This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json) Hash identifier: Mo6sioG+MqoRM6tFaNLVwRcnOfbZoTntyu0H9Pp3+7c= Subject key identifier: F4:6D:01:53:01:3E:35:C1:FB:50:2A:9D:AC:C9:58:05:EE:41:C5:0A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5019DA701FB03D3921DEC6AB2318D7C8D15D320D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa Signing time: Sat 29 Nov 2025 03:10:07 +0000 ROA not before: Sat 29 Nov 2025 03:10:07 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.137.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:19:da:70:1f:b0:3d:39:21:de:c6:ab:23:18:d7:c8:d1:5d:32:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:10:07 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=5d50dda91f324f178dee9f3bacd7e576a26a6f5b79735b6cc1587c153965eddd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:a7:04:27:a5:70:84:21:8d:7a:90:64:fe: 84:ae:fb:1a:d5:55:b1:c3:85:f7:56:36:e0:f4:59: a9:50:d7:74:b5:dd:d5:f2:9a:ec:68:b1:23:2b:d9: 9e:ce:d8:d0:7a:80:2c:2d:5e:9e:75:4f:96:18:71: 4c:42:4e:39:59:40:5b:bf:b0:e1:0c:06:78:46:03: 7d:77:44:45:e6:98:a9:c6:09:b5:4c:63:99:b1:7f: 38:fa:85:18:be:49:fc:84:2f:63:03:df:9d:7a:17: 2b:b1:c3:98:5f:a5:93:18:06:9a:47:be:8c:fc:8b: bd:b5:18:52:da:49:37:5d:13:63:4f:86:30:b3:f3: 14:92:7f:30:20:0a:3d:fc:80:5f:27:21:2b:7e:cc: d0:66:42:26:d5:3d:61:63:20:1a:e4:3b:2d:e7:e7: ca:6c:72:71:80:44:ee:24:c8:1c:65:92:90:bc:0f: d3:b9:be:9b:2e:a4:14:f8:c9:f9:12:6c:8d:65:8c: 53:99:1c:a8:69:68:50:cb:96:a0:a7:64:bb:20:1d: 80:26:ce:65:78:b7:15:61:74:f2:71:18:3a:d7:a5: 95:42:95:19:1f:67:1a:de:d1:7f:30:1c:7c:cf:dc: 27:e0:4f:45:63:1b:5f:34:17:59:9a:8e:9c:fe:9d: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6D:01:53:01:3E:35:C1:FB:50:2A:9D:AC:C9:58:05:EE:41:C5:0A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.137.204.0/22 Signature Algorithm: sha256WithRSAEncryption 05:24:3e:78:45:3e:74:99:35:98:a0:f6:2c:dd:01:2f:88:2d: 91:58:07:da:1a:6e:c8:27:59:10:24:e7:b8:c6:6f:d1:69:e6: 8c:94:d7:6e:2b:2b:b8:f7:2e:97:ab:3b:77:f4:2d:db:65:d7: d1:75:dd:4f:d6:66:1d:0e:1c:0a:c3:b6:c4:27:80:6c:f0:d8: 3b:85:c5:ba:91:5b:3e:28:82:8a:ad:fd:d5:23:59:61:b8:e8: 8e:2b:b7:28:16:e5:7f:34:1b:9c:61:a2:ce:a8:04:a0:77:73: c2:74:02:d8:be:66:a5:94:74:cf:d9:f8:c5:03:d5:9d:e3:b8: 88:9c:98:2d:ad:f7:06:64:54:a6:e7:b6:b0:34:47:64:3c:ee: 55:cc:d5:28:8d:27:b0:d5:f7:b2:6d:6c:7d:c5:ac:ee:2d:e8: dd:07:0c:7a:5b:87:83:dc:07:2c:fa:d4:06:5e:7f:63:45:88: 04:40:87:1d:2c:56:43:c0:f9:d9:92:71:6b:e7:ac:da:8a:78: 64:8f:c4:a9:e1:0d:ec:d1:b3:43:8b:7e:bc:2e:16:74:a8:27: 9c:fc:7c:fa:fe:de:1f:4c:54:d4:fb:b8:93:1a:fc:b8:f4:38: 01:86:7e:6f:db:0d:c9:df:01:b2:af:83:5d:0b:84:be:84:86: 83:83:f4:9d -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUUBnacB+wPTkh3sarIxjXyNFdMg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzEwMDdaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDVkNTBkZGE5MWYzMjRmMTc4ZGVlOWYzYmFjZDdlNTc2YTI2YTZmNWI3OTcz NWI2Y2MxNTg3YzE1Mzk2NWVkZGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOqpwQnpXCEIY16kGT+hK77GtVVscOF91Y24PRZqVDXdLXd1fKa7GixIyvZ ns7Y0HqALC1ennVPlhhxTEJOOVlAW7+w4QwGeEYDfXdEReaYqcYJtUxjmbF/OPqF GL5J/IQvYwPfnXoXK7HDmF+lkxgGmke+jPyLvbUYUtpJN10TY0+GMLPzFJJ/MCAK PfyAXychK37M0GZCJtU9YWMgGuQ7LefnymxycYBE7iTIHGWSkLwP07m+my6kFPjJ +RJsjWWMU5kcqGloUMuWoKdkuyAdgCbOZXi3FWF08nEYOtellUKVGR9nGt7RfzAc fM/cJ+BPRWMbXzQXWZqOnP6dHIUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT0bQFT AT41wftQKp2syVgF7kHFCjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmRjODMxZWItMDdjMi00N2JiLWE3M2QtMTc3YWJjOWIxNGMwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6JzDAN BgkqhkiG9w0BAQsFAAOCAQEABSQ+eEU+dJk1mKD2LN0BL4gtkVgH2hpuyCdZECTn uMZv0WnmjJTXbisruPcul6s7d/Qt22XX0XXdT9ZmHQ4cCsO2xCeAbPDYO4XFupFb PiiCiq391SNZYbjojiu3KBblfzQbnGGizqgEoHdzwnQC2L5mpZR0z9n4xQPVneO4 iJyYLa33BmRUpue2sDRHZDzuVczVKI0nsNX3sm1sfcWs7i3o3QcMeluHg9wHLPrU Bl5/Y0WIBECHHSxWQ8D52ZJxa+es2op4ZI/EqeEN7NGzQ4t+vC4WdKgnnPx8+v7e H0xU1Pu4kxr8uPQ4AYZ+b9sNyd8Bsq+DXQuEvoSGg4P0nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:31 2025 by rpki-client