This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json) Hash identifier: aF54tFcW8tXS94wOeNumWjIuzU5dtC+FeDB6C6/pIco= Subject key identifier: C2:43:5F:57:22:8A:1D:CD:11:EC:66:1C:78:AB:1B:B2:61:D3:13:EE Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 750FAE545BE1EB343DC77303E8100B46BF2D43A4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa Signing time: Wed 10 Dec 2025 06:11:04 +0000 ROA not before: Wed 10 Dec 2025 06:11:04 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 79.125.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0f:ae:54:5b:e1:eb:34:3d:c7:73:03:e8:10:0b:46:bf:2d:43:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:11:04 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=a2608713cc92dcdad989440cf8f618ec779485412b6c363445608c35de870f33, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:65:52:15:3d:70:88:f0:ce:41:e6:6b:72: e3:0b:6c:c6:45:38:3d:cf:d9:a0:f9:fd:c3:cd:14: b9:be:d9:5a:b2:70:89:37:ce:c4:88:a9:3c:77:e9: af:25:18:9f:e7:91:97:39:89:67:c0:8a:99:26:38: 47:4d:b9:ab:8a:40:8a:2f:da:21:57:0d:4f:ef:f4: 81:73:1c:74:e5:e1:d0:22:89:c5:94:f6:a9:59:df: cf:da:29:62:c4:60:a7:59:76:27:e3:06:fa:10:59: 0f:88:0a:90:c8:03:10:fd:f1:52:12:aa:0a:07:7d: b4:22:af:0f:8d:1c:df:65:18:40:61:c9:8a:4a:28: c2:32:c2:ad:b1:37:38:ea:12:0f:60:b8:8f:f8:3b: 94:15:11:fa:aa:64:9e:d3:de:f2:36:76:b1:24:3d: 9c:38:b1:2e:bd:61:41:7f:36:1c:b3:f5:d5:de:91: b9:80:cd:19:48:f9:ac:6f:33:f0:10:a2:3a:0c:d6: e7:0d:2e:a6:4e:a6:ac:db:74:1f:d9:b2:95:d7:5e: 35:01:18:f2:ec:c5:f2:0a:c6:97:47:82:1d:c4:4f: 6d:25:c6:00:a5:b9:c5:4e:88:46:f2:ec:ac:c7:8c: a2:69:9e:00:2b:06:7a:d5:4f:5e:f4:2e:65:4d:9b: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:43:5F:57:22:8A:1D:CD:11:EC:66:1C:78:AB:1B:B2:61:D3:13:EE X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.125.4.0/22 Signature Algorithm: sha256WithRSAEncryption b9:a3:e7:9d:90:2e:bb:e8:1e:d9:11:00:c4:27:22:d2:79:f4: 6e:cf:c1:5a:9e:12:ec:7b:48:c0:f2:21:a8:47:44:70:4b:26: a7:35:1d:2c:34:29:c3:f3:58:93:13:d0:6c:fe:b4:f1:44:a4: 2f:a1:b5:f8:97:b6:f8:28:36:46:98:ab:c8:39:20:a3:c7:7b: 1b:45:1c:8b:b9:ee:e9:d0:ae:05:7e:ac:61:57:e9:75:b3:7c: 32:19:60:0e:0c:da:86:4d:e5:1a:be:5b:f0:94:56:e4:25:40: 9b:9b:79:1f:73:41:c3:81:64:78:18:86:d0:bd:01:f1:10:fe: e8:86:0f:76:28:9b:c0:7b:8d:02:e9:be:18:3f:12:ba:44:97: f8:fa:df:47:8d:e9:49:31:d3:3b:1d:79:f7:49:61:fa:89:72: 83:4f:0d:99:6a:03:bb:32:e9:d2:d9:27:45:7a:32:d4:ba:d3: 28:61:fb:6e:8f:88:12:ef:f2:d1:4a:fb:58:5e:8e:32:8b:3a: 3d:3d:06:2e:e9:06:f5:8b:5c:f8:0d:ab:8e:31:3d:e1:f1:34: ca:9e:93:eb:40:c0:ae:51:04:f1:69:b5:d4:82:99:dd:68:b7: 29:09:79:5a:87:60:5a:d2:01:a2:5b:b4:09:39:c1:97:36:2b: a3:90:23:af -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUdQ+uVFvh6zQ9x3MD6BALRr8tQ6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjExMDRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGEyNjA4NzEzY2M5MmRjZGFkOTg5NDQwY2Y4ZjYxOGVjNzc5NDg1NDEyYjZj MzYzNDQ1NjA4YzM1ZGU4NzBmMzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFkZVIVPXCI8M5B5mty4wtsxkU4Pc/ZoPn9w80Uub7ZWrJwiTfOxIipPHfp ryUYn+eRlzmJZ8CKmSY4R025q4pAii/aIVcNT+/0gXMcdOXh0CKJxZT2qVnfz9op YsRgp1l2J+MG+hBZD4gKkMgDEP3xUhKqCgd9tCKvD40c32UYQGHJikoowjLCrbE3 OOoSD2C4j/g7lBUR+qpkntPe8jZ2sSQ9nDixLr1hQX82HLP11d6RuYDNGUj5rG8z 8BCiOgzW5w0upk6mrNt0H9mylddeNQEY8uzF8grGl0eCHcRPbSXGAKW5xU6IRvLs rMeMommeACsGetVPXvQuZU2bUoECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTCQ19X IoodzRHsZhx4qxuyYdMT7jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGNjMzBmY2MtZWMyMy00ZTI2LWJlMTYtMzdkYjgwZGJmM2EwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk99BDAN BgkqhkiG9w0BAQsFAAOCAQEAuaPnnZAuu+ge2REAxCci0nn0bs/BWp4S7HtIwPIh qEdEcEsmpzUdLDQpw/NYkxPQbP608USkL6G1+Je2+Cg2RpiryDkgo8d7G0Uci7nu 6dCuBX6sYVfpdbN8MhlgDgzahk3lGr5b8JRW5CVAm5t5H3NBw4FkeBiG0L0B8RD+ 6IYPdiibwHuNAum+GD8SukSX+PrfR43pSTHTOx1590lh+olyg08NmWoDuzLp0tkn RXoy1LrTKGH7bo+IEu/y0Ur7WF6OMos6PT0GLukG9Ytc+A2rjjE94fE0yp6T60DA rlEE8Wm11IKZ3Wi3KQl5WodgWtIBolu0CTnBlzYro5Ajrw== -----END CERTIFICATE-----Generated at Mon Dec 15 15:34:54 2025 by rpki-client