This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa File: 2c6881bd-10fc-4994-83fe-43244d2b078a.roa (raw, json) Hash identifier: 2x7onFE7PLbkv2CzyujzF3BC+9cUtl1hhK91kF0ZZH4= Subject key identifier: 93:C6:AC:51:4E:3B:1C:0E:E7:9A:42:9D:AD:0A:AE:8C:02:4E:05:5F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 68809AA65C1EBA5B1205FD839F317FB74E0664F2 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa Signing time: Sat 29 Nov 2025 03:10:44 +0000 ROA not before: Sat 29 Nov 2025 03:10:44 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.137.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:80:9a:a6:5c:1e:ba:5b:12:05:fd:83:9f:31:7f:b7:4e:06:64:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:44 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=a41a536a3ff20bc3b4c29ec025a99f546e500e28921db44ab2cefeebb09e69c5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:4e:f7:99:07:ae:63:d8:d9:a0:f6:63:ca: 6c:da:a2:4d:1e:18:7f:66:e9:99:8a:04:0e:6f:ee: 83:6d:45:c8:a2:43:c9:80:cc:55:75:cb:2b:0e:09: 10:e7:25:34:30:2d:e3:3b:73:a7:fa:0c:2b:27:4d: ea:c7:78:35:9d:36:a0:28:7b:72:46:63:84:85:ab: 5a:bc:77:c3:ec:4a:38:c0:b3:12:da:4b:5d:b8:f4: fe:4a:0f:48:05:da:7a:1e:79:60:db:51:f6:9e:83: 6f:ac:11:f9:9f:56:36:2d:9c:7d:ea:97:3b:10:0b: c3:46:f4:84:56:eb:39:a9:5d:6b:56:25:d5:de:45: 26:1e:ff:e1:d6:5a:fe:fd:eb:70:8e:2c:9a:e7:de: 0c:1a:c3:f2:32:54:49:bf:45:de:b5:bf:25:fc:5f: 99:df:52:1e:ff:95:64:db:b1:12:56:92:f1:92:2d: 26:29:40:ee:70:5a:2f:64:52:6c:71:91:b8:b7:83: 07:c3:fd:5f:e0:7b:2f:31:37:bf:7d:a5:fe:1f:7b: 0d:90:7f:5e:9e:4c:d7:5c:ea:e3:d2:da:28:3f:28: 3a:84:74:c5:17:98:34:f5:ec:98:b1:d3:ed:fb:5f: 3c:d2:68:5f:62:bc:50:a6:10:2b:44:60:75:a0:37: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:AC:51:4E:3B:1C:0E:E7:9A:42:9D:AD:0A:AE:8C:02:4E:05:5F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.137.80.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:81:4d:64:d3:d5:49:ab:0d:d0:77:36:24:5c:64:c5:fc:6b: c0:e5:fa:81:83:35:b4:6c:7f:98:a4:ad:7f:b1:9a:0a:62:96: 72:23:12:3e:50:fc:13:09:c7:e0:e2:52:3c:e8:eb:1f:a7:b9: 51:3b:1e:6e:41:c4:7f:e7:37:04:53:02:08:d5:27:4b:79:92: 76:47:a9:fe:6e:df:42:41:41:47:8b:db:2e:bd:3c:6a:63:84: f6:4f:9b:70:f4:2c:8d:08:04:5f:34:ed:5a:57:fa:b8:37:fe: 05:ec:b9:85:00:fe:44:71:5f:50:ec:08:f9:16:85:d1:5d:57: 35:38:76:24:81:ce:77:3f:a0:50:44:8d:e7:b9:00:a8:04:c9: 9d:2d:50:96:1a:66:d0:b3:23:27:d5:4d:7b:cf:30:ce:12:45: 50:73:4f:9b:29:c6:a0:c8:dc:22:d6:cf:52:90:31:5f:75:79: 29:be:bd:bd:3c:a8:c2:5e:55:17:b3:ba:cc:30:34:57:a3:c0: f9:5c:8a:0b:23:ed:42:81:5c:96:4f:9d:56:16:1c:27:bd:e1: a4:88:62:22:2f:69:79:86:26:d0:db:2a:b5:8b:5e:60:75:e1: 9d:2c:9b:78:d9:b3:79:5e:50:3f:4f:1f:23:42:2d:ac:10:60: b2:76:4e:cb -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUaICaplweulsSBf2DnzF/t04GZPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwNDRaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQGE0MWE1MzZhM2ZmMjBiYzNiNGMyOWVjMDI1YTk5ZjU0NmU1MDBlMjg5MjFk YjQ0YWIyY2VmZWViYjA5ZTY5YzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6LTveZB65j2Nmg9mPKbNqiTR4Yf2bpmYoEDm/ug21FyKJDyYDMVXXLKw4J EOclNDAt4ztzp/oMKydN6sd4NZ02oCh7ckZjhIWrWrx3w+xKOMCzEtpLXbj0/koP SAXaeh55YNtR9p6Db6wR+Z9WNi2cfeqXOxALw0b0hFbrOalda1Yl1d5FJh7/4dZa /v3rcI4smufeDBrD8jJUSb9F3rW/Jfxfmd9SHv+VZNuxElaS8ZItJilA7nBaL2RS bHGRuLeDB8P9X+B7LzE3v32l/h97DZB/Xp5M11zq49LaKD8oOoR0xReYNPXsmLHT 7ftfPNJoX2K8UKYQK0RgdaA3Zp0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSTxqxR TjscDueaQp2tCq6MAk4FXzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmM2ODgxYmQtMTBmYy00OTk0LTgzZmUtNDMyNDRkMmIwNzhhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6JUDAN BgkqhkiG9w0BAQsFAAOCAQEAjYFNZNPVSasN0Hc2JFxkxfxrwOX6gYM1tGx/mKSt f7GaCmKWciMSPlD8EwnH4OJSPOjrH6e5UTsebkHEf+c3BFMCCNUnS3mSdkep/m7f QkFBR4vbLr08amOE9k+bcPQsjQgEXzTtWlf6uDf+Bey5hQD+RHFfUOwI+RaF0V1X NTh2JIHOdz+gUESN57kAqATJnS1Qlhpm0LMjJ9VNe88wzhJFUHNPmynGoMjcItbP UpAxX3V5Kb69vTyowl5VF7O6zDA0V6PA+VyKCyPtQoFclk+dVhYcJ73hpIhiIi9p eYYm0NsqtYteYHXhnSybeNmzeV5QP08fI0ItrBBgsnZOyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:48 2025 by rpki-client