This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa File: 4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa (raw, json) Hash identifier: 0dV3t3aKJYyrkpw2lX9KT+xddzBNX1AaKtU1PnwzJOU= Subject key identifier: 78:41:09:2A:80:8B:D8:D2:04:DC:8A:66:F3:2C:F2:96:D9:C5:78:1B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0691C3602A47F1F328DFCA30CD62E512C7E62CD6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa Signing time: Sat 29 Nov 2025 03:00:28 +0000 ROA not before: Sat 29 Nov 2025 03:00:28 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.137.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:91:c3:60:2a:47:f1:f3:28:df:ca:30:cd:62:e5:12:c7:e6:2c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:28 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=7d1d901fcfb42cc4e577974861534338fd3301ef8814a6eebe60b98ca3589904, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:50:bf:2f:9c:ec:65:fe:dc:e3:36:2d:bd: 61:4b:79:80:5c:93:e6:83:d6:b8:a4:6e:af:d9:81: c0:d8:0e:86:05:11:26:8b:f9:e0:93:70:11:a7:43: c9:07:0a:56:ce:57:71:4d:dd:9f:56:29:02:61:98: b8:ac:3a:f9:c9:ab:20:7c:4e:54:8c:f6:f1:86:8e: 17:e9:e8:71:70:4d:f6:e1:d7:3e:84:37:bf:84:03: b7:9a:ad:7b:68:b1:e6:5f:56:60:cc:d2:db:db:5f: 02:db:0a:d3:dd:93:8c:b7:f1:dd:96:75:4b:11:79: f7:38:10:6f:20:47:41:c9:b2:e8:e1:f9:86:08:c1: 3f:19:de:b3:9f:70:0c:69:2a:58:47:78:c9:fb:09: c4:67:03:9e:87:7d:ab:20:6e:76:de:ad:1f:d8:ee: 67:83:b3:62:2a:67:9e:8c:9b:be:70:79:17:38:36: e5:d6:b1:cd:ba:cf:0a:84:ee:e7:ba:cc:64:2c:0d: e2:ad:79:e4:66:54:f5:a7:c3:63:3c:22:c6:19:34: cb:ee:da:c0:fb:a5:35:09:46:18:d5:9a:49:06:cc: de:fb:ec:7a:2b:aa:da:82:0e:7c:a0:d5:12:12:85: 73:b2:b3:64:d4:ea:52:57:95:c8:91:9d:5f:a2:64: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:41:09:2A:80:8B:D8:D2:04:DC:8A:66:F3:2C:F2:96:D9:C5:78:1B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.137.240.0/20 Signature Algorithm: sha256WithRSAEncryption 20:03:e7:cd:ed:d0:f2:81:0f:60:87:36:8b:92:85:cb:5d:6a: ed:1a:64:ab:11:ac:76:34:83:95:51:e8:86:94:42:30:3a:96: 55:dc:47:b6:63:2f:93:8e:00:3a:ad:0e:54:7b:7b:ea:64:2d: e0:16:35:73:12:89:5b:d4:44:1b:df:f8:1f:46:86:86:ed:cc: 53:4f:2d:a9:9f:04:c4:e8:25:cc:2a:16:87:45:6f:e4:c1:91: a6:47:c6:56:90:44:a3:f6:e8:a5:30:ec:47:2e:92:cf:6e:fb: 7b:60:86:20:26:2c:8e:ad:31:9d:9a:5f:71:29:c9:1a:5a:a5: ca:de:54:13:5a:bc:2b:c5:c4:d9:f0:ef:36:f6:fe:6b:84:f6: 27:5a:bc:7e:fc:7b:80:6e:0d:15:e1:b9:51:9d:b6:cc:88:80: 94:52:56:4e:dd:97:bb:30:f7:4a:11:a1:ef:20:53:fd:c2:f2: 1a:84:e0:62:41:66:39:43:ee:5f:49:f1:15:b5:cd:35:c7:be: 47:58:00:4b:7f:c0:39:19:32:40:fb:38:9e:23:a4:cf:18:72: bd:79:94:39:81:87:f3:30:46:2a:28:4d:15:43:dd:6f:3e:20: 01:2e:17:79:15:af:26:1f:b9:de:47:08:59:6c:d7:cc:53:e8: 52:58:3f:a9 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUBpHDYCpH8fMo38owzWLlEsfmLNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMjhaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDdkMWQ5MDFmY2ZiNDJjYzRlNTc3OTc0ODYxNTM0MzM4ZmQzMzAxZWY4ODE0 YTZlZWJlNjBiOThjYTM1ODk5MDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJz9UL8vnOxl/tzjNi29YUt5gFyT5oPWuKRur9mBwNgOhgURJov54JNwEadD yQcKVs5XcU3dn1YpAmGYuKw6+cmrIHxOVIz28YaOF+nocXBN9uHXPoQ3v4QDt5qt e2ix5l9WYMzS29tfAtsK092TjLfx3ZZ1SxF59zgQbyBHQcmy6OH5hgjBPxnes59w DGkqWEd4yfsJxGcDnod9qyBudt6tH9juZ4OzYipnnoybvnB5Fzg25daxzbrPCoTu 57rMZCwN4q155GZU9afDYzwixhk0y+7awPulNQlGGNWaSQbM3vvseiuq2oIOfKDV EhKFc7KzZNTqUleVyJGdX6JkRmkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR4QQkq gIvY0gTcimbzLPKW2cV4GzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGRkMzExNjMtMmFkNy00OWY1LWEyNGQtMmVhNDE3MGJiMDVmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6J8DAN BgkqhkiG9w0BAQsFAAOCAQEAIAPnze3Q8oEPYIc2i5KFy11q7RpkqxGsdjSDlVHo hpRCMDqWVdxHtmMvk44AOq0OVHt76mQt4BY1cxKJW9REG9/4H0aGhu3MU08tqZ8E xOglzCoWh0Vv5MGRpkfGVpBEo/bopTDsRy6Sz277e2CGICYsjq0xnZpfcSnJGlql yt5UE1q8K8XE2fDvNvb+a4T2J1q8fvx7gG4NFeG5UZ22zIiAlFJWTt2XuzD3ShGh 7yBT/cLyGoTgYkFmOUPuX0nxFbXNNce+R1gAS3/AORkyQPs4niOkzxhyvXmUOYGH 8zBGKihNFUPdbz4gAS4XeRWvJh+53kcIWWzXzFPoUlg/qQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:28 2025 by rpki-client