This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa File: 0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa (raw, json) Hash identifier: O38OPOx3YDFrSOyJOc06PyeoW+BslZeWuGocuoGeF2k= Subject key identifier: B4:02:F1:62:E4:DA:1E:44:75:13:96:61:17:B7:CE:FB:BA:5A:26:CE Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 12FE1E0C294B05F8E0531E3621EF680DC42AEEB7 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa Signing time: Tue 18 Nov 2025 00:40:30 +0000 ROA not before: Tue 18 Nov 2025 00:40:30 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 193.57.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fe:1e:0c:29:4b:05:f8:e0:53:1e:36:21:ef:68:0d:c4:2a:ee:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 18 00:40:30 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=026e6447c3dd645a7696d5187eb55ea9a98e64cbdb11925ccddd08a3e3d682df, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:2d:e8:eb:d0:7e:06:2e:e2:70:86:8c:d1: 38:d4:c5:af:86:7c:15:5e:b2:20:63:c4:6f:8a:e1: 6e:16:f9:84:41:f0:5a:a1:07:49:e3:5c:c5:f9:8c: ec:66:3b:52:6b:77:7e:49:26:8b:69:93:12:4c:6f: 20:58:03:46:3a:98:21:64:73:07:13:fd:f5:66:c7: 5e:1d:72:ad:69:5d:44:0f:25:8c:02:34:f4:3e:1a: cf:e6:89:8a:cb:99:2d:29:74:0b:3c:45:e1:9e:b5: 8a:a1:08:2e:45:38:4b:49:38:f5:71:05:a2:fb:16: bf:bd:db:13:7e:38:dd:79:a8:6c:4d:95:f9:3a:de: 26:51:2e:1d:0f:92:b6:85:7e:b3:ce:90:d7:37:86: c1:9b:a2:ff:63:2e:2e:30:58:38:a4:2b:5c:d3:a3: 7e:ac:2a:a9:06:45:b2:25:a3:62:f3:f1:d0:37:72: ed:60:d6:13:69:0d:1a:e1:9e:63:a5:3e:14:54:fd: 83:0d:04:80:60:f2:84:52:f9:e3:c6:16:1e:95:f8: 01:81:fd:35:8f:f2:a3:33:29:00:14:f1:e5:80:7f: 9f:bd:9c:1c:82:e3:cc:0f:f5:29:6e:41:01:6a:a5: 34:6c:f6:80:00:36:22:cc:ce:14:32:18:d7:97:00: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:02:F1:62:E4:DA:1E:44:75:13:96:61:17:B7:CE:FB:BA:5A:26:CE X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.170.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:19:b4:a4:90:ea:3d:fc:be:f0:ba:54:ce:69:cd:91:ff:22: c5:b9:2a:28:e0:12:36:87:54:15:c3:6f:75:c0:ed:6d:54:fa: 36:1b:53:dc:92:ef:53:d9:c2:84:72:e0:f5:be:fc:4e:83:27: 38:7e:2f:58:d7:cf:78:a3:86:48:c8:77:de:6c:b2:6d:07:bc: 3f:c4:01:67:e2:81:53:fa:80:6a:95:ab:8b:22:29:dc:93:0a: 09:ad:04:c0:17:cd:49:fb:1b:37:97:f0:26:33:8d:99:8b:a7: c8:96:0a:d2:63:46:7a:a2:20:34:9a:71:8f:15:6d:84:a1:60: e8:02:0a:a3:8d:ae:f3:b5:5a:dc:14:29:aa:47:d6:9b:71:89: e2:95:6c:59:39:dd:c2:da:30:4c:6b:3f:a6:57:a7:27:ee:bf: a2:df:2e:cf:ea:d2:13:17:03:19:3a:27:cb:dc:cf:7e:02:7a: ae:94:4c:ef:8c:54:08:6f:16:3f:34:6c:e4:f9:2e:e7:a6:e7: 02:f8:4a:ed:b3:9a:42:1c:b0:22:83:df:0b:18:e7:97:bd:35: fe:ac:91:13:3a:61:c7:93:73:cb:03:0f:4b:53:9c:ed:e9:29: 76:4d:56:17:06:59:2d:d6:ae:68:ba:f7:4f:b5:40:57:6d:33: d4:9f:8e:5e -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUEv4eDClLBfjgUx42Ie9oDcQq7rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTgwMDQwMzBaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDAyNmU2NDQ3YzNkZDY0NWE3Njk2ZDUxODdlYjU1ZWE5YTk4ZTY0Y2JkYjEx OTI1Y2NkZGQwOGEzZTNkNjgyZGYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDwLejr0H4GLuJwhozRONTFr4Z8FV6yIGPEb4rhbhb5hEHwWqEHSeNcxfmM 7GY7Umt3fkkmi2mTEkxvIFgDRjqYIWRzBxP99WbHXh1yrWldRA8ljAI09D4az+aJ isuZLSl0CzxF4Z61iqEILkU4S0k49XEFovsWv73bE3443XmobE2V+TreJlEuHQ+S toV+s86Q1zeGwZui/2MuLjBYOKQrXNOjfqwqqQZFsiWjYvPx0Ddy7WDWE2kNGuGe Y6U+FFT9gw0EgGDyhFL548YWHpX4AYH9NY/yozMpABTx5YB/n72cHILjzA/1KW5B AWqlNGz2gAA2IszOFDIY15cAyIsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS0AvFi 5NoeRHUTlmEXt877ulomzjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MGNkY2U0M2ItMGVkOS00NmQwLWJmMTMtZTZkOTlhMjZlMDk3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5qjAN BgkqhkiG9w0BAQsFAAOCAQEAfBm0pJDqPfy+8LpUzmnNkf8ixbkqKOASNodUFcNv dcDtbVT6NhtT3JLvU9nChHLg9b78ToMnOH4vWNfPeKOGSMh33myybQe8P8QBZ+KB U/qAapWriyIp3JMKCa0EwBfNSfsbN5fwJjONmYunyJYK0mNGeqIgNJpxjxVthKFg 6AIKo42u87Va3BQpqkfWm3GJ4pVsWTndwtowTGs/plenJ+6/ot8uz+rSExcDGTon y9zPfgJ6rpRM74xUCG8WPzRs5Pku56bnAvhK7bOaQhywIoPfCxjnl701/qyREzph x5NzywMPS1Oc7ekpdk1WFwZZLdauaLr3T7VAV20z1J+OXg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:51 2025 by rpki-client