This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json) Hash identifier: qjzt14zouZWu4eGvNJZl8uPMf6/5MAmfOJyHXIK1hvw= Subject key identifier: 78:5B:84:2F:E6:2B:52:C7:CC:68:75:77:CB:31:06:5F:EB:3E:13:4A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 67BD26EE82B1F010156BDD23089B0581355FEBF5 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa Signing time: Sat 15 Nov 2025 06:20:40 +0000 ROA not before: Sat 15 Nov 2025 06:20:40 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 79.125.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bd:26:ee:82:b1:f0:10:15:6b:dd:23:08:9b:05:81:35:5f:eb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 15 06:20:40 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=e45beddd8dd958364cf7ebe6a094455b4d0b95b95d7baf271a3bfefb31a8c3a4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:ac:3f:0b:2c:9f:21:c0:23:1c:ad:f5:90: bb:39:ec:cc:56:ac:b9:46:cc:1c:04:eb:16:0e:e4: 79:e3:3a:25:84:22:94:a6:85:73:eb:2a:ef:39:48: 26:0e:a9:24:c7:f8:56:2a:c9:33:cb:e3:20:11:be: 8d:58:b0:f5:07:54:80:03:06:c8:f8:14:3a:85:0d: eb:51:c5:32:99:2c:f3:43:2d:96:13:42:bf:ff:e9: ed:8c:3c:d7:c9:7b:06:68:57:51:33:b7:13:69:06: 90:50:8f:6c:b2:b7:8e:5b:85:26:26:c0:29:88:2a: 50:9d:9b:2f:9b:01:90:0c:7e:56:dc:36:d2:91:e6: 36:71:e1:19:61:3e:b4:f8:60:9a:46:53:34:4c:c1: ac:77:e6:83:92:a1:c5:8e:30:78:9e:0e:80:be:f6: 39:b7:29:39:b1:36:99:13:d5:a3:1c:e3:07:9c:15: e5:48:bb:53:26:f0:b2:d1:5c:ad:4b:88:48:1a:18: d8:06:b6:0c:48:2c:2a:a7:7b:15:96:67:dd:7b:fa: 20:74:2e:27:3d:be:0e:21:c4:c6:8c:5c:56:d0:e7: 28:d0:c8:e9:94:e6:6c:86:a3:c1:52:03:92:40:39: 62:85:80:64:78:93:7c:f6:af:09:82:90:dc:ce:6f: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5B:84:2F:E6:2B:52:C7:CC:68:75:77:CB:31:06:5F:EB:3E:13:4A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.125.4.0/22 Signature Algorithm: sha256WithRSAEncryption 05:62:ed:f0:a8:65:05:7a:c4:e1:be:18:a6:b4:74:84:1d:fc: eb:d3:d9:b1:ed:43:ac:11:bd:9d:98:93:76:d2:23:a1:c7:7c: 7b:90:69:91:d5:93:4a:68:e9:8a:7a:8f:06:6c:78:b1:63:b4: b2:1b:01:18:08:d0:42:14:43:d8:e7:de:61:a6:14:de:ce:5d: ba:bc:dd:32:57:24:01:8d:80:0b:50:cb:56:1e:a5:7f:fb:3b: bb:b8:44:f0:71:c6:21:93:c4:38:75:f2:9f:2d:09:be:69:cd: cc:df:be:17:83:ee:5f:6a:a5:e9:fc:e3:a2:29:ad:6d:f5:47: 65:7d:c3:ab:af:2f:20:f7:7f:a1:53:5f:26:da:3a:16:0a:4b: 78:9a:15:98:a9:e3:fd:be:01:d1:6e:f7:53:3f:89:1e:76:91: 5e:a2:0f:1a:62:0a:f6:fa:26:56:79:16:c0:78:ff:10:8f:aa: 08:91:52:b8:d4:fb:cd:82:4c:d0:88:25:06:e5:61:95:2b:99: 10:a3:58:9e:d8:46:d5:84:a1:f5:75:59:23:36:13:eb:62:38: c2:82:3a:c3:41:af:4e:80:47:60:ac:45:b6:7b:bf:c9:f0:20: fa:a3:25:9f:ef:b5:5d:ac:50:0e:b5:f4:f5:83:60:e2:df:41: a1:5d:9a:c1 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUZ70m7oKx8BAVa90jCJsFgTVf6/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTUwNjIwNDBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGU0NWJlZGRkOGRkOTU4MzY0Y2Y3ZWJlNmEwOTQ0NTViNGQwYjk1Yjk1ZDdi YWYyNzFhM2JmZWZiMzFhOGMzYTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALP8rD8LLJ8hwCMcrfWQuznszFasuUbMHATrFg7keeM6JYQilKaFc+sq7zlI Jg6pJMf4VirJM8vjIBG+jViw9QdUgAMGyPgUOoUN61HFMpks80MtlhNCv//p7Yw8 18l7BmhXUTO3E2kGkFCPbLK3jluFJibAKYgqUJ2bL5sBkAx+Vtw20pHmNnHhGWE+ tPhgmkZTNEzBrHfmg5KhxY4weJ4OgL72ObcpObE2mRPVoxzjB5wV5Ui7UybwstFc rUuISBoY2Aa2DEgsKqd7FZZn3Xv6IHQuJz2+DiHExoxcVtDnKNDI6ZTmbIajwVID kkA5YoWAZHiTfPavCYKQ3M5vJ+ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR4W4Qv 5itSx8xodXfLMQZf6z4TSjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGNjMzBmY2MtZWMyMy00ZTI2LWJlMTYtMzdkYjgwZGJmM2EwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk99BDAN BgkqhkiG9w0BAQsFAAOCAQEABWLt8KhlBXrE4b4YprR0hB3869PZse1DrBG9nZiT dtIjocd8e5BpkdWTSmjpinqPBmx4sWO0shsBGAjQQhRD2OfeYaYU3s5durzdMlck AY2AC1DLVh6lf/s7u7hE8HHGIZPEOHXyny0JvmnNzN++F4PuX2ql6fzjoimtbfVH ZX3Dq68vIPd/oVNfJto6FgpLeJoVmKnj/b4B0W73Uz+JHnaRXqIPGmIK9vomVnkW wHj/EI+qCJFSuNT7zYJM0IglBuVhlSuZEKNYnthG1YSh9XVZIzYT62I4woI6w0Gv ToBHYKxFtnu/yfAg+qMln++1XaxQDrX09YNg4t9BoV2awQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:52 2025 by rpki-client