This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa File: 7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa (raw, json) Hash identifier: 68u8/Q+jtGFt8UDF9U8d7no8ekiq52jQukluOkEpxuU= Subject key identifier: 41:09:AA:60:75:12:F3:6E:7F:64:94:AF:CE:58:69:E0:08:92:ED:F4 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 1F9E3BE45B3E4830EC25E4BAB08876DDCEE4A699 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa Signing time: Sat 15 Nov 2025 06:50:20 +0000 ROA not before: Sat 15 Nov 2025 06:50:20 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.65.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9e:3b:e4:5b:3e:48:30:ec:25:e4:ba:b0:88:76:dd:ce:e4:a6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:20 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=644faf408c96772b402c6b9ef12b1af27310d93231a7f63b438b51a1d6870269, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:15:01:c3:16:e7:5f:c4:86:1c:6a:d6:5e: 38:29:65:7b:69:97:0a:6a:4a:17:ec:39:77:62:3c: 3f:eb:72:35:7b:5a:77:cb:fe:bf:a9:2b:4f:30:68: 77:35:b6:ec:18:7a:42:c5:e1:32:15:d5:c0:1f:cd: 04:dc:a5:50:1e:ce:58:2c:2a:a6:e0:62:bb:4f:7a: a8:bb:92:3f:b8:48:8b:70:20:29:77:3f:e6:80:fb: 90:31:95:a0:dc:91:f5:fa:32:36:af:cb:0a:18:68: 8d:d6:4c:2b:d0:8d:ec:08:1c:46:55:e5:08:ed:50: e8:d2:da:c0:65:a1:fb:f1:ad:7f:a0:43:6d:5c:73: 50:7a:28:c7:22:ca:7d:5f:b3:b5:11:c2:07:b8:f3: 28:9d:7a:82:29:32:58:ae:55:53:d2:5d:db:11:61: 64:79:de:02:d0:24:0d:c3:9a:48:79:c8:1a:fc:65: ba:d8:c8:ff:2c:80:cb:df:17:a1:69:ea:17:a4:ea: f1:37:50:6c:cf:ad:40:3d:d2:c9:74:9e:9f:de:b2: 6e:84:a5:e2:9e:3e:27:1e:8d:71:71:af:c2:67:7f: af:d3:ca:ad:f6:d1:ec:81:45:8a:0c:da:97:04:99: b7:11:2e:a9:51:db:ab:ab:10:da:48:e1:75:b3:0d: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:09:AA:60:75:12:F3:6E:7F:64:94:AF:CE:58:69:E0:08:92:ED:F4 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.65.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:87:77:df:02:6c:14:f9:45:09:52:96:68:16:b0:f4:a1:73: b3:cd:6c:0a:2e:53:84:03:7f:d7:cc:99:8b:ca:75:44:ef:54: f2:c8:7f:4a:74:b2:f4:32:b0:7e:e5:25:87:69:1d:8a:47:05: 50:16:01:4d:5c:57:58:78:39:19:f6:57:16:7f:45:70:50:44: 34:e1:5f:8a:0b:0e:5e:ad:46:45:d8:d9:8e:49:35:0b:77:38: c5:0d:01:cc:58:b3:d0:84:85:38:30:7c:14:f2:0d:96:a9:de: 5f:08:4c:cb:5f:ef:cc:15:8f:54:a7:c9:4c:1d:6f:b8:0e:da: 58:2d:ee:4d:8a:97:17:98:87:0f:21:be:9d:17:ee:de:94:51: cb:4b:af:70:e8:8b:62:2f:46:ad:34:12:97:e9:7c:fa:f8:0a: 06:88:56:fb:4b:41:c8:5e:8b:48:67:9b:e8:f5:2c:54:fb:bf: 72:b8:24:83:6d:6e:1f:28:82:8e:bc:e4:34:83:a2:8f:07:3b: ae:39:0b:e1:00:6b:5b:18:ea:df:be:3e:cb:b1:b3:51:b2:c0: e3:8f:47:aa:11:3f:aa:e4:4c:23:00:69:19:08:bf:31:95:d0: ab:18:53:55:b0:d6:16:7b:c5:22:89:81:12:09:a1:03:8d:0d: d2:bd:43:78 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUH5475Fs+SDDsJeS6sIh23c7kppkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwMjBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDY0NGZhZjQwOGM5Njc3MmI0MDJjNmI5ZWYxMmIxYWYyNzMxMGQ5MzIzMWE3 ZjYzYjQzOGI1MWExZDY4NzAyNjkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXWFQHDFudfxIYcatZeOClle2mXCmpKF+w5d2I8P+tyNXtad8v+v6krTzBo dzW27Bh6QsXhMhXVwB/NBNylUB7OWCwqpuBiu096qLuSP7hIi3AgKXc/5oD7kDGV oNyR9foyNq/LChhojdZMK9CN7AgcRlXlCO1Q6NLawGWh+/Gtf6BDbVxzUHooxyLK fV+ztRHCB7jzKJ16gikyWK5VU9Jd2xFhZHneAtAkDcOaSHnIGvxlutjI/yyAy98X oWnqF6Tq8TdQbM+tQD3SyXSen96yboSl4p4+Jx6NcXGvwmd/r9PKrfbR7IFFigza lwSZtxEuqVHbq6sQ2kjhdbMNfvcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRBCapg dRLzbn9klK/OWGngCJLt9DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv N2Y1YzMwZDAtZWZhOC00MWMwLWFhN2QtYzUwMTZlOTMxNWQ1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlBMA0G CSqGSIb3DQEBCwUAA4IBAQAZh3ffAmwU+UUJUpZoFrD0oXOzzWwKLlOEA3/XzJmL ynVE71TyyH9KdLL0MrB+5SWHaR2KRwVQFgFNXFdYeDkZ9lcWf0VwUEQ04V+KCw5e rUZF2NmOSTULdzjFDQHMWLPQhIU4MHwU8g2Wqd5fCEzLX+/MFY9Up8lMHW+4DtpY Le5NipcXmIcPIb6dF+7elFHLS69w6ItiL0atNBKX6Xz6+AoGiFb7S0HIXotIZ5vo 9SxU+79yuCSDbW4fKIKOvOQ0g6KPBzuuOQvhAGtbGOrfvj7LsbNRssDjj0eqET+q 5EwjAGkZCL8xldCrGFNVsNYWe8UiiYESCaEDjQ3SvUN4 -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:16 2025 by rpki-client