This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa File: 842bd74b-e507-47ea-bb4e-32057136b2bd.roa (raw, json) Hash identifier: dmH3y+RXVkydQPDfuSZNoqWUz++e/+AgcT3S3w/gDro= Subject key identifier: FF:8C:90:DD:5C:73:94:B1:BB:8F:FF:97:97:AF:5E:55:B7:11:CF:E9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7FB05B08BA26E204671E1F69F990A5985E852A2E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa Signing time: Sat 29 Nov 2025 03:10:46 +0000 ROA not before: Sat 29 Nov 2025 03:10:46 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.137.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b0:5b:08:ba:26:e2:04:67:1e:1f:69:f9:90:a5:98:5e:85:2a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:46 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=7759d6e8ce659c17818ea1b87b6a4afe856502895bd9bf8d40d10fa300062a63, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:f3:26:6d:cb:64:f6:05:12:c5:87:3c:95: 7f:f8:3e:af:09:d9:15:6a:51:59:ed:bd:57:a4:31: e4:95:8f:61:94:f6:5f:8a:7f:04:fa:4e:99:9b:44: 85:88:6c:dd:24:6d:fb:00:d3:37:7b:8c:1e:8d:91: ae:4b:2f:02:df:95:11:38:e9:b5:67:e0:36:fe:ae: 33:d7:10:2b:d8:c1:d2:4c:61:d8:38:b1:45:0f:44: f9:04:20:63:ff:f0:98:7b:51:c7:5d:cc:93:c3:ed: 99:28:dd:19:02:bc:f6:eb:1e:c8:9b:30:4d:3d:82: e8:bd:af:04:40:80:6b:7a:cf:d1:39:ef:64:3c:09: cd:b4:18:86:48:fe:9a:6d:24:35:02:5b:91:f1:d8: 40:ad:61:21:9d:6b:c3:23:78:cd:5d:bf:b7:86:50: 13:0d:c6:20:18:f8:44:f0:1c:00:7b:ab:50:de:cf: 82:fc:1c:ff:43:de:5b:81:9b:80:64:15:b5:d3:81: 44:28:90:da:0a:8b:1a:da:50:76:d8:b2:aa:92:85: 39:35:51:62:21:09:bf:11:12:db:16:3d:aa:9f:7b: 52:7a:a0:84:b1:10:34:37:4e:b7:d4:20:db:20:a4: 22:66:7a:78:8a:8c:70:4e:34:92:c0:e8:75:58:aa: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8C:90:DD:5C:73:94:B1:BB:8F:FF:97:97:AF:5E:55:B7:11:CF:E9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.137.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5f:d2:86:cc:34:0b:51:1a:65:a6:78:96:7b:90:91:1e:42:ad: f7:37:ac:8b:5f:b4:95:63:ce:25:5b:c7:af:36:6c:10:de:c9: ff:a5:b6:94:b5:1b:c7:c9:50:d8:88:5e:10:7d:74:44:cb:d5: 84:d1:a4:ab:fa:75:f3:8f:7d:f5:7b:e9:84:0f:03:fa:07:d4: 6e:e4:ad:ba:5e:d2:b3:ec:2f:63:c2:b7:b3:c5:df:3c:4a:f7: a7:e5:19:1c:de:67:eb:be:cb:ed:99:2c:16:1b:04:59:18:52: 8b:d2:d2:77:76:08:c3:0f:ed:bb:ce:f8:50:2a:a8:4e:d9:8c: 5f:aa:42:bb:ae:6e:7e:bf:31:77:9b:92:56:f3:42:40:d7:37: ec:80:e6:10:45:07:8d:0a:ed:58:f6:21:da:1f:f3:4a:55:59: 19:fc:d3:94:26:fa:cc:b9:a9:08:99:74:d1:f6:0b:64:86:af: b8:ba:df:eb:67:f8:7d:26:90:c6:c3:09:46:ca:56:0d:cd:8c: 12:35:b4:3c:89:63:d1:48:c4:90:48:49:30:6e:80:0a:e5:a1: 56:ca:ef:2a:ec:1f:51:bc:c2:c0:04:5d:6b:6f:a5:af:14:ec: 45:bb:8d:84:06:67:90:cc:83:1e:4a:0f:01:3c:4b:64:88:90: 84:bf:9b:cd -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUf7BbCLom4gRnHh9p+ZClmF6FKi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwNDZaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDc3NTlkNmU4Y2U2NTljMTc4MThlYTFiODdiNmE0YWZlODU2NTAyODk1YmQ5 YmY4ZDQwZDEwZmEzMDAwNjJhNjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWf8yZty2T2BRLFhzyVf/g+rwnZFWpRWe29V6Qx5JWPYZT2X4p/BPpOmZtE hYhs3SRt+wDTN3uMHo2RrksvAt+VETjptWfgNv6uM9cQK9jB0kxh2DixRQ9E+QQg Y//wmHtRx13Mk8PtmSjdGQK89useyJswTT2C6L2vBECAa3rP0TnvZDwJzbQYhkj+ mm0kNQJbkfHYQK1hIZ1rwyN4zV2/t4ZQEw3GIBj4RPAcAHurUN7Pgvwc/0PeW4Gb gGQVtdOBRCiQ2gqLGtpQdtiyqpKFOTVRYiEJvxES2xY9qp97UnqghLEQNDdOt9Qg 2yCkImZ6eIqMcE40ksDodViqPgsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT/jJDd XHOUsbuP/5eXr15VtxHP6TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODQyYmQ3NGItZTUwNy00N2VhLWJiNGUtMzIwNTcxMzZiMmJkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBi6JADAN BgkqhkiG9w0BAQsFAAOCAQEAX9KGzDQLURplpniWe5CRHkKt9zesi1+0lWPOJVvH rzZsEN7J/6W2lLUbx8lQ2IheEH10RMvVhNGkq/p184999XvphA8D+gfUbuStul7S s+wvY8K3s8XfPEr3p+UZHN5n677L7ZksFhsEWRhSi9LSd3YIww/tu874UCqoTtmM X6pCu65ufr8xd5uSVvNCQNc37IDmEEUHjQrtWPYh2h/zSlVZGfzTlCb6zLmpCJl0 0fYLZIavuLrf62f4fSaQxsMJRspWDc2MEjW0PIlj0UjEkEhJMG6ACuWhVsrvKuwf UbzCwARda2+lrxTsRbuNhAZnkMyDHkoPATxLZIiQhL+bzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:27 2025 by rpki-client