This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa File: be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa (raw, json) Hash identifier: oX0AD4Ol/dB9WP/etVY22UNHUN8gPfckN+0hfnwdWjY= Subject key identifier: 53:9E:C8:6E:71:F7:BA:E3:7F:A9:28:69:85:75:3D:51:BE:1F:A1:24 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 417D5A5DE25EFD38B0BBCDE8C6662A4D7405CBBA Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa Signing time: Sat 29 Nov 2025 03:00:28 +0000 ROA not before: Sat 29 Nov 2025 03:00:28 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.137.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7d:5a:5d:e2:5e:fd:38:b0:bb:cd:e8:c6:66:2a:4d:74:05:cb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:28 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=dea3847d01e0330be19672e1e47c68cd45cb65a168ff023659e889347c03a7ad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:15:60:8d:d1:65:92:c8:92:c6:b4:04:f3:5f: 46:07:db:a4:79:51:80:a4:de:db:62:9d:2a:56:9a: b7:d3:98:fd:d3:b7:2b:53:67:09:a4:8f:51:6b:41: 9b:a0:08:51:a3:32:41:51:78:b5:5d:80:dc:65:b1: 29:28:43:98:63:16:c2:49:53:22:c8:31:dc:c7:9b: 4a:4d:b1:46:64:73:55:4c:1c:5d:fa:16:a1:41:0c: 31:bc:0c:0e:a0:7b:aa:04:71:f6:69:f5:02:65:32: 45:5e:27:7b:1c:c3:fe:d9:97:ba:32:e0:f6:e1:cd: 17:dc:54:f3:4d:1c:e2:32:95:b2:84:43:ec:d9:da: 66:20:20:8a:d1:2a:18:32:be:60:a9:f4:b1:12:b5: 8c:fc:bb:90:62:aa:44:7e:1e:c2:e6:e9:cd:82:d9: 78:3d:02:05:cb:4d:f9:bd:61:88:5c:18:54:13:13: 2e:2e:5b:ea:a9:a8:d1:ec:3e:21:78:84:00:36:06: ef:3c:81:8d:0a:4f:a7:e6:34:c1:4d:d7:1e:b5:0f: 4a:20:b4:09:1a:48:26:b2:cd:85:55:6f:86:8b:48: f9:46:3f:1d:20:0e:89:85:e8:d8:f9:68:5a:6e:fd: 9d:c5:76:34:d0:d6:98:c4:8a:ed:6b:81:cf:f4:84: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:C8:6E:71:F7:BA:E3:7F:A9:28:69:85:75:3D:51:BE:1F:A1:24 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.137.96.0/19 Signature Algorithm: sha256WithRSAEncryption a6:76:07:85:34:33:20:e8:c3:b6:52:3c:6e:bc:eb:ce:aa:39: ef:5e:fa:25:82:c3:bb:de:9e:40:e3:d0:da:0f:5c:59:ef:33: cb:b9:50:22:fd:39:29:4a:a9:f7:fd:95:05:e0:76:f1:b5:0a: 3d:40:89:e3:66:a3:a4:74:f2:4b:50:db:b4:ce:7f:89:b5:b0: f9:bc:fc:dd:d2:8b:54:8b:26:be:c6:83:a6:90:eb:d6:4c:d9: 0e:d9:b9:5d:ef:49:e9:38:d7:ab:ef:c8:25:fa:e0:95:dc:f9: 33:eb:0a:6a:e0:02:37:e4:28:c1:25:71:23:45:f0:2c:b7:55: e2:bd:cc:3e:76:d1:4b:ce:2f:6d:d8:e0:64:48:69:ba:59:31: 90:eb:d9:2e:1f:cb:ad:c4:50:33:4e:14:02:a8:a0:bf:56:07: 67:97:87:27:0a:b3:88:11:c5:71:87:45:e4:a6:72:31:1c:a0: 71:d1:14:e2:0a:30:89:31:4e:87:58:7d:ab:20:28:a1:4b:ef: 21:79:ca:f1:28:7b:e2:60:32:36:73:0c:2b:97:1f:09:8e:8d: a3:a4:6e:b4:1f:31:22:a9:b1:e9:e9:25:12:49:a6:16:cc:e1: d7:0f:13:d4:b7:db:94:89:8d:6b:2a:26:cd:9c:d7:8e:2f:00: c3:2f:44:5e -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUQX1aXeJe/Tiwu83oxmYqTXQFy7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMjhaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQGRlYTM4NDdkMDFlMDMzMGJlMTk2NzJlMWU0N2M2OGNkNDVjYjY1YTE2OGZm MDIzNjU5ZTg4OTM0N2MwM2E3YWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMVYI3RZZLIksa0BPNfRgfbpHlRgKTe22KdKlaat9OY/dO3K1NnCaSPUWtB m6AIUaMyQVF4tV2A3GWxKShDmGMWwklTIsgx3MebSk2xRmRzVUwcXfoWoUEMMbwM DqB7qgRx9mn1AmUyRV4nexzD/tmXujLg9uHNF9xU800c4jKVsoRD7NnaZiAgitEq GDK+YKn0sRK1jPy7kGKqRH4ewubpzYLZeD0CBctN+b1hiFwYVBMTLi5b6qmo0ew+ IXiEADYG7zyBjQpPp+Y0wU3XHrUPSiC0CRpIJrLNhVVvhotI+UY/HSAOiYXo2Plo Wm79ncV2NNDWmMSK7WuBz/SEnxkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRTnshu cfe643+pKGmFdT1Rvh+hJDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmU2YjdjYjAtM2M1NS00YTY1LWIwMGEtNDViYzEzMTA4NjhiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBS6JYDAN BgkqhkiG9w0BAQsFAAOCAQEApnYHhTQzIOjDtlI8brzrzqo57176JYLDu96eQOPQ 2g9cWe8zy7lQIv05KUqp9/2VBeB28bUKPUCJ42ajpHTyS1DbtM5/ibWw+bz83dKL VIsmvsaDppDr1kzZDtm5Xe9J6TjXq+/IJfrgldz5M+sKauACN+QowSVxI0XwLLdV 4r3MPnbRS84vbdjgZEhpulkxkOvZLh/LrcRQM04UAqigv1YHZ5eHJwqziBHFcYdF 5KZyMRygcdEU4gowiTFOh1h9qyAooUvvIXnK8Sh74mAyNnMMK5cfCY6No6RutB8x Iqmx6eklEkmmFszh1w8T1LfblImNayomzZzXji8Awy9EXg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:50 2025 by rpki-client