This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa File: 4b12830e-a860-4a14-b52f-5284626c1a96.roa (raw, json) Hash identifier: /49L0k3mpd3QMQzrSKxrEDjOTjB3ayQe4xYglbin0Mk= Subject key identifier: 9D:E2:BF:4C:95:18:2E:D9:1C:60:F2:73:48:D8:7E:2A:66:E5:07:52 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 260E3880CC039FABD62F54ADD03F778CB90C445E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa Signing time: Tue 02 Dec 2025 01:50:50 +0000 ROA not before: Tue 02 Dec 2025 01:50:50 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 176.34.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0e:38:80:cc:03:9f:ab:d6:2f:54:ad:d0:3f:77:8c:b9:0c:44:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:50:50 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=3db6f8e82fb5395885e99d4c9bc7fbcab798151617e10ce0e3f5310de0f106c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:09:4c:67:7e:a0:7e:c7:ad:79:73:1c:b7: 7e:a1:25:1a:48:4d:30:f5:4b:a7:0c:2b:e7:d4:7f: 7c:39:93:89:85:eb:3c:f4:01:43:42:16:cc:0b:43: 6a:c5:f1:56:36:a7:f4:60:1f:0d:74:88:48:3c:71: 67:3b:fd:a0:a2:1d:aa:04:19:ee:d6:ba:67:5c:46: 80:96:b5:62:ac:e0:32:10:4c:6f:c1:5c:ef:5c:ac: 4a:c9:a6:fd:25:9a:1f:0f:07:69:37:37:48:ba:1f: a7:bc:b6:fe:21:73:7d:c1:cb:b1:ac:ba:d8:55:48: 07:0c:35:8c:ff:51:66:4d:a6:d2:44:52:ec:de:97: 42:ce:92:8f:ce:0a:bc:1d:ca:da:3b:af:0c:e4:b5: 9f:77:e5:21:89:7f:15:97:d3:e9:df:e3:f3:c3:15: 35:a6:75:bb:f2:3e:04:44:63:52:72:82:86:8a:69: 9b:87:92:de:9b:6c:11:56:91:70:a6:fd:42:4a:9f: a6:3b:34:d3:12:b3:7c:2c:2a:60:70:f6:7e:4c:1c: 19:d6:35:53:df:4b:ca:7d:d1:42:1b:c7:24:16:37: 3d:29:dc:99:6f:09:37:3c:af:56:b9:43:11:6e:de: 39:96:30:5f:b6:dd:d2:fd:ef:32:a3:d8:84:0b:35: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E2:BF:4C:95:18:2E:D9:1C:60:F2:73:48:D8:7E:2A:66:E5:07:52 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2d:81:ee:e8:21:dd:c8:62:c5:5b:7c:57:7f:03:6e:32:e4:2f: 19:82:7e:9d:e4:b5:ee:1e:67:af:22:b3:1a:0f:b8:02:09:0d: fa:76:14:5a:af:46:6e:e2:74:fa:ec:50:1d:d1:ea:1e:e0:48: 73:4d:8b:d3:8a:47:80:72:dd:7d:08:98:7a:67:b8:bd:33:eb: b2:d6:8b:60:3b:28:78:86:53:01:74:92:fe:72:7f:0d:41:31: 75:f3:41:a3:21:54:29:f1:4a:6d:f9:22:26:1e:19:83:c9:c9: e7:f8:0d:ac:23:2a:23:06:61:27:25:71:db:44:1b:d7:18:d1: d5:b6:58:a4:6a:86:e2:7f:20:96:98:50:49:5b:bb:83:b2:6d: 0d:b4:9e:c2:46:54:46:a5:6e:31:e7:6f:15:43:3a:a6:d4:8d: 2b:c0:4a:c5:69:43:64:b6:a7:c6:a1:3b:43:eb:3e:38:e5:15: c9:6d:0a:ac:55:06:de:d3:e3:7b:fb:a6:0a:11:d5:11:92:35: 9e:2c:e2:19:65:51:c2:7e:73:e0:81:58:32:0a:6c:52:d2:d5: 11:d3:ee:15:52:f6:e4:bc:f7:90:c2:37:1e:7b:22:fd:b2:4d: 4e:6e:a0:10:0c:db:3a:97:d4:fa:5d:16:96:d5:a6:e7:5e:aa: 76:5f:53:f7 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUJg44gMwDn6vWL1St0D93jLkMRF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUwNTBaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDNkYjZmOGU4MmZiNTM5NTg4NWU5OWQ0YzliYzdmYmNhYjc5ODE1MTYxN2Ux MGNlMGUzZjUzMTBkZTBmMTA2YzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGGCUxnfqB+x615cxy3fqElGkhNMPVLpwwr59R/fDmTiYXrPPQBQ0IWzAtD asXxVjan9GAfDXSISDxxZzv9oKIdqgQZ7ta6Z1xGgJa1YqzgMhBMb8Fc71ysSsmm /SWaHw8HaTc3SLofp7y2/iFzfcHLsay62FVIBww1jP9RZk2m0kRS7N6XQs6Sj84K vB3K2juvDOS1n3flIYl/FZfT6d/j88MVNaZ1u/I+BERjUnKChoppm4eS3ptsEVaR cKb9Qkqfpjs00xKzfCwqYHD2fkwcGdY1U99Lyn3RQhvHJBY3PSncmW8JNzyvVrlD EW7eOZYwX7bd0v3vMqPYhAs1UgUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSd4r9M lRgu2Rxg8nNI2H4qZuUHUjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGIxMjgzMGUtYTg2MC00YTE0LWI1MmYtNTI4NDYyNmMxYTk2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALAiMA0G CSqGSIb3DQEBCwUAA4IBAQAtge7oId3IYsVbfFd/A24y5C8Zgn6d5LXuHmevIrMa D7gCCQ36dhRar0Zu4nT67FAd0eoe4EhzTYvTikeAct19CJh6Z7i9M+uy1otgOyh4 hlMBdJL+cn8NQTF180GjIVQp8Upt+SImHhmDycnn+A2sIyojBmEnJXHbRBvXGNHV tlikaobifyCWmFBJW7uDsm0NtJ7CRlRGpW4x528VQzqm1I0rwErFaUNktqfGoTtD 6z445RXJbQqsVQbe0+N7+6YKEdURkjWeLOIZZVHCfnPggVgyCmxS0tUR0+4VUvbk vPeQwjceeyL9sk1ObqAQDNs6l9T6XRaW1abnXqp2X1P3 -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:36 2025 by rpki-client