This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa File: 7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa (raw, json) Hash identifier: EhaUgnCgnjjgiy7/kFC3wXKC6t1YJCB/FN/F0sfuZWc= Subject key identifier: A6:C6:8E:00:F7:0A:62:56:05:93:E6:D2:F1:60:5B:96:C2:92:FE:77 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 74BE8F9E6AEE1EEB7DC2E911B668E3422D86DE4A Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa Signing time: Tue 25 Nov 2025 20:10:23 +0000 ROA not before: Tue 25 Nov 2025 20:10:23 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 185.143.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:be:8f:9e:6a:ee:1e:eb:7d:c2:e9:11:b6:68:e3:42:2d:86:de:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 25 20:10:23 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=1a844fb7e13e45f492adcf18ed236c9b9bec6ead69162ea7c8e2c23d685bae23, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:ee:44:73:93:60:8e:53:f8:95:62:ea:29: 95:3f:79:6d:34:34:de:4d:f6:49:fd:1b:7b:6e:14: 84:1b:66:4e:87:fc:08:13:0f:c7:1a:32:b0:25:8d: 05:34:e7:da:04:a6:5d:9d:f4:80:ac:ea:8b:4a:8a: 4d:4a:e1:41:7f:3d:86:1e:52:40:9c:26:29:78:e1: b8:dc:64:95:8f:79:4e:6e:47:d3:ce:2d:a1:9e:19: 64:22:25:fc:d0:ec:35:c2:91:05:2e:e2:6d:c5:d6: 4c:a2:29:0a:2f:bb:6b:b2:bc:fc:83:c0:d2:3c:d9: 33:c6:e9:b4:47:e4:d2:83:20:95:66:c1:66:da:91: 9b:0f:49:32:2c:ee:51:52:05:d8:22:86:1b:ac:fb: a5:91:de:20:dc:af:43:3f:b6:26:8c:cc:01:c3:5b: 42:ef:47:56:76:fa:04:69:14:18:cf:e6:9a:a1:ea: bb:c7:08:12:e5:9e:3a:a9:42:40:45:b6:9e:ee:c9: 02:7b:a1:68:4f:3a:bb:c2:43:0b:4d:3f:a0:08:3b: 41:7f:b9:f1:c5:04:ca:69:f5:c4:f4:2f:09:62:fc: 78:57:a4:72:a4:24:7f:d3:ff:03:22:e9:c1:4f:06: 0f:93:1a:3e:7a:12:da:89:0b:a0:34:d7:63:7f:da: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C6:8E:00:F7:0A:62:56:05:93:E6:D2:F1:60:5B:96:C2:92:FE:77 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.16.0/22 Signature Algorithm: sha256WithRSAEncryption c1:b7:bd:33:ff:4e:ad:ef:e7:9d:ce:e7:71:7c:a3:26:5a:4a: 7f:cb:9a:c6:40:fb:b5:92:04:55:26:c6:89:0d:a6:fe:c2:f9: 3e:4e:ac:f9:04:af:93:36:56:02:7a:be:a2:4f:a0:42:2b:60: 8c:32:be:f1:5e:d8:7d:e6:3b:24:48:32:b3:a9:fe:0a:bb:ac: 89:8a:db:09:c2:45:5c:5f:51:49:9d:0a:2a:5e:6c:37:52:8b: ce:17:bb:49:b7:f8:a7:67:44:c8:b1:a8:ce:29:67:7c:b6:2f: 8d:f2:73:54:4d:92:60:56:78:82:1d:8e:05:e1:93:e3:11:17: b3:e1:d5:9e:3c:fb:5a:ec:45:38:67:62:e5:98:8b:75:1d:e7: 74:09:33:ac:98:ff:dc:23:2a:7d:4c:49:2f:dd:6d:a5:01:50: 14:45:69:92:81:e4:87:7b:29:fa:bb:80:dc:64:d6:49:15:3d: 22:fc:62:35:ce:8f:24:64:39:3b:8c:a4:df:ba:43:e3:ee:26: c3:ce:8e:bf:03:fc:18:39:ff:e1:74:9a:15:09:e7:f4:2e:83: 53:01:09:45:fb:c2:b6:3c:35:b5:e4:f7:54:57:38:21:09:77: 31:be:a1:2c:c5:1f:be:b5:3b:2d:e2:5e:0a:68:e8:be:04:d0: 5e:e9:dc:17 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUdL6PnmruHut9wukRtmjjQi2G3kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMjUyMDEwMjNaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDFhODQ0ZmI3ZTEzZTQ1ZjQ5MmFkY2YxOGVkMjM2YzliOWJlYzZlYWQ2OTE2 MmVhN2M4ZTJjMjNkNjg1YmFlMjMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC67kRzk2COU/iVYuoplT95bTQ03k32Sf0be24UhBtmTof8CBMPxxoysCWN BTTn2gSmXZ30gKzqi0qKTUrhQX89hh5SQJwmKXjhuNxklY95Tm5H084toZ4ZZCIl /NDsNcKRBS7ibcXWTKIpCi+7a7K8/IPA0jzZM8bptEfk0oMglWbBZtqRmw9JMizu UVIF2CKGG6z7pZHeINyvQz+2JozMAcNbQu9HVnb6BGkUGM/mmqHqu8cIEuWeOqlC QEW2nu7JAnuhaE86u8JDC00/oAg7QX+58cUEymn1xPQvCWL8eFekcqQkf9P/AyLp wU8GD5MaPnoS2okLoDTXY3/akdkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSmxo4A 9wpiVgWT5tLxYFuWwpL+dzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv N2E5ZDQ5NzAtOGU5Yy00ZDExLWExYzYtNzcyYTU3MTMzNGZkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmPEDAN BgkqhkiG9w0BAQsFAAOCAQEAwbe9M/9Ore/nnc7ncXyjJlpKf8uaxkD7tZIEVSbG iQ2m/sL5Pk6s+QSvkzZWAnq+ok+gQitgjDK+8V7YfeY7JEgys6n+CrusiYrbCcJF XF9RSZ0KKl5sN1KLzhe7Sbf4p2dEyLGozilnfLYvjfJzVE2SYFZ4gh2OBeGT4xEX s+HVnjz7WuxFOGdi5ZiLdR3ndAkzrJj/3CMqfUxJL91tpQFQFEVpkoHkh3sp+ruA 3GTWSRU9IvxiNc6PJGQ5O4yk37pD4+4mw86OvwP8GDn/4XSaFQnn9C6DUwEJRfvC tjw1teT3VFc4IQl3Mb6hLMUfvrU7LeJeCmjovgTQXuncFw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:22 2025 by rpki-client