gPM2+O4P6gobb1T1NVQqYP y8sYGbKyZwcfBVzeKZDqkly6m89bG5DCLy5TL98g8bUVBPN7nBSyju7P8cFjuKXH AS4pxrxKZ1lRrW0iszoudtz5yMdoYLfgKT0dsClR9IaH+Dud4xsVNQRpVQEaV3xW rc9T9SLlu8vcN+rEOHowLzfGhED0Qsi0TvhDQOkW8uW3WqecYie5TctMtqH9uwqk oIGLRPL6dvDG9fb4hrU+TfwN5VECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT5ykRS +0KfV6ggzydsH4p11aXuMzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjdkMjc0MzItYjU0Mi00YWFkLWIzYTQtZGFmMmEwYTliYjVjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4zsDAN BgkqhkiG9w0BAQsFAAOCAQEAD4OK6utz5wXx7UUdAouOHjpFxKb5doBjzXBA1R9g Kpe1fA4Vq1cxBh9jTNpfJAly4XkahIpSIYhIIE/L1/GueRfnocU8Bw7jJdEGzY3c hh0uZPrjVyWqtH2njY9saDq2K6Y1h2gLzXR0LlqIn6K0sJZ5Rpq9lFjarfaB/ALe Zv2iU6osbmOd2CyAHbJ6lwSgvPhP0RNWKsLK3GCRHFpbYuKmwkaxQrP7xyR7qslS LrZHmevzdPeIof6gndBs8XrhES0Pv6/c23AvJhWTpe0QPtTCfh2NQa74ILJ/DGRw MVdGp8oWQdUfGXJbPgbNpu6tVArqJu7B9DQ3OIfTcm2fvg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:23 2025 by rpki-client