This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa File: 226b8c83-9647-47e2-847b-1787f3d54040.roa (raw, json) Hash identifier: CGJrObtxLIHOXLAVTMvBd2H/QuNvlmTR3lsxPbPOVIE= Subject key identifier: 74:39:5C:73:53:A6:4D:2D:6A:01:AD:84:9C:4A:9C:31:02:A7:DA:08 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 1C30B889599F02F9334BCAE35024CE9BA8902239 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa Signing time: Tue 18 Nov 2025 00:40:29 +0000 ROA not before: Tue 18 Nov 2025 00:40:29 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.94.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:30:b8:89:59:9f:02:f9:33:4b:ca:e3:50:24:ce:9b:a8:90:22:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 18 00:40:29 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=ce6033456c1f5c359384d95960ff35d85c6c93a2da564a7ba35b445d68bb0b98, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5e:d0:88:31:32:d8:47:a4:2d:20:15:ff:3f: 09:de:0f:e1:c0:2d:ab:e6:97:49:a3:06:f9:ff:58: 40:4d:29:fe:18:6d:b0:3f:1f:56:3e:0e:67:ba:30: 78:bc:b5:12:e8:59:95:d8:88:c1:97:17:b2:09:83: 6a:54:93:e0:71:c5:07:5d:a8:26:8b:e7:9a:27:38: 75:b4:63:e5:54:e7:9c:a0:a2:10:5d:f2:83:5a:90: 34:04:79:0f:90:b6:b4:00:35:18:a2:40:c8:45:2c: 5f:a0:ec:a5:07:ea:fe:38:ee:47:f8:80:38:fb:d1: 6d:42:c7:ce:c8:fa:66:1a:5d:5a:80:1e:88:e3:83: 11:f9:34:68:6c:91:58:b0:11:f5:b1:8e:34:d1:c3: 0f:f3:6b:ae:25:ff:3e:4c:e4:59:7c:1d:27:07:5e: 93:9e:7e:de:2c:49:19:29:41:7b:a6:58:0d:ce:fb: 70:d6:23:dc:2a:ec:6d:0a:25:a1:25:20:1b:70:2c: e8:5d:13:7f:88:d6:86:a1:f6:9f:63:04:b9:0a:81: fc:fa:b9:0c:70:dc:90:d3:11:f4:d8:fb:3b:a3:92: 4f:94:7e:f8:0e:59:98:40:90:b0:14:c1:f0:b1:b4: 7c:94:aa:14:3a:51:c1:3f:87:29:5e:e3:4e:46:af: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:5C:73:53:A6:4D:2D:6A:01:AD:84:9C:4A:9C:31:02:A7:DA:08 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.94.0.0/15 Signature Algorithm: sha256WithRSAEncryption 30:4e:35:a0:bb:a0:6f:05:ab:b3:03:ec:28:f5:03:b6:da:a5: d2:24:31:fa:a3:ca:21:e1:8d:b7:0b:bf:54:03:3b:d1:ac:83: e8:06:08:d2:2e:8b:80:98:0e:75:c1:be:27:25:61:a4:89:db: b9:20:e5:9c:42:b8:18:2d:bd:01:19:36:53:1c:89:28:69:f4: 4e:3c:ae:10:e7:9a:11:e0:79:06:20:84:ff:04:9b:e3:be:eb: 23:cd:2d:c4:5a:4e:7d:86:6e:a4:fb:61:37:30:69:2a:cc:5b: 8f:0e:e0:4c:a1:53:07:85:40:93:4b:23:12:23:a6:c8:40:66: 7f:5f:78:9a:dd:32:2a:5b:d0:92:0e:7e:94:80:a5:99:15:f4: 92:b6:36:53:4c:33:0a:b3:32:82:f3:ce:71:08:96:7f:ae:d6: e1:a0:c5:1b:f4:cc:9d:3a:00:76:2d:9b:4e:c2:44:74:9a:80: 82:39:b6:8f:36:c3:e7:1f:57:d3:dd:1e:6a:15:ba:3f:93:8f: 4a:26:7f:74:ed:bc:03:b4:20:ff:75:1e:56:8a:ae:84:8b:aa: 2f:24:02:75:6a:01:a9:4f:37:74:5e:f6:c0:ba:6e:d8:33:6e: 7f:88:d7:ff:2f:fd:98:6e:bb:40:18:11:49:c1:ee:c1:04:0d: bd:31:b1:c2 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUHDC4iVmfAvkzS8rjUCTOm6iQIjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTgwMDQwMjlaFw0yNjAyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQGNlNjAzMzQ1NmMxZjVjMzU5Mzg0ZDk1OTYwZmYzNWQ4NWM2YzkzYTJkYTU2 NGE3YmEzNWI0NDVkNjhiYjBiOTgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5e0IgxMthHpC0gFf8/Cd4P4cAtq+aXSaMG+f9YQE0p/hhtsD8fVj4OZ7ow eLy1EuhZldiIwZcXsgmDalST4HHFB12oJovnmic4dbRj5VTnnKCiEF3yg1qQNAR5 D5C2tAA1GKJAyEUsX6DspQfq/jjuR/iAOPvRbULHzsj6ZhpdWoAeiOODEfk0aGyR WLAR9bGONNHDD/NrriX/PkzkWXwdJwdek55+3ixJGSlBe6ZYDc77cNYj3CrsbQol oSUgG3As6F0Tf4jWhqH2n2MEuQqB/Pq5DHDckNMR9Nj7O6OST5R++A5ZmECQsBTB 8LG0fJSqFDpRwT+HKV7jTkav17UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR0OVxz U6ZNLWoBrYScSpwxAqfaCDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MjI2YjhjODMtOTY0Ny00N2UyLTg0N2ItMTc4N2YzZDU0MDQwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNeMA0G CSqGSIb3DQEBCwUAA4IBAQAwTjWgu6BvBauzA+wo9QO22qXSJDH6o8oh4Y23C79U AzvRrIPoBgjSLouAmA51wb4nJWGkidu5IOWcQrgYLb0BGTZTHIkoafROPK4Q55oR 4HkGIIT/BJvjvusjzS3EWk59hm6k+2E3MGkqzFuPDuBMoVMHhUCTSyMSI6bIQGZ/ X3ia3TIqW9CSDn6UgKWZFfSStjZTTDMKszKC885xCJZ/rtbhoMUb9MydOgB2LZtO wkR0moCCObaPNsPnH1fT3R5qFbo/k49KJn907bwDtCD/dR5Wiq6Ei6ovJAJ1agGp Tzd0XvbAum7YM25/iNf/L/2YbrtAGBFJwe7BBA29MbHC -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:54 2025 by rpki-client