This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json) Hash identifier: cocCV/wPnJSvHfJKewZRpP544FeiIAH4kWp8r0MsQn0= Subject key identifier: 5D:01:63:0E:AF:8B:7B:50:B3:3C:48:D7:71:66:29:C3:19:F5:C6:77 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 19436F9077042407490D18E99531B2C8E1B6742B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa Signing time: Sat 29 Nov 2025 03:00:29 +0000 ROA not before: Sat 29 Nov 2025 03:00:29 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.51.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:43:6f:90:77:04:24:07:49:0d:18:e9:95:31:b2:c8:e1:b6:74:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:29 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=7eec774cfe0eaeb1a6423fa9273940682978229c0f0ee6b6379d27f048a1c236, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:9a:6d:db:19:41:b5:b5:d2:ef:3b:51:ef: 10:e4:5f:2b:a6:e0:60:56:c9:34:34:18:54:31:03: 5d:dd:16:ea:11:45:08:7f:b1:ba:5a:71:2e:ff:dd: 3c:4b:55:a1:cc:d5:ac:63:25:dc:77:df:2b:c9:0e: 52:60:85:57:8c:e5:59:09:dc:15:d3:4f:8a:12:21: 4e:57:a8:2c:c9:4e:a4:e3:15:e9:50:c1:ab:2f:d2: 0a:f0:70:b4:9d:a8:6e:11:7c:03:9f:6c:6c:f1:82: b0:be:2f:f3:55:f4:a1:a5:0a:9f:ee:d1:5e:86:c1: 10:fd:93:39:cd:cb:0f:84:94:76:37:06:0a:c5:86: 8a:46:24:bf:aa:0e:92:c1:b3:f4:60:d1:f1:0d:e1: a0:f7:e2:ce:85:cc:06:de:ea:bf:9a:66:3d:62:d8: 01:82:af:fd:e0:f5:f2:43:c4:f1:a9:53:9f:5e:51: 23:df:ae:cc:9e:85:c5:71:98:9d:7d:03:2f:0c:f0: 0e:a9:e8:7b:73:bf:eb:b7:4e:bb:fd:ef:dc:cb:88: 6d:26:3d:7b:80:a6:d0:4d:ad:29:56:6a:09:94:13: e1:8f:7a:04:50:0b:90:bb:8d:52:b3:97:d5:93:dc: 3c:a2:51:e9:9a:4a:fd:08:65:e9:4a:34:f9:50:9f: 08:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:01:63:0E:AF:8B:7B:50:B3:3C:48:D7:71:66:29:C3:19:F5:C6:77 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.51.128.0/17 Signature Algorithm: sha256WithRSAEncryption 60:b5:2d:be:4d:8d:da:8b:e8:ab:c6:b9:c8:29:64:c5:0a:23: 3b:b0:10:04:e9:c2:e9:51:9b:39:d4:9d:eb:53:03:ba:1d:37: 63:2b:2a:d9:92:6c:ce:44:92:64:5a:8d:e2:ea:29:ae:da:8a: 66:ef:5c:53:89:a8:8b:8a:f1:f0:17:20:ae:59:f3:38:2d:8c: 0e:d6:fb:1a:fd:f8:e2:4d:9f:a8:9e:b7:59:17:d5:ba:4f:fc: 69:5e:d5:74:ec:08:c1:cb:5b:51:ee:c7:ec:51:65:08:e1:18: d2:b4:2e:2e:47:97:21:6e:1f:4c:33:5e:94:2e:0e:b0:15:30: 27:7c:63:56:c4:d8:29:2a:17:ce:8b:78:45:56:72:cf:14:25: 82:21:5e:62:f7:97:d9:4c:f3:bf:c3:f2:ee:72:59:87:f7:d5: 3c:8b:ce:41:6c:72:10:76:b7:17:a7:26:42:aa:13:38:a7:82: 09:e3:4e:4e:4c:b6:1b:4b:e4:45:2b:d8:c9:86:0c:41:d7:8f: 8d:2e:ce:d0:da:4c:24:f7:f3:dc:19:77:bf:a5:3d:58:f8:af: b8:69:eb:64:96:67:71:71:84:95:ed:fb:97:fd:52:fe:7a:b7: b0:da:b5:dc:3b:9e:2d:f8:51:be:f6:7c:be:2a:0d:1f:a5:90: 58:ce:88:29 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUGUNvkHcEJAdJDRjplTGyyOG2dCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMjlaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDdlZWM3NzRjZmUwZWFlYjFhNjQyM2ZhOTI3Mzk0MDY4Mjk3ODIyOWMwZjBl ZTZiNjM3OWQyN2YwNDhhMWMyMzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+xmm3bGUG1tdLvO1HvEORfK6bgYFbJNDQYVDEDXd0W6hFFCH+xulpxLv/d PEtVoczVrGMl3HffK8kOUmCFV4zlWQncFdNPihIhTleoLMlOpOMV6VDBqy/SCvBw tJ2obhF8A59sbPGCsL4v81X0oaUKn+7RXobBEP2TOc3LD4SUdjcGCsWGikYkv6oO ksGz9GDR8Q3hoPfizoXMBt7qv5pmPWLYAYKv/eD18kPE8alTn15RI9+uzJ6FxXGY nX0DLwzwDqnoe3O/67dOu/3v3MuIbSY9e4Cm0E2tKVZqCZQT4Y96BFALkLuNUrOX 1ZPcPKJR6ZpK/Qhl6Uo0+VCfCHsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRdAWMO r4t7ULM8SNdxZinDGfXGdzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmZjMDE4YzgtZGI4Yi00YjA0LThmOTAtM2JhZjgyNmZjMTBiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBy4zgDAN BgkqhkiG9w0BAQsFAAOCAQEAYLUtvk2N2ovoq8a5yClkxQojO7AQBOnC6VGbOdSd 61MDuh03Yysq2ZJszkSSZFqN4uoprtqKZu9cU4moi4rx8BcgrlnzOC2MDtb7Gv34 4k2fqJ63WRfVuk/8aV7VdOwIwctbUe7H7FFlCOEY0rQuLkeXIW4fTDNelC4OsBUw J3xjVsTYKSoXzot4RVZyzxQlgiFeYveX2Uzzv8Py7nJZh/fVPIvOQWxyEHa3F6cm QqoTOKeCCeNOTky2G0vkRSvYyYYMQdePjS7O0NpMJPfz3Bl3v6U9WPivuGnrZJZn cXGEle37l/1S/nq3sNq13DueLfhRvvZ8vioNH6WQWM6IKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:10 2025 by rpki-client