This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa File: 9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json) Hash identifier: 1iL/b0cg25/NeZYr9w3a2zasiTg1KnjqSaoA3Ed6slY= Subject key identifier: E4:F6:28:11:D1:24:83:7D:BA:E3:E0:0F:67:94:A6:55:A8:2A:14:A3 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1B839FF0D203A1A18A8ECB313B70769C4024BF54 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa Signing time: Thu 11 Dec 2025 00:00:08 +0000 ROA not before: Thu 11 Dec 2025 00:00:08 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 79.125.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:83:9f:f0:d2:03:a1:a1:8a:8e:cb:31:3b:70:76:9c:40:24:bf:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 11 00:00:08 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=af9bafe74f7cf57864946a3ea98e08ad04c4e8d4175c07a99a735a105c74aab9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:27:da:7a:72:a0:e2:21:bb:ef:4f:21:d7: 09:d9:5b:c9:ab:5a:29:58:97:19:ac:c5:39:06:39: f2:42:01:7d:71:61:6f:d8:a8:77:d5:1a:7b:84:28: 28:57:88:0d:92:9d:c8:d2:d2:e9:70:ff:62:5a:9f: 70:93:c1:46:c7:13:24:d3:56:df:45:cf:31:46:44: 2d:dd:fc:bb:09:96:46:22:9f:ad:bf:11:02:33:af: 05:f7:f1:df:c0:d6:d6:fb:9a:87:95:ed:b9:ea:27: b5:e8:e6:05:83:15:e3:81:1a:e3:14:18:71:02:12: ea:ae:a1:64:73:e3:94:d7:84:81:93:e2:82:1e:61: 8b:fe:e8:3d:5c:38:d6:e6:69:70:44:80:48:69:1e: 8c:e5:fc:17:8f:e5:26:11:5a:32:6f:75:f3:cd:ed: bf:2c:1d:71:9d:9c:8a:ba:6b:3f:bd:4b:b3:b5:46: 06:a3:f8:f6:49:8a:34:21:3f:23:bd:6e:3c:fa:9b: 56:f2:d1:88:68:b1:fd:5e:19:3b:88:67:44:af:04: 2e:e1:b6:f6:0c:c0:1e:df:42:b0:69:e1:80:e3:bf: 70:d8:fb:01:4d:50:2a:a8:0a:15:41:f6:4b:93:73: ae:59:ae:b1:4c:8f:ba:86:f9:25:19:7b:5d:8e:40: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F6:28:11:D1:24:83:7D:BA:E3:E0:0F:67:94:A6:55:A8:2A:14:A3 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.125.112.0/20 Signature Algorithm: sha256WithRSAEncryption a0:1c:73:b5:b0:c3:32:0d:7e:5c:8b:82:8e:ae:12:90:a2:b1: 08:bd:27:9b:ca:56:3a:7a:60:c6:4c:72:71:ee:77:e6:78:a2: 8a:db:9c:d5:a2:0f:42:e6:ed:0a:2a:a4:ea:b1:eb:a2:bc:38: 85:45:99:40:c8:d2:6e:b3:1e:a8:69:16:81:f3:c0:62:66:9b: d8:79:01:b0:8f:eb:2c:dc:58:5d:3f:58:08:4f:59:3f:93:04: 2a:a7:28:1a:73:72:b9:87:78:a4:8f:0a:d4:4d:ff:88:7b:e7: d8:7d:2a:9d:e9:be:29:f8:05:3c:ff:bf:4f:38:9b:99:e1:74: 6a:e5:1a:2e:40:c7:29:21:d3:bd:a1:36:f4:92:0f:9f:1c:c0: ed:57:b4:20:2c:11:e5:16:89:ed:2a:8a:ac:b6:e8:55:5c:39: 61:e7:61:ba:39:8e:9d:19:04:51:2e:4a:c8:b0:2f:6d:25:46: 4e:79:35:55:62:9a:1a:69:7b:c6:2f:4a:79:d2:a5:0b:22:e0: b8:4d:b0:93:79:7c:bb:77:4a:8a:8a:dd:59:e9:27:12:0f:d1: b4:00:34:42:a3:23:58:4e:57:3d:fb:ab:34:18:38:de:5f:2a: 04:e3:23:85:47:e4:16:74:54:a3:bb:92:1a:6c:70:c4:eb:e7: 47:0a:dd:3f -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUG4Of8NIDoaGKjssxO3B2nEAkv1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTEwMDAwMDhaFw0yNjAzMTEyMzU5NTlaMHoxSTBHBgNV BAUTQGFmOWJhZmU3NGY3Y2Y1Nzg2NDk0NmEzZWE5OGUwOGFkMDRjNGU4ZDQxNzVj MDdhOTlhNzM1YTEwNWM3NGFhYjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnKJ9p6cqDiIbvvTyHXCdlbyataKViXGazFOQY58kIBfXFhb9iod9Uae4Qo KFeIDZKdyNLS6XD/YlqfcJPBRscTJNNW30XPMUZELd38uwmWRiKfrb8RAjOvBffx 38DW1vuah5XtueontejmBYMV44Ea4xQYcQIS6q6hZHPjlNeEgZPigh5hi/7oPVw4 1uZpcESASGkejOX8F4/lJhFaMm91883tvywdcZ2cirprP71Ls7VGBqP49kmKNCE/ I71uPPqbVvLRiGix/V4ZO4hnRK8ELuG29gzAHt9CsGnhgOO/cNj7AU1QKqgKFUH2 S5NzrlmusUyPuob5JRl7XY5AmoUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTk9igR 0SSDfbrj4A9nlKZVqCoUozAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWVlMGE0OGItYmE4OC00NjVlLTllNDItZDA3MzIzNTFmNDZlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBE99cDAN BgkqhkiG9w0BAQsFAAOCAQEAoBxztbDDMg1+XIuCjq4SkKKxCL0nm8pWOnpgxkxy ce535niiituc1aIPQubtCiqk6rHrorw4hUWZQMjSbrMeqGkWgfPAYmab2HkBsI/r LNxYXT9YCE9ZP5MEKqcoGnNyuYd4pI8K1E3/iHvn2H0qnem+KfgFPP+/TzibmeF0 auUaLkDHKSHTvaE29JIPnxzA7Ve0ICwR5RaJ7SqKrLboVVw5YedhujmOnRkEUS5K yLAvbSVGTnk1VWKaGml7xi9KedKlCyLguE2wk3l8u3dKiordWeknEg/RtAA0QqMj WE5XPfurNBg43l8qBOMjhUfkFnRUo7uSGmxwxOvnRwrdPw== -----END CERTIFICATE-----Generated at Wed Dec 17 11:21:30 2025 by rpki-client