This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa File: bb73d62f-513c-4673-8547-902e7fa2148b.roa (raw, json) Hash identifier: jvmi1JMMTg8S1KNvDSvvTgsO7rweDWRigKDPuW7JW5s= Subject key identifier: BE:72:81:BA:C2:59:5D:F5:90:C1:E8:BA:F5:AD:0E:EB:9A:62:64:B0 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 61DF39B2AB0FBD7B60D24C9F335C54B056F7E84A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa Signing time: Sat 29 Nov 2025 03:10:09 +0000 ROA not before: Sat 29 Nov 2025 03:10:09 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.137.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:df:39:b2:ab:0f:bd:7b:60:d2:4c:9f:33:5c:54:b0:56:f7:e8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:09 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=6d160bc1a1378d41e2c67da70c033fd31a4fe7ea5b6086b665aa720a9a148c05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:46:c0:7c:95:25:41:de:f7:2c:c0:09:ad: 91:c3:60:69:68:fb:c6:e6:bc:92:02:1f:9d:4a:95: 6d:0c:12:3d:d6:98:88:fa:9f:bf:04:1c:be:85:88: a3:00:04:f8:2d:34:c9:42:1d:f9:7d:d6:85:fc:b8: 0a:57:c4:b3:7b:dd:86:c4:48:3e:17:79:8f:27:e5: ff:e6:ef:92:28:62:78:16:7c:da:6f:3a:f5:03:e7: 65:74:54:66:1b:3e:77:80:1d:16:14:71:e5:b6:c1: 6c:86:c8:21:42:8a:f1:aa:23:63:ee:14:bc:c4:5e: a4:1d:87:f6:ae:3c:ad:81:b4:48:11:79:7b:72:b0: d1:8b:d2:d7:39:fa:43:79:62:79:78:94:6f:fc:bf: 70:6c:61:d8:8f:e8:2b:bc:52:b7:78:1c:1e:ef:2a: 7d:68:83:ad:fc:02:de:c8:f5:97:8f:d5:e2:c3:bb: 35:82:9b:8e:eb:68:4f:29:6d:6a:0d:76:6c:f0:ef: 7e:1a:99:a2:a4:a0:6e:91:b5:a4:af:b3:6f:73:ea: c9:6d:27:b1:35:9a:78:65:1b:ef:cb:dc:82:82:33: 02:2d:ac:e3:c0:37:44:36:b5:8d:e2:4a:c4:04:a0: 0c:fe:70:6e:1e:50:d3:ac:5b:ff:b7:6c:23:cf:bd: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:81:BA:C2:59:5D:F5:90:C1:E8:BA:F5:AD:0E:EB:9A:62:64:B0 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.137.0.0/17 Signature Algorithm: sha256WithRSAEncryption 76:c5:5f:69:88:e8:e0:7d:af:df:fe:9d:9a:57:92:98:99:57: 09:69:3f:f2:fb:54:04:79:0b:42:eb:11:65:a6:c2:ca:a8:a0: 97:23:a5:96:17:c6:3b:0a:af:d2:8f:51:ae:7f:98:a5:0d:d2: 72:1d:ae:5f:c5:25:5e:9c:0c:f3:b4:17:2f:b9:12:03:68:9d: 95:5c:f7:44:68:c2:93:cc:65:16:bc:0d:66:64:03:b8:26:7f: 56:1b:af:0a:68:5e:48:47:cf:e2:78:4d:1f:bb:4d:8f:3a:98: 8d:7c:87:4c:e9:6a:51:22:5b:91:27:7e:20:80:0d:2b:c9:9b: 48:ae:61:32:87:86:d7:78:01:e0:3d:73:4b:a5:fb:e9:aa:df: a1:f8:ea:c8:3e:23:0f:7b:5f:12:a6:4c:cd:7e:e6:97:f9:14: 57:cc:58:5a:fb:aa:c3:aa:be:53:eb:f1:1b:98:69:cd:db:a3: 8c:a6:96:32:34:6a:a2:95:62:6f:34:60:19:f5:61:2a:6b:37: c2:3d:11:00:1b:4f:62:a5:86:09:27:09:8f:c4:d4:8b:63:cd: 04:9d:19:23:2d:3f:c8:2d:6e:c2:bc:76:35:04:05:c4:b2:91: 26:1a:a4:60:9e:1d:97:5b:4f:58:b6:38:78:0f:9f:de:b8:69: f5:8a:47:98 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUYd85sqsPvXtg0kyfM1xUsFb36EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwMDlaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDZkMTYwYmMxYTEzNzhkNDFlMmM2N2RhNzBjMDMzZmQzMWE0ZmU3ZWE1YjYw ODZiNjY1YWE3MjBhOWExNDhjMDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwiRsB8lSVB3vcswAmtkcNgaWj7xua8kgIfnUqVbQwSPdaYiPqfvwQcvoWI owAE+C00yUId+X3Whfy4ClfEs3vdhsRIPhd5jyfl/+bvkihieBZ82m869QPnZXRU Zhs+d4AdFhRx5bbBbIbIIUKK8aojY+4UvMRepB2H9q48rYG0SBF5e3Kw0YvS1zn6 Q3lieXiUb/y/cGxh2I/oK7xSt3gcHu8qfWiDrfwC3sj1l4/V4sO7NYKbjutoTylt ag12bPDvfhqZoqSgbpG1pK+zb3PqyW0nsTWaeGUb78vcgoIzAi2s48A3RDa1jeJK xASgDP5wbh5Q06xb/7dsI8+9w2MCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS+coG6 wlld9ZDB6Lr1rQ7rmmJksDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmI3M2Q2MmYtNTEzYy00NjczLTg1NDctOTAyZTdmYTIxNDhiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBy6JADAN BgkqhkiG9w0BAQsFAAOCAQEAdsVfaYjo4H2v3/6dmleSmJlXCWk/8vtUBHkLQusR ZabCyqiglyOllhfGOwqv0o9Rrn+YpQ3Sch2uX8UlXpwM87QXL7kSA2idlVz3RGjC k8xlFrwNZmQDuCZ/VhuvCmheSEfP4nhNH7tNjzqYjXyHTOlqUSJbkSd+IIANK8mb SK5hMoeG13gB4D1zS6X76arfofjqyD4jD3tfEqZMzX7ml/kUV8xYWvuqw6q+U+vx G5hpzdujjKaWMjRqopVibzRgGfVhKms3wj0RABtPYqWGCScJj8TUi2PNBJ0ZIy0/ yC1uwrx2NQQFxLKRJhqkYJ4dl1tPWLY4eA+f3rhp9YpHmA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:43 2025 by rpki-client