This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa File: 3558ad32-215e-47a4-9f5b-477ec71e940f.roa (raw, json) Hash identifier: 7dIDQopmrFDTFpbVVf89sI9VxLjdDQ8pLLIy7o/UdgM= Subject key identifier: 2D:01:B7:AB:3B:D3:BC:81:36:C5:97:BF:2C:62:D2:70:71:DA:D1:5D Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 2FDCC36D72EF515BD3511EC656B4A491C508537B Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa Signing time: Wed 10 Dec 2025 06:40:18 +0000 ROA not before: Wed 10 Dec 2025 06:40:18 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a01:578:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:dc:c3:6d:72:ef:51:5b:d3:51:1e:c6:56:b4:a4:91:c5:08:53:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 10 06:40:18 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=909a4454c6b28433db6cd7b5bdb2a167f5b908de16be8affbd35c0feeee9ce63, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:9c:56:cd:a6:27:a9:a0:bc:99:0c:70:f0: 80:f8:52:3f:1c:eb:82:11:66:85:95:15:4f:45:2d: c1:7c:e4:3d:a7:ae:36:a4:7d:10:bc:65:03:d4:57: 43:e8:04:25:b5:77:8c:b9:05:07:ef:90:1c:1c:4e: 2d:9c:c6:13:79:60:7a:e6:c1:f4:bf:b4:b9:e7:90: de:0e:cd:ea:53:17:13:55:5d:a6:bf:73:4d:3c:ac: d1:fd:a7:11:ba:ea:d4:4b:6b:a2:fc:16:83:79:84: e0:68:e6:bc:fc:57:e5:1f:56:7f:32:42:f0:bc:d0: b7:7c:03:50:56:60:8a:3f:c3:f5:c6:4a:08:b5:e3: 28:98:d2:8a:bd:ac:36:26:f1:a0:96:93:f1:8e:06: 95:04:11:bd:42:7d:ac:41:b1:3b:70:9d:1f:4d:0f: 87:a7:48:42:6b:3e:7f:73:26:48:33:9f:02:51:92: fc:27:c1:36:28:b7:37:e8:37:0a:52:87:d2:f4:aa: 9b:16:ba:fa:92:96:14:cd:71:d7:ac:28:d6:1d:fa: 5b:34:82:9a:8f:83:ac:e6:4d:ca:58:b5:1f:e2:da: 81:6d:7c:cb:b2:3e:2a:dd:9b:2a:7f:c9:73:5a:fd: 9e:02:39:14:f9:27:0b:e2:26:2c:54:4c:c1:be:ff: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:01:B7:AB:3B:D3:BC:81:36:C5:97:BF:2C:62:D2:70:71:DA:D1:5D X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:578:3::/48 Signature Algorithm: sha256WithRSAEncryption 9d:2f:85:c4:d9:ae:a2:2b:bf:88:fb:03:72:80:f4:dc:b9:4d: 28:63:24:a4:c5:b9:54:e0:d7:b4:30:d2:96:13:bc:94:14:c1: f0:21:16:47:5d:a6:99:e9:e2:ad:5d:cd:e6:f9:77:1d:7f:89: 35:53:b1:d4:b2:c7:85:6c:25:87:85:ce:68:9e:60:d2:79:51: f2:9c:3e:be:90:34:21:91:0b:c1:ac:59:68:26:3f:9b:6c:b6: 7f:5a:4f:df:ec:7e:69:9c:eb:01:9d:0d:3e:8b:cf:d7:e4:b0: ef:44:92:5c:4e:91:15:95:e1:e6:6c:8e:7d:ce:d8:6f:9a:d1: c0:6d:a3:99:f9:0b:25:0c:f6:ee:c1:1f:f7:00:c7:a5:6b:cf: 9f:54:8e:99:dd:65:af:1a:f4:5f:82:44:fd:9a:78:c9:c2:5a: 8c:2d:ea:63:a3:f7:f1:14:8a:16:ae:12:e5:fe:c0:1d:9f:73: c0:6a:23:20:f0:ed:8c:33:67:17:27:ab:fb:6a:18:23:bf:b8: 1a:94:16:6d:f1:95:83:a1:1e:71:ad:d8:1e:5b:db:0e:83:84: 24:3b:1a:b8:b3:1a:f3:bf:92:68:53:cd:66:e2:79:04:52:e0: 74:67:6d:31:2c:3f:cf:07:da:75:cd:8a:e3:73:39:63:73:36: 84:7d:65:bb -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUL9zDbXLvUVvTUR7GVrSkkcUIU3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTAwNjQwMThaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDkwOWE0NDU0YzZiMjg0MzNkYjZjZDdiNWJkYjJhMTY3ZjViOTA4ZGUxNmJl OGFmZmJkMzVjMGZlZWVlOWNlNjMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANB+nFbNpiepoLyZDHDwgPhSPxzrghFmhZUVT0UtwXzkPaeuNqR9ELxlA9RX Q+gEJbV3jLkFB++QHBxOLZzGE3lgeubB9L+0ueeQ3g7N6lMXE1Vdpr9zTTys0f2n Ebrq1EtrovwWg3mE4GjmvPxX5R9WfzJC8LzQt3wDUFZgij/D9cZKCLXjKJjSir2s NibxoJaT8Y4GlQQRvUJ9rEGxO3CdH00Ph6dIQms+f3MmSDOfAlGS/CfBNii3N+g3 ClKH0vSqmxa6+pKWFM1x16wo1h36WzSCmo+DrOZNyli1H+LagW18y7I+Kt2bKn/J c1r9ngI5FPknC+ImLFRMwb7/c4kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQtAber O9O8gTbFl78sYtJwcdrRXTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv MzU1OGFkMzItMjE1ZS00N2E0LTlmNWItNDc3ZWM3MWU5NDBmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBBXgA AzANBgkqhkiG9w0BAQsFAAOCAQEAnS+FxNmuoiu/iPsDcoD03LlNKGMkpMW5VODX tDDSlhO8lBTB8CEWR12mmenirV3N5vl3HX+JNVOx1LLHhWwlh4XOaJ5g0nlR8pw+ vpA0IZELwaxZaCY/m2y2f1pP3+x+aZzrAZ0NPovP1+Sw70SSXE6RFZXh5myOfc7Y b5rRwG2jmfkLJQz27sEf9wDHpWvPn1SOmd1lrxr0X4JE/Zp4ycJajC3qY6P38RSK Fq4S5f7AHZ9zwGojIPDtjDNnFyer+2oYI7+4GpQWbfGVg6Eeca3YHlvbDoOEJDsa uLMa87+SaFPNZuJ5BFLgdGdtMSw/zwfadc2K43M5Y3M2hH1luw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:52 2025 by rpki-client