This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa File: 83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa (raw, json) Hash identifier: oJYJynMFs6RCbV+zoiB45cEZ0slY7mES/u2u0D/NheQ= Subject key identifier: 59:22:E1:2D:B6:58:F3:4E:56:90:0F:1C:7D:72:5E:66:DB:08:90:CD Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 717DC063AF156676AF5C5752CBA03B2662356565 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa Signing time: Sun 16 Nov 2025 00:00:07 +0000 ROA not before: Sun 16 Nov 2025 00:00:07 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 79.125.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7d:c0:63:af:15:66:76:af:5c:57:52:cb:a0:3b:26:62:35:65:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 16 00:00:07 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=35473ace1c4ccd31a74119297534c248335091a59958a79ed3abd48936868fab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:15:25:71:fa:01:95:52:88:1c:f1:a2:6c: 66:3e:14:ba:4d:0c:70:d2:b2:5f:07:6b:43:85:03: fa:d8:18:03:66:a2:59:d8:93:bf:45:36:5c:f4:b2: f8:cf:00:44:f3:ce:f0:c1:1e:26:fd:d7:6f:72:6d: 7c:23:e5:41:44:1f:94:aa:57:5d:e3:49:cf:65:e6: c6:f3:c2:04:fe:82:0a:e7:4f:06:24:fd:5c:fd:e9: ca:db:ff:40:67:41:1e:d2:bd:8e:9f:bd:65:83:cb: b5:fb:4b:23:cc:04:fc:c1:d3:bb:a1:61:ca:8d:c3: b9:76:68:4b:7e:b4:11:59:8f:57:38:59:9c:79:2f: 2a:d1:ad:11:58:46:a1:ef:90:07:e8:04:16:d8:8b: c2:44:e6:5a:b5:c7:74:9a:09:97:f2:9b:02:61:14: 39:d0:0a:21:17:88:c0:37:9e:a3:ea:88:f9:56:94: 8b:8d:86:d7:72:c9:32:a8:a3:63:85:72:52:19:5e: be:05:44:e7:38:cf:2c:22:32:40:aa:d0:55:f0:04: ba:00:78:66:aa:c2:2a:ef:ea:e0:e7:5b:4f:b0:d4: 45:46:68:02:f4:0f:e0:b0:11:ee:f4:d7:e5:a2:54: 19:0a:8a:3e:91:83:2f:80:01:d9:61:3d:d6:f1:4e: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:E1:2D:B6:58:F3:4E:56:90:0F:1C:7D:72:5E:66:DB:08:90:CD X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.125.0.0/18 Signature Algorithm: sha256WithRSAEncryption 35:4b:26:05:2f:92:90:ba:c6:98:a0:a7:7a:6a:4f:24:87:75: 2c:d7:18:ff:81:22:20:30:de:8b:42:1c:46:bb:e3:67:b7:f9: fa:57:16:41:fb:b3:c2:f8:00:66:5c:d2:fb:d4:52:31:d9:6d: a0:63:da:85:ef:f9:6a:49:35:b3:09:9d:a9:b3:b3:dd:8e:ab: 06:18:57:60:1a:42:46:a4:86:60:22:2c:4a:9b:13:66:ce:99: 0d:f1:53:38:23:49:2c:29:6d:cc:f0:b7:75:72:29:22:3f:f6: 47:f3:a4:8f:63:39:18:13:35:9c:87:1a:f6:d5:d3:0b:82:84: 36:60:5d:44:4a:50:cd:4b:c6:0b:11:90:6b:18:f2:db:3d:fe: 25:8a:ee:6f:80:54:3e:8c:ac:ae:58:49:fc:36:c2:9d:25:bb: 1b:7c:35:76:dc:44:c0:2f:4c:8f:58:7c:71:04:c4:7b:3b:42: b0:a8:22:b1:3c:92:ed:23:c7:27:e3:9b:0e:95:aa:12:30:33: 6a:09:cf:f7:c0:b0:96:09:9e:c7:ea:e5:10:d3:d5:36:5c:c5: fc:1f:bc:57:bb:3f:75:8d:08:12:02:42:cc:c5:45:35:c9:36: e8:f4:de:80:bc:98:7e:19:fa:16:c1:49:96:8d:2e:65:10:29: d8:f3:2f:59 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUcX3AY68VZnavXFdSy6A7JmI1ZWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMTYwMDAwMDdaFw0yNTEyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDM1NDczYWNlMWM0Y2NkMzFhNzQxMTkyOTc1MzRjMjQ4MzM1MDkxYTU5OTU4 YTc5ZWQzYWJkNDg5MzY4NjhmYWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5YFSVx+gGVUogc8aJsZj4Uuk0McNKyXwdrQ4UD+tgYA2aiWdiTv0U2XPSy +M8ARPPO8MEeJv3Xb3JtfCPlQUQflKpXXeNJz2XmxvPCBP6CCudPBiT9XP3pytv/ QGdBHtK9jp+9ZYPLtftLI8wE/MHTu6Fhyo3DuXZoS360EVmPVzhZnHkvKtGtEVhG oe+QB+gEFtiLwkTmWrXHdJoJl/KbAmEUOdAKIReIwDeeo+qI+VaUi42G13LJMqij Y4VyUhlevgVE5zjPLCIyQKrQVfAEugB4ZqrCKu/q4OdbT7DURUZoAvQP4LAR7vTX 5aJUGQqKPpGDL4AB2WE91vFOe9cCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRZIuEt tljzTlaQDxx9cl5m2wiQzTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODM1MDlhNWUtMmFkNy00MjFiLTkwZWYtZmNkZmRhM2ZkZmM3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBk99ADAN BgkqhkiG9w0BAQsFAAOCAQEANUsmBS+SkLrGmKCnempPJId1LNcY/4EiIDDei0Ic RrvjZ7f5+lcWQfuzwvgAZlzS+9RSMdltoGPahe/5akk1swmdqbOz3Y6rBhhXYBpC RqSGYCIsSpsTZs6ZDfFTOCNJLCltzPC3dXIpIj/2R/Okj2M5GBM1nIca9tXTC4KE NmBdREpQzUvGCxGQaxjy2z3+JYrub4BUPoysrlhJ/DbCnSW7G3w1dtxEwC9Mj1h8 cQTEeztCsKgisTyS7SPHJ+ObDpWqEjAzagnP98Cwlgmex+rlENPVNlzF/B+8V7s/ dY0IEgJCzMVFNck26PTegLyYfhn6FsFJlo0uZRAp2PMvWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:54 2025 by rpki-client