This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa File: 16337db0-8420-40f0-982b-9d50c20f4e08.roa (raw, json) Hash identifier: z/GJl3/UnAyYAkj1d26sTBRt2+XluPMpuLHNxZDOW4g= Subject key identifier: 28:26:F3:D4:39:B8:CE:96:D1:A4:03:32:9B:2D:3E:E2:C1:82:AE:65 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 14E70F6764DFAB6A82AD352190484C9F0E7ABB58 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa Signing time: Sat 15 Nov 2025 06:50:31 +0000 ROA not before: Sat 15 Nov 2025 06:50:31 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 193.57.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e7:0f:67:64:df:ab:6a:82:ad:35:21:90:48:4c:9f:0e:7a:bb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:31 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=1e86d82c71ee79d43f247b735d3878e923c967607fa91698452f60b3d9c34dd7, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:07:47:03:bb:35:11:a4:14:47:99:8a:b1: e1:00:ed:20:0a:d0:11:55:e2:86:52:ab:c8:45:ae: 9f:8b:cd:a3:19:71:c7:78:44:36:1b:c6:0d:32:69: 0b:b5:a7:10:c5:5a:4c:d1:ad:9e:c0:0d:e7:b4:1e: 6f:c9:cb:33:4f:fa:6d:b9:e8:4f:d9:b8:c8:26:63: cc:2d:1e:67:52:5c:e1:02:83:fe:ed:cd:c3:fd:43: 58:7a:95:52:af:c7:0c:01:90:e3:96:90:a0:bc:50: 35:ed:e0:4e:01:c8:b5:ea:ec:a1:63:30:b3:79:4f: db:01:d5:01:73:7b:38:da:76:b7:a1:fc:1d:d0:df: 23:53:27:01:6d:52:1e:67:b1:c4:ed:41:1e:c0:af: 0b:d0:4a:5a:d9:be:c7:5d:ba:82:22:f2:51:f5:6a: fd:0d:e7:cf:33:ae:ee:22:f2:93:ea:1d:b9:0c:2c: 08:ae:ad:9d:94:8e:da:89:8b:03:62:d4:9b:1d:80: 50:b5:bc:94:b2:9a:7f:99:9d:05:42:05:af:f3:06: 2c:bf:b7:d9:89:d5:44:f5:44:2d:32:00:ed:1c:33: 5d:b0:b5:8f:4e:d6:a7:22:5d:46:52:8e:b4:3f:49: f7:e3:f2:41:df:cf:36:11:b8:32:7f:f5:f0:ea:25: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:F3:D4:39:B8:CE:96:D1:A4:03:32:9B:2D:3E:E2:C1:82:AE:65 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.254.0/23 Signature Algorithm: sha256WithRSAEncryption 55:e1:cc:43:45:c6:be:49:8f:d2:9e:c6:35:6a:d3:8e:64:d5: 9b:08:a3:1b:08:03:86:ac:d9:ab:cf:6b:0b:1f:66:e5:83:65: 2e:46:a2:c6:76:d4:fd:80:70:2b:ce:ef:ce:d8:d4:38:f1:01: 03:71:b9:0e:14:8f:32:f9:25:c6:72:96:5f:d7:0f:f8:b4:b9: a9:be:cb:e7:6a:e4:a4:4a:e6:17:8b:5e:41:f5:35:29:7e:47: d5:cb:9a:55:34:8a:db:00:e8:9b:fd:12:47:a4:2c:b6:20:0f: 21:87:2b:a3:60:d9:c5:b5:5b:9c:b1:0b:e8:8c:65:56:73:94: 57:d6:a8:1c:9a:7c:1c:fb:ed:c7:02:1d:fd:5d:2d:4b:9d:48: 91:1e:dd:8e:ab:61:f1:94:bd:8a:90:03:93:91:d1:a8:f0:ad: a6:a9:37:4d:43:fe:0e:2b:2f:93:24:6c:c8:d1:78:b4:2d:26: ab:ac:fc:fb:09:74:4e:27:68:01:b9:bd:ad:36:cf:7e:0d:e6: ff:06:7a:cf:7b:27:20:7b:09:93:03:d1:60:41:55:07:6f:22: f9:60:87:dd:1e:35:03:16:5e:0d:6e:12:60:41:64:4f:00:51: 78:a0:89:1b:1b:f1:2c:a0:32:a7:01:c7:8f:78:91:c5:bb:ea: 97:10:8b:63 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUFOcPZ2Tfq2qCrTUhkEhMnw56u1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwMzFaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDFlODZkODJjNzFlZTc5ZDQzZjI0N2I3MzVkMzg3OGU5MjNjOTY3NjA3ZmE5 MTY5ODQ1MmY2MGIzZDljMzRkZDcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYDB0cDuzURpBRHmYqx4QDtIArQEVXihlKryEWun4vNoxlxx3hENhvGDTJp C7WnEMVaTNGtnsAN57Qeb8nLM0/6bbnoT9m4yCZjzC0eZ1Jc4QKD/u3Nw/1DWHqV Uq/HDAGQ45aQoLxQNe3gTgHItersoWMws3lP2wHVAXN7ONp2t6H8HdDfI1MnAW1S HmexxO1BHsCvC9BKWtm+x126giLyUfVq/Q3nzzOu7iLyk+oduQwsCK6tnZSO2omL A2LUmx2AULW8lLKaf5mdBUIFr/MGLL+32YnVRPVELTIA7RwzXbC1j07WpyJdRlKO tD9J9+PyQd/PNhG4Mn/18Ool1AUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQoJvPU ObjOltGkAzKbLT7iwYKuZTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MTYzMzdkYjAtODQyMC00MGYwLTk4MmItOWQ1MGMyMGY0ZTA4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5/jAN BgkqhkiG9w0BAQsFAAOCAQEAVeHMQ0XGvkmP0p7GNWrTjmTVmwijGwgDhqzZq89r Cx9m5YNlLkaixnbU/YBwK87vztjUOPEBA3G5DhSPMvklxnKWX9cP+LS5qb7L52rk pErmF4teQfU1KX5H1cuaVTSK2wDom/0SR6QstiAPIYcro2DZxbVbnLEL6IxlVnOU V9aoHJp8HPvtxwId/V0tS51IkR7djqth8ZS9ipADk5HRqPCtpqk3TUP+DisvkyRs yNF4tC0mq6z8+wl0TidoAbm9rTbPfg3m/wZ6z3snIHsJkwPRYEFVB28i+WCH3R41 AxZeDW4SYEFkTwBReKCJGxvxLKAypwHHj3iRxbvqlxCLYw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:18 2025 by rpki-client