This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa File: 4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa (raw, json) Hash identifier: i7rgkV8RXJWOkbl0YLpKw5r7aH7VOF1nk/OyVxiZoEQ= Subject key identifier: 9E:D7:1F:18:AF:E2:D0:29:B2:93:FE:00:87:BD:A4:FB:9E:D5:ED:BC Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5A50E42C9ED00F9AF9BCB794E40310B0192AF734 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa Signing time: Tue 02 Dec 2025 01:51:11 +0000 ROA not before: Tue 02 Dec 2025 01:51:11 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 176.34.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:50:e4:2c:9e:d0:0f:9a:f9:bc:b7:94:e4:03:10:b0:19:2a:f7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 2 01:51:11 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=c242ec9bfbb7e9e07d55a5bf87d50e0d3671912152cd1f00e5cf201d9cd3819a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:53:ab:0a:b4:09:db:ef:c6:82:0a:7a:1f: 50:84:17:46:2a:d7:c2:e3:1c:4e:b1:aa:f2:b4:e8: a4:b8:1a:d2:78:fc:46:f8:9f:dc:d6:46:4b:e4:67: 7f:cd:0d:27:56:e9:c0:fa:08:b6:e3:3f:07:12:e1: 4b:b4:02:e9:7b:fb:36:b6:a3:b1:45:b1:76:25:64: f0:6f:50:53:2e:8b:4c:3b:c4:0a:25:9c:b2:e0:e6: 55:0c:13:6a:3e:8a:00:eb:e7:28:12:15:a8:c5:3d: 3a:c4:86:97:1e:e0:c7:d8:cf:50:72:20:4d:35:29: d4:0e:b3:a6:0a:85:1d:7b:4b:b7:52:1e:d5:ec:b6: 2d:c2:62:c7:2e:15:18:8a:f4:cf:dc:b1:b0:b5:45: 05:bc:9d:3c:49:4e:3c:26:b3:dc:5d:e9:07:53:6d: 90:55:be:6f:f5:8f:81:1b:db:ba:ff:dd:8d:47:b8: 95:b0:b5:73:18:9c:ee:dc:18:fa:7e:fa:62:4c:0a: e7:6c:fd:66:66:d4:0f:32:4e:b6:6a:7e:a9:71:28: 5a:a1:77:f0:9d:c8:4f:66:c2:19:c3:b7:90:31:03: b6:1b:cc:89:2a:1d:e0:97:30:ee:46:89:2a:15:96: cc:2b:0e:e0:6e:a7:47:f4:7c:87:e5:48:13:8d:67: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D7:1F:18:AF:E2:D0:29:B2:93:FE:00:87:BD:A4:FB:9E:D5:ED:BC X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.34.32.0/19 Signature Algorithm: sha256WithRSAEncryption 73:d9:36:2f:1c:f4:8b:60:26:d9:db:25:08:73:6f:e2:5b:4d: 55:02:2e:da:76:43:f8:90:56:3b:cf:c8:d2:f3:93:93:e5:0d: f2:00:f5:35:95:79:ba:18:42:1d:75:63:78:a1:f0:0f:3f:ff: b1:24:3e:6b:71:d2:ca:28:db:0d:ba:be:b8:67:79:e3:2f:83: fa:e3:6a:10:26:9a:fb:f5:bb:7c:a8:21:37:7d:e7:f9:63:a5: a8:74:37:0b:7e:7c:d4:c0:e7:b1:ec:b9:24:13:ca:0c:ef:b0: e6:89:12:08:b2:ae:fe:fd:d7:3f:f0:2a:91:ee:94:11:55:9f: 7a:a4:90:96:a5:1a:93:b6:0e:d5:34:80:98:6e:ea:73:20:15: 08:89:0c:2e:5e:6c:de:b0:ab:40:48:0a:f6:eb:14:51:0c:18: ba:ac:8a:88:1b:b2:41:06:df:b0:ce:42:dd:4c:cf:95:b4:7e: 3c:22:b6:b2:2f:a2:00:e3:1f:d7:15:95:d3:90:c6:cf:0f:fc: df:9f:44:11:10:64:0f:9f:f8:c9:d3:17:ea:cd:3b:ee:6c:f1: 4a:4d:95:33:6b:dc:b4:a4:5a:89:60:75:1e:ec:44:90:72:fd: a7:cd:58:8b:30:5e:41:6d:9f:21:62:9a:dc:9c:4b:57:5c:7e: 27:3d:c5:d4 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUWlDkLJ7QD5r5vLeU5AMQsBkq9zQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMDIwMTUxMTFaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGMyNDJlYzliZmJiN2U5ZTA3ZDU1YTViZjg3ZDUwZTBkMzY3MTkxMjE1MmNk MWYwMGU1Y2YyMDFkOWNkMzgxOWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6XU6sKtAnb78aCCnofUIQXRirXwuMcTrGq8rTopLga0nj8Rvif3NZGS+Rn f80NJ1bpwPoItuM/BxLhS7QC6Xv7NrajsUWxdiVk8G9QUy6LTDvECiWcsuDmVQwT aj6KAOvnKBIVqMU9OsSGlx7gx9jPUHIgTTUp1A6zpgqFHXtLt1Ie1ey2LcJixy4V GIr0z9yxsLVFBbydPElOPCaz3F3pB1NtkFW+b/WPgRvbuv/djUe4lbC1cxic7twY +n76YkwK52z9ZmbUDzJOtmp+qXEoWqF38J3IT2bCGcO3kDEDthvMiSod4Jcw7kaJ KhWWzCsO4G6nR/R8h+VIE41nktMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSe1x8Y r+LQKbKT/gCHvaT7ntXtvDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGRmM2E5YjgtNGNkYy00MzY2LWEzOGUtMTZkMmVhYjEyOWI3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbAiIDAN BgkqhkiG9w0BAQsFAAOCAQEAc9k2Lxz0i2Am2dslCHNv4ltNVQIu2nZD+JBWO8/I 0vOTk+UN8gD1NZV5uhhCHXVjeKHwDz//sSQ+a3HSyijbDbq+uGd54y+D+uNqECaa +/W7fKghN33n+WOlqHQ3C3581MDnsey5JBPKDO+w5okSCLKu/v3XP/Aqke6UEVWf eqSQlqUak7YO1TSAmG7qcyAVCIkMLl5s3rCrQEgK9usUUQwYuqyKiBuyQQbfsM5C 3UzPlbR+PCK2si+iAOMf1xWV05DGzw/8359EERBkD5/4ydMX6s077mzxSk2VM2vc tKRaiWB1HuxEkHL9p81YizBeQW2fIWKa3JxLV1x+Jz3F1A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:53 2025 by rpki-client