This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa File: 9386a656-dfeb-4ebf-847d-bd931e09dd13.roa (raw, json) Hash identifier: t/ymq8lzWMyZh/DSbWb3b9vVtPhTBCxuzA2f2vaZrck= Subject key identifier: 69:7E:A4:01:4D:A6:F7:EF:BA:F5:39:8B:2D:01:32:74:F0:61:4C:E5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1AE2095EA03A64503722D33BE8013EFE47AF892F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa Signing time: Wed 10 Dec 2025 06:01:02 +0000 ROA not before: Wed 10 Dec 2025 06:01:02 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 176.32.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e2:09:5e:a0:3a:64:50:37:22:d3:3b:e8:01:3e:fe:47:af:89:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:01:02 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=378e498c384d41b07286f8bacf8c01278e8dd2eefea93d7db8e8477a0bdde56c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:29:0b:b6:d4:82:e8:b6:d4:4c:9e:b7:ef: 17:ce:83:78:56:7d:65:da:47:0f:99:06:23:5d:11: 69:05:57:52:6b:04:52:d7:aa:58:c0:73:04:60:84: f9:4d:d9:6c:16:bd:a1:1b:d4:73:e2:76:95:23:9b: bd:18:0a:29:fa:74:cd:79:7a:a0:b1:a9:dc:8a:42: f0:2a:0d:b0:d6:28:04:24:ae:19:75:75:84:37:17: f1:64:f1:71:d3:9d:7e:a8:5a:c9:47:b5:81:fa:f6: ff:df:a3:e6:1a:3b:85:1e:67:ae:1d:16:55:21:52: 69:e9:62:45:79:67:ec:89:59:6b:40:be:5e:d0:b3: 77:c4:c4:00:43:bf:11:e5:0f:ac:5c:9e:49:e9:52: e5:10:99:75:b6:c0:a9:0f:f0:1d:ef:5b:49:54:c3: 88:d4:5b:ad:b7:cd:21:5a:77:b9:aa:f4:36:cc:57: e5:50:05:c3:c3:e8:21:cc:1a:09:9c:1e:95:6b:51: 2a:63:6c:dd:f8:42:8f:36:0d:25:c2:d9:d6:f0:bc: 5e:68:45:6a:73:64:a7:e5:21:58:b7:ca:e6:02:d8: 66:f7:97:d6:cd:fa:79:85:73:7b:0d:0e:4f:2b:c9: 7e:e2:ef:04:b9:70:6a:12:ff:af:d6:6e:fa:0b:8a: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7E:A4:01:4D:A6:F7:EF:BA:F5:39:8B:2D:01:32:74:F0:61:4C:E5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.32.96.0/21 Signature Algorithm: sha256WithRSAEncryption 83:cf:53:ac:63:05:6b:9e:31:79:4e:1a:35:33:eb:e0:c0:e1: 11:a9:af:04:04:f0:45:fd:94:97:fb:24:53:98:9b:f9:3f:e7: 19:80:7c:98:de:90:a7:0f:9d:fe:b2:14:2c:9a:1f:82:d6:45: 18:73:47:ca:06:08:22:3c:71:7e:ee:5e:e2:35:a6:59:78:6d: eb:1b:9b:fb:aa:54:4b:05:6c:2e:88:94:44:ac:be:91:72:5f: d9:9a:04:11:32:bf:9d:88:ab:37:d2:f7:fa:2c:07:8d:1c:f2: 35:b4:ce:d6:d8:1c:31:8b:17:44:bf:93:b4:1a:3a:ba:cb:2d: 2c:94:81:5a:67:d3:5d:f5:a2:66:d5:e9:3a:44:1c:7e:43:81: 9f:ec:a2:7f:47:0a:42:97:60:56:a2:85:48:e7:de:f5:e3:a8: a4:91:46:ff:f3:cc:41:f1:ac:fc:7d:b8:44:25:cd:3c:22:e7: 8a:f3:92:2f:b3:a9:db:3c:14:6e:a6:0a:c6:f0:36:a7:f4:4c: 95:af:de:63:f1:bf:36:a1:89:71:73:34:d9:c9:ca:13:2b:6d: f0:17:4a:8b:8e:15:cb:54:a6:5b:30:4a:f5:4d:c5:a2:ac:22: be:d5:76:09:9a:7c:11:5d:1e:4a:64:86:0d:37:15:da:80:94: d2:90:f1:23 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUGuIJXqA6ZFA3ItM76AE+/keviS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAxMDJaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDM3OGU0OThjMzg0ZDQxYjA3Mjg2ZjhiYWNmOGMwMTI3OGU4ZGQyZWVmZWE5 M2Q3ZGI4ZTg0NzdhMGJkZGU1NmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKYKQu21ILottRMnrfvF86DeFZ9ZdpHD5kGI10RaQVXUmsEUteqWMBzBGCE +U3ZbBa9oRvUc+J2lSObvRgKKfp0zXl6oLGp3IpC8CoNsNYoBCSuGXV1hDcX8WTx cdOdfqhayUe1gfr2/9+j5ho7hR5nrh0WVSFSaeliRXln7IlZa0C+XtCzd8TEAEO/ EeUPrFyeSelS5RCZdbbAqQ/wHe9bSVTDiNRbrbfNIVp3uar0NsxX5VAFw8PoIcwa CZwelWtRKmNs3fhCjzYNJcLZ1vC8XmhFanNkp+UhWLfK5gLYZveX1s36eYVzew0O TyvJfuLvBLlwahL/r9Zu+guKEQ0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRpfqQB Tab377r1OYstATJ08GFM5TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OTM4NmE2NTYtZGZlYi00ZWJmLTg0N2QtYmQ5MzFlMDlkZDEzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AgYDAN BgkqhkiG9w0BAQsFAAOCAQEAg89TrGMFa54xeU4aNTPr4MDhEamvBATwRf2Ul/sk U5ib+T/nGYB8mN6Qpw+d/rIULJofgtZFGHNHygYIIjxxfu5e4jWmWXht6xub+6pU SwVsLoiURKy+kXJf2ZoEETK/nYirN9L3+iwHjRzyNbTO1tgcMYsXRL+TtBo6usst LJSBWmfTXfWiZtXpOkQcfkOBn+yif0cKQpdgVqKFSOfe9eOopJFG//PMQfGs/H24 RCXNPCLnivOSL7Op2zwUbqYKxvA2p/RMla/eY/G/NqGJcXM02cnKEytt8BdKi44V y1SmWzBK9U3FoqwivtV2CZp8EV0eSmSGDTcV2oCU0pDxIw== -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:32 2026 by rpki-client