This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa File: d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa (raw, json) Hash identifier: iz1IRyO24RQ4KTExkPEsVBOb4ztvgnwIu6mgm3rYVeU= Subject key identifier: 4A:09:E7:9B:FB:82:F7:47:3F:1C:D1:E8:EA:A9:9B:EE:1E:69:53:FD Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 20A6CA81454FCFF01D3D3E594D3B048FF7C6B276 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa Signing time: Sat 29 Nov 2025 03:00:12 +0000 ROA not before: Sat 29 Nov 2025 03:00:12 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 46.137.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a6:ca:81:45:4f:cf:f0:1d:3d:3e:59:4d:3b:04:8f:f7:c6:b2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Nov 29 03:00:12 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=9c5761c17dfb74f8396f57b080815794599b9b366c3ef6ef0841263d677d7b6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:b3:f1:82:2f:b5:b0:40:24:cd:4f:3a:34: 0b:3f:99:16:97:cd:a8:e6:23:40:a3:05:3a:0c:89: 04:f1:8b:a8:09:60:a7:a8:f4:7c:21:1e:02:7b:30: 3a:f0:bd:87:10:2b:95:7a:f5:b1:c4:5c:ad:1e:c5: 11:41:78:19:39:73:ad:db:ed:30:80:52:6f:6d:b4: 47:6b:10:9d:0f:4c:70:38:b6:c0:e0:b2:f2:e2:9d: 02:3e:2a:43:46:10:27:45:b1:6f:e5:82:5d:88:cf: 40:27:c5:81:9a:dc:c7:da:79:43:a6:05:00:4c:84: 71:60:0b:cd:5a:88:6d:9b:b1:92:ba:53:91:78:54: 00:3c:dd:f3:cf:12:75:96:26:2e:d6:d9:ca:5c:ea: a6:6e:2b:46:3d:b3:b3:4d:53:e1:e7:22:e2:d0:00: fa:fd:84:3c:c8:6d:78:33:fa:75:8a:93:e4:e7:fa: 6d:85:a0:51:1c:2c:8b:20:72:49:92:61:03:44:c7: 9d:83:96:5c:46:b2:fc:df:97:1a:bc:79:18:80:8d: f0:55:9f:b1:97:83:0b:a2:18:1f:39:5f:86:c4:99: 28:82:a5:9e:5b:17:64:7e:7b:60:18:e9:c2:34:4c: 05:b8:1e:54:a9:58:c5:b0:58:08:f4:16:49:f1:85: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:09:E7:9B:FB:82:F7:47:3F:1C:D1:E8:EA:A9:9B:EE:1E:69:53:FD X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.137.224.0/20 Signature Algorithm: sha256WithRSAEncryption 01:eb:fc:71:2e:c9:c9:7e:51:09:d7:81:49:05:cb:c5:41:c6: c1:15:c4:16:28:78:12:a9:cd:a2:3c:f2:d8:5a:10:9a:43:4b: 20:11:3f:bb:dd:fe:66:b2:aa:5e:18:e6:0d:9d:ca:d3:7a:6e: 34:ca:22:e0:cc:7c:bd:1d:3f:cc:02:0a:49:d5:64:1c:23:04: 82:cc:02:57:3f:c2:0c:4b:a7:de:c8:ed:f2:87:51:27:ad:d5: 8e:ab:0a:46:4c:83:59:e1:53:cb:ad:dd:54:4e:d1:c8:52:42: 7c:1f:91:e2:fc:a9:6d:9f:54:b3:d2:8d:9f:b8:72:8d:5d:68: 18:8b:8c:d7:b5:88:96:34:6d:2d:55:59:c6:6e:8b:55:07:f0: a1:b5:14:45:d6:5d:8d:c2:53:9b:78:ac:34:63:7a:8c:d8:17: 53:59:d3:e1:73:bc:aa:c6:a3:f9:b3:1f:22:d3:22:f6:bc:d9: ea:70:cc:71:53:a0:87:f3:d2:21:d9:ab:ae:c9:7a:86:fa:76: 01:37:7a:51:27:47:0e:9e:3a:a5:82:7a:e0:70:72:b0:30:88: 20:95:c7:5b:c8:8b:30:41:6d:a6:3a:43:26:ca:fe:fa:d4:b6: fc:12:e8:1e:f2:3e:39:1f:4d:63:e9:25:a3:55:7b:58:72:d3: 7e:b8:03:01 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUIKbKgUVPz/AdPT5ZTTsEj/fGsnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTExMjkwMzAwMTJaFw0yNjAyMjcyMzU5NTlaMHoxSTBHBgNV BAUTQDljNTc2MWMxN2RmYjc0ZjgzOTZmNTdiMDgwODE1Nzk0NTk5YjliMzY2YzNl ZjZlZjA4NDEyNjNkNjc3ZDdiNmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMYs/GCL7WwQCTNTzo0Cz+ZFpfNqOYjQKMFOgyJBPGLqAlgp6j0fCEeAnsw OvC9hxArlXr1scRcrR7FEUF4GTlzrdvtMIBSb220R2sQnQ9McDi2wOCy8uKdAj4q Q0YQJ0Wxb+WCXYjPQCfFgZrcx9p5Q6YFAEyEcWALzVqIbZuxkrpTkXhUADzd888S dZYmLtbZylzqpm4rRj2zs01T4eci4tAA+v2EPMhteDP6dYqT5Of6bYWgURwsiyBy SZJhA0THnYOWXEay/N+XGrx5GICN8FWfsZeDC6IYHzlfhsSZKIKlnlsXZH57YBjp wjRMBbgeVKlYxbBYCPQWSfGFDQcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRKCeeb +4L3Rz8c0ejqqZvuHmlT/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDgzNjRjMDYtYjc1ZS00ZDg1LThjOGMtYWZhZDRkZjdjZDFmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6J4DAN BgkqhkiG9w0BAQsFAAOCAQEAAev8cS7JyX5RCdeBSQXLxUHGwRXEFih4EqnNojzy 2FoQmkNLIBE/u93+ZrKqXhjmDZ3K03puNMoi4Mx8vR0/zAIKSdVkHCMEgswCVz/C DEun3sjt8odRJ63VjqsKRkyDWeFTy63dVE7RyFJCfB+R4vypbZ9Us9KNn7hyjV1o GIuM17WIljRtLVVZxm6LVQfwobUURdZdjcJTm3isNGN6jNgXU1nT4XO8qsaj+bMf ItMi9rzZ6nDMcVOgh/PSIdmrrsl6hvp2ATd6USdHDp46pYJ64HBysDCIIJXHW8iL MEFtpjpDJsr++tS2/BLoHvI+OR9NY+klo1V7WHLTfrgDAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:09 2025 by rpki-client