This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa File: 1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa (raw, json) Hash identifier: km5WlrHzOac5gTAVxVBxEBhXUT1FYnVFXEF/9EETxcU= Subject key identifier: CB:DA:7B:E4:CE:DD:2C:20:D8:41:C9:3D:E5:EF:1F:BF:87:DD:3C:1B Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 43A915D314E9345DE74CEFF25D39C5B473B3E2C5 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa Signing time: Sat 15 Nov 2025 06:50:43 +0000 ROA not before: Sat 15 Nov 2025 06:50:43 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.133.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:15:d3:14:e9:34:5d:e7:4c:ef:f2:5d:39:c5:b4:73:b3:e2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:43 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=36df4615bdb4988c2fae5eea6024b07a004f5420b9d6312e8059a79560fe1f98, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:92:55:db:38:48:ab:ee:fc:d1:b4:75:a6: 08:72:a8:f4:cc:98:30:02:77:3b:75:90:d0:40:ae: 70:20:7f:95:37:6f:0f:f7:c8:f0:e1:0d:03:12:03: 25:94:5c:56:d8:0b:fa:9e:26:41:95:08:90:e6:9b: c7:e0:13:09:98:6b:5e:0f:df:4d:e5:a3:0d:53:b8: 26:6d:77:d6:2f:b2:08:b2:d0:ba:61:3b:96:43:64: c0:02:6e:a4:1a:0c:1e:fd:a0:a1:58:2f:ee:81:53: 59:86:2d:55:43:d4:ee:2d:e8:0d:63:63:34:75:60: 8b:21:b1:2b:ec:27:d4:ff:02:ac:6f:57:26:1e:92: b7:41:7f:bc:bd:5d:d7:cc:e7:3b:bb:8b:8f:03:bc: 33:cb:80:ff:29:ad:04:c3:4f:d9:92:0d:fc:80:15: c2:eb:3c:d0:22:fe:ed:19:09:09:7d:61:ee:1c:5f: 00:7e:58:dc:64:0c:93:9c:3a:9b:c6:fd:2f:78:7a: 32:11:dd:d8:c0:5e:64:27:64:8d:e6:6f:8d:7e:03: cd:c7:06:ae:cb:9f:2d:70:56:95:86:7c:df:6b:db: f3:2a:1e:23:ae:0b:3f:bd:b3:d3:bb:f2:00:d5:01: 08:84:85:d6:8b:c6:05:77:7a:4b:64:5d:3b:a3:d6: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DA:7B:E4:CE:DD:2C:20:D8:41:C9:3D:E5:EF:1F:BF:87:DD:3C:1B X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.133.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:2d:dc:ea:f5:2e:41:4b:8d:7d:7b:67:fb:8c:ec:f0:81:12: f7:fd:6b:3a:d7:3f:d2:8b:50:a6:2d:70:d5:30:43:40:bf:11: dc:b8:dd:e1:ef:ea:ec:d2:fc:54:bc:98:63:74:ef:9c:39:0d: 24:3c:57:b4:b9:9c:64:6f:7b:4f:5c:ed:9f:66:44:44:9a:d5: c8:ce:ad:c8:87:53:25:ea:c7:72:10:61:53:93:20:c8:9b:d3: 4f:00:0e:ed:e7:33:a8:12:00:83:5d:2e:44:5c:31:39:14:01: 02:aa:86:71:96:c7:f6:7d:a7:b1:95:24:ef:80:92:a1:72:6c: 1a:44:4a:53:14:da:b7:8d:b5:e2:87:e3:e6:fe:c6:75:8a:99: 9d:ed:ff:ff:8c:f5:cb:5a:ba:2f:02:0a:47:36:98:d9:d9:dd: 10:4d:f1:cb:12:1f:d9:e9:c0:ad:18:5c:53:f7:4f:2e:d9:ca: 9c:a5:ec:26:12:77:35:80:69:fd:fe:da:ea:ea:df:36:41:8b: f3:09:5f:a9:77:c2:52:50:20:49:95:65:fe:8a:33:19:95:5f: 88:bc:b0:f0:8b:4a:3f:b4:3d:b6:53:1b:64:72:9a:30:3c:7e: ad:ae:01:72:f1:23:ab:6e:1d:51:a9:cb:ae:a2:ba:d3:ad:10: 0d:de:41:59 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUQ6kV0xTpNF3nTO/yXTnFtHOz4sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwNDNaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDM2ZGY0NjE1YmRiNDk4OGMyZmFlNWVlYTYwMjRiMDdhMDA0ZjU0MjBiOWQ2 MzEyZTgwNTlhNzk1NjBmZTFmOTgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxDklXbOEir7vzRtHWmCHKo9MyYMAJ3O3WQ0ECucCB/lTdvD/fI8OENAxID JZRcVtgL+p4mQZUIkOabx+ATCZhrXg/fTeWjDVO4Jm131i+yCLLQumE7lkNkwAJu pBoMHv2goVgv7oFTWYYtVUPU7i3oDWNjNHVgiyGxK+wn1P8CrG9XJh6St0F/vL1d 18znO7uLjwO8M8uA/ymtBMNP2ZIN/IAVwus80CL+7RkJCX1h7hxfAH5Y3GQMk5w6 m8b9L3h6MhHd2MBeZCdkjeZvjX4DzccGrsufLXBWlYZ832vb8yoeI64LP72z07vy ANUBCISF1ovGBXd6S2RdO6PWb1ECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTL2nvk zt0sINhByT3l7x+/h908GzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MWU4NjhlNTUtYjFiNi00N2YyLWIxZDItNmRhZjY0NDYxZmZjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMKFMA0G CSqGSIb3DQEBCwUAA4IBAQB5Ldzq9S5BS419e2f7jOzwgRL3/Ws61z/Si1CmLXDV MENAvxHcuN3h7+rs0vxUvJhjdO+cOQ0kPFe0uZxkb3tPXO2fZkREmtXIzq3Ih1Ml 6sdyEGFTkyDIm9NPAA7t5zOoEgCDXS5EXDE5FAECqoZxlsf2faexlSTvgJKhcmwa REpTFNq3jbXih+Pm/sZ1ipmd7f//jPXLWrovAgpHNpjZ2d0QTfHLEh/Z6cCtGFxT 908u2cqcpewmEnc1gGn9/trq6t82QYvzCV+pd8JSUCBJlWX+ijMZlV+IvLDwi0o/ tD22UxtkcpowPH6trgFy8SOrbh1RqcuuorrTrRAN3kFZ -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:30 2025 by rpki-client